Privacy Policy

CircleX (“CircleX”, “we”, “us”) operates a platform for creator discovery, collaboration, and campaign management. For privacy questions, contact us at privacy@withcirclex.in.

We collect only what we need to run the marketplace:

• Account data — name, email, phone, role (creator or brand), and authentication identifiers.
• Creator profile — bio, location, languages, content niches, contact preferences, collaboration types, portfolio items, and (optional) rate cards.
• Meta-connected data (only if you connect Instagram/Facebook) — your public profile (username, profile picture), aggregate follower/following counts, media metadata, and aggregate performance insights such as reach, impressions, average views, and audience demographics.
• Platform activity — campaigns, applications, content pieces, messages, transactions, and events you participate in.
• Public landing activity — page views, primary action clicks, campaign tags, and the referring hostname. For anonymous counts and abuse prevention, we store a salted visitor hash that changes each day rather than the raw address in the analytics record.
• Handle claims — if you reserve a handle on our landing page: the handle, your email, up to three content niches, your founding number and whether you agreed to marketing email. Used to hold your handle, contact you about access and count founding spots; never shown publicly except on a card you choose to share.
• Technical data — device, IP address, and basic logs for security and reliability.

• To create your verified creator profile and auto-generate your media kit.
• To let brands discover, evaluate, shortlist, and invite creators using authenticated analytics.
• To operate campaigns — applications, content pieces, escrow, payments, and messaging.
• To understand which public landing journeys help creators and brands reach the right next step.
• To keep the platform secure, prevent fraud, and meet legal obligations.

We do not sell your data, and we do not use Meta-connected data for anything outside creator discovery and campaign management.

• Access is granted by you via Meta OAuth; you choose which account to connect.
• Access tokens are encrypted at rest and are never exposed to your browser or app.
• We sync approved profile and aggregate performance metrics to power your profile and media kit.
• Syncing stops immediately when you disconnect or revoke access.

Data is stored on managed cloud infrastructure with encryption in transit and at rest. Access tokens are encrypted with dedicated keys and are accessible only to server-side jobs. See our Security Policy for details.

We retain profile and analytics data while your account is active. When you disconnect a social account we stop syncing immediately and delete stored access tokens. When you delete your account, we remove your personal data and social data, retaining only records we are legally required to keep (for example, financial/transaction records). Anonymous landing analytics are retained only for product reporting and abuse prevention, without an account identifier or raw IP address in the analytics record.

• Disconnect any social account at any time from your profile settings.
• Request export or deletion of your data via our Data Deletion page.
• Update or correct your profile information at any time.
• Contact us to ask how your data is used.

To request deletion, visit withcirclex.in/data-deletion.

Verified analytics and your media kit are shown to brands on the platform for discovery and collaboration. We share data with service providers (hosting, payments) strictly to operate the service. We never sell creator data to third parties.

We may update this policy; material changes will be reflected by the “Last updated” date above and, where appropriate, an in-product notice.