Privacy Policy – #bio

General Privacy Statement #Influencer

Last Updated: [ 12/04/2025]

Who We Are
#bio is a creator and influencer platform operated by Hashtag Influencer™ Pte. Ltd. (“Hashtag Influencer”, “#bio”, “we”, “us” or “our”). #bio enables users to create public influencer bio pages, manage campaigns, complete identity verification (KYC), receive payments, access rewards, and generate or publish social media content through integrated tools.

This Privacy Policy (“Policy”) explains how we collect, use, share, and protect personal information when you visit our websites, download or use our mobile or web applications (including apps distributed through the Apple App Store, Google Play Store, or Samsung Galaxy Store), create or manage a #bio page, complete KYC via Sumsub.com, participate in campaigns, or otherwise interact with us.

For California residents, see the California Privacy Notice section.
For EEA/UK residents, see the Legal Bases section.

Table of Contents
‍
1 - Policy Coverage
2 - Definition of Personal Information
3 - What Personal Data We Collect and Why‍
4 - Legal Bases for Processing (EEA/UK and similar jurisdictions)‍
5 - Additional Platform-Required Disclosures (Google, Apple, Samsung)
6 - Who We Share Your Data With‍
7 - Third-Party Providers & Cross-Border Transfers‍
8 - How Long We Retain Your Data‍
9 - Your Rights and Choices‍
10 - Cookies and Similar Technologies‍
11 - California Privacy Notice‍
12 - Additional Information‍
13 - Contact Information

1. Policy Coverage

This Policy applies when you:
‍
• Visit #bio pages or our websites
• Download or use #bio mobile/web applications
• Create or manage influencer or brand profiles
• Generate, upload, or publish social media content
• Complete identity verification (KYC) through Subsum
• Make or receive payments, rewards, or payouts
• Communicate with us or submit support requests
• Subscribe to newsletters, product updates, or surveys

Because we operate globally, your information may be transferred to countries with different data protection laws. Where required, we apply safeguards such as Standard Contractual Clauses, encryption, and vendor due diligence.

We collect only the data necessary to operate #bio’s core features, and we avoid requesting permissions or information that are not essential to the service.

2. Definition of Personal Information

“Personal information” means any information that identifies, relates to, or can reasonably be associated with an identifiable individual. This includes:
‍
• Name, username, display name
• Email, phone, address
• Profile images, videos, portfolios
• Social media handles and URLs
• IP address, device IDs, diagnostics
• Payment and payout data
• KYC documents, government IDs, verification images (via Subsum)
• Behavior and engagement metrics
• AI prompt data and generated content metadata

Information that is anonymized and cannot be linked to an individual is not considered personal information.

3. What Personal Data We Collect and Why

3.1 Influencer & Brand Profile Data

We collect information you provide when creating a #bio profile:
‍
• Name, display name, pronouns
• Bio and descriptions
• Images, banners, logos
• Social media usernames, URLs
• Rate cards, pricing
• Portfolio content
• Niches, categories, interests
• Contact and booking preferences

Purpose: To display your public #bio profile, enable brand collaborations, and allow fans and followers to access your content.
‍
Visibility: Your profile and related media may be publicly visible. Please avoid uploading sensitive personal information you do not want displayed.

3.2 Account, Authentication & Security

We collect:
‍
• Email, username, encrypted password
• Multi-factor or Web3 wallet authentication
• Sign-in metadata (device, IP address)
• Identity data for KYC via Subsum

Purpose: To create and secure your account, verify identity, prevent fraud, maintain platform integrity, and comply with legal obligations such as AML/KYC requirements.

KYC Note:
KYC data is processed under Subsum’s regulatory obligations and retained only for legally required periods.

3.3 Communications & Support Data

Includes:
‍
• Emails, chats, support tickets
• Survey responses, onboarding feedback
• Marketing preferences

Purpose: To respond to support inquiries, improve #bio, send service notifications, and—where permitted—send marketing communications.

3.4 Payments, Payouts & Financial Information

Processed securely via partners such as PayPal, Alt 5 Sigma, Tremendous, Lightworks, and others depending on region.

We collect:
‍
• Billing name, address, tax data
• Payment method tokens
• Transaction history
• Payout account details
• Fraud and AML screening information

Purpose: To process payments, send payouts, maintain financial records, prevent fraud, and comply with financial regulations.
We do not store full payment card numbers.

3.5 Technical, Device & Usage Data

Automatically collected:
‍
• IP address, device IDs
• OS version, device model
• Browser type, language, time zone
• Buttons clicked, screens viewed
• Crash reports, diagnostics
• Campaign and engagement interactions

Purpose: To operate, secure, improve, and optimize the app; meet Apple/Google/Samsung performance expectations; and detect fraud or abuse.

3.6 Permissions Required by the App

#bio may request access to:
‍
• Camera (profile images, content creation)
• Photos/Media (portfolio uploads, AI content generation)
• Microphone (voice/video interactions, if any)
• Notifications (campaign alerts, updates)

You may revoke permissions at any time in device settings.
We do not access permissions without clear disclosure or consent.

