Compliance
What we require of both sides of the marketplace, how we check it, and — just as importantly — the things we have not certified and will not pretend to have.
Last updated 13 October 2026
1. How the model works
ProfileZone connects businesses with people who own established social media accounts and are willing to do outreach through them. Three things define how that works, and they are not negotiable:
- A real person does the work. No bots, no automation tools, no bulk senders.
- Passwords are never shared. Not with the business renting the account, and not with us. The owner runs every campaign from their own device. The client never gets the login.
- The owner keeps control. An account owner can decline a brief, and ending a rental does not cost them their account, because they never gave it away.
This is a marketplace for an owner’s time and reach, not a channel for selling accounts. Permanent transfers of an account are prohibited under our Terms of Service.
2. What “verified” means
A verified badge on a listing means our team has reviewed the application and confirmed that the person is real and that the account they listed is genuinely theirs. It is a human review, not an automated check.
What it does not mean:
- It is not a background check or a criminal records check.
- It is not a guarantee of performance, response rate or commercial outcome.
- It is not a verification badge issued by the social platform itself.
Listed metrics such as follower count and account age are supplied by the account owner and checked against the public profile at the time of review. They can move afterwards.
3. Outreach standards
A business directs the outreach, and is responsible for its content. Both sides are bound by these limits:
- No unsolicited contact in breach of the marketing law that applies where the recipient is — including GDPR and PECR in Europe, CAN-SPAM in the United States, and CASL in Canada.
- No misrepresenting who the sender is, who they work for, or what is being offered.
- No claims about earnings, health or investment returns that cannot be substantiated.
- No harassment, no repeated contact after someone asks to be left alone, no targeting of minors.
- An account owner may refuse any brief, and we would rather they did than send something they think is wrong.
4. Platform rules
Each social platform sets its own terms of use, and those terms are an agreement between the account owner and that platform. We are not a party to them, and nothing we agree with you changes them.
Account owners are responsible for their own compliance with the rules of any platform they list on, and we encourage every owner to read them before listing. Businesses should understand that a platform can restrict an account for its own reasons, at any time, regardless of how carefully everyone here has behaved.
ProfileZone is independent, and is not affiliated with, endorsed by or certified by LinkedIn, X, Instagram, Facebook, TikTok, Reddit, Upwork or any other platform named on this site.
5. Data protection
- We run no advertising trackers, no analytics pixels and no session recorders. Cookies exist to keep you signed in and for nothing else.
- Card details are handled by Stripe and never reach our servers.
- Account owners’ payout details are visible only to the people who need them to pay you, and never to a business renting your account.
- Access, correction, deletion and portability requests are honoured for everyone, not only for people in jurisdictions that mandate them.
The full detail, including exactly what is collected and how long it is kept, is in the Privacy Policy.
6. Payments and payouts
- Businesses pay by card through Stripe. ProfileZone holds the contract and pays the account owner; money does not move directly between the two sides.
- Payouts are reviewed before release. We check that the payout destination matches the verified account owner.
- We do not knowingly do business with individuals or entities subject to sanctions, and we will decline or reverse a payout where we are required to.
7. What we don’t claim
Trust pages tend to collect badges. Here is the honest position: ProfileZone holds no SOC 2 report, no ISO 27001 certification and no PCI attestation of its own. We are a young company and we have not been through those audits.
What is true is that card data is handled entirely by Stripe, which is PCI DSS Level 1 certified, so it never touches our systems. If you need a vendor with a completed audit of its own, we are not that vendor yet, and we would rather you knew now than found out during your security review.
8. Reporting a problem
If you have received outreach from an account you believe is being misused, if you are an account owner being asked to do something that breaks these rules, or if you represent a platform with a concern about activity originating here, write to support@profilezone.io.
Reports are read by a person. Tell us what you saw and when, and we will investigate and act on the account involved where the report is substantiated.