3.7 AI and Social Media Content Generation

If you use AI-assisted tools or social publishing:

We collect:
‍
• Prompts, captions, uploaded media
• Generated outputs (images, videos, text)
• Scheduling and platform metadata
• Engagement metrics (where available)

Purpose: To provide content creation, editing, scheduling, optimization, and analytics.
Ownership: You retain full ownership of your original content and media.
Assurance: We do not use AI to analyze personal characteristics or sensitive traits without consent.

3.8 Data from Connected Third-Party Services

If you connect third-party accounts:
‍
• Social media APIs
• Web3 wallets
• Domain providers
• AI tools
• Creator income platforms
• Affiliate systems

We receive only the data you authorize.

3.9 No Unauthorized Data Collection

We do not use hidden tracking, device fingerprinting, undisclosed background data collection, or any covert monitoring mechanisms.

We do not sell personal information or share data with brokers or advertising networks for cross-app tracking.

4. Legal Bases for Processing (EEA/UK)

We rely on:
‍
• Performance of a contract
• Legitimate interests (security, analytics, fraud prevention)
• Consent (marketing, cookies, optional integrations)
• Legal obligations (KYC/AML, tax, accounting)

You may withdraw consent at any time without affecting prior processing.

5. Additional Platform-Required Disclosures

5.1 Google Play

We comply with:
‍
• Google Data Safety Form disclosure rules
• In-app account deletion
• Prominent permission notices
• No background data collection without justification
• Data minimization and transparency

All data practices in this Policy match our Google Play disclosures.

5.2 Apple App Store

We comply with:
‍
• App Privacy Nutrition Label requirements
• Sign in with Apple (if social logins exist)
• Prohibited API restrictions
• Camera/photo/microphone permission prompts
• Clear data linking vs. not linking
• In-app account deletion (Guideline 5.1.1(v))

All disclosures in this Policy match our App Store privacy label.

5.3 Samsung Galaxy Store

We comply with:
‍
• Samsung app privacy and permission rules
• Required disclosures for data access
• Device privacy settings
• Accuracy and transparency of listing metadata
• No hidden tracking or unauthorized data sharing

6. Who We Share Your Data With

We do not sell personal information.

We share only with:

1 - Service providers (hosting, KYC, payments, analytics)
2 - Affiliates/subsidiaries
3 - Integrations you choose to connect
4 - Professional advisers (legal, compliance, accounting)
5 - Authorities (when required by law or safety)
6 - Business transferees (merger/acquisition)
‍
All service providers must follow strict confidentiality and security obligations.

7. Third-Party Providers & Cross-Border Transfers

Your data may be processed by:
‍
• Cloud hosting and database providers
• Analytics, crash reporting, and diagnostics tools
• Subsum (regulated KYC provider)
• Payment processors and payout platforms
• Real-time communication SDKs
• AI content systems
• Affiliate and social posting APIs
• Web3/blockchain infrastructure

We use:
‍
• Standard Contractual Clauses
• Encryption
• Vendor security audits
• Data minimization practices

All SDKs are configured to disable optional tracking by default unless you explicitly consent.

8. How Long We Retain Your Data

We retain data:
‍
• As long as your account is active
• As required for financial and regulatory purposes
• For legal KYC/AML retention periods (typically 3–7 years)
• For dispute resolution and fraud prevention
• In backups for limited, secure durations

If you delete your account, we delete or anonymize your data unless legally required to retain it.

9. Your Rights and Choices

You may have rights including:
‍
• Access
• Correction
• Deletion
• Objection
• Restriction
• Data portability
• Withdraw consent
• Opt out of marketing

We take steps to ensure your information is accurate, and you are responsible for keeping your profile updated.

‍In-App Account Deletion (Apple + Google Requirement)
You can delete your account at any time:
Account → Settings → Delete Account

Deletion removes or anonymizes your personal information unless retention is required by law.

‍Device-Level Permission Controls
You may revoke permissions at:
• iOS: Settings → #bio
• Android/Samsung: Settings → Apps → #bio → Permissions

10. Cookies and Similar Technologies

We use:
‍
• Essential cookies
• Analytics cookies
• Preference cookies

Where legally required (e.g., EU), we ask for consent before using non-essential cookies.Manage cookies through:
‍
• Browser settings
• Device settings
• Consent banner (where applicable)

11. California Privacy Notice

Categories of Data Collected
‍
Identifiers, billing data, analytics, geolocation (approximate), KYC data, and professional information.

‍Sale or Sharing
‍
We do not sell your data.
Some analytics tools may qualify as “sharing,” and you may request to opt out.

‍Your Rights
‍
Know, delete, correct, opt-out of sharing, and non-discrimination.

12. Additional Information

12.1 Data Security

We use encryption, access controls, monitoring, and vendor risk assessments to secure your data.

12.2 Children

#bio is not for individuals under 13 (or regional digital consent age).
We use checks to prevent underage users from creating accounts.

12.3 Automated Decision-Making

We use limited automation to:
‍
• Detect fraud
• Maintain security
• Provide recommendations
• Improve user experience
You may object where permitted by law.

12.4 Privacy Dispute Resolution

If you believe your privacy request was not handled properly, you may request escalation to our Data Protection Officer. We respond within required timeframes.