Privacy Policy

1. Who we are

ProfileZone is operated by Tilin Inc., registered at 16192 Coastal Highway, Lewes, Delaware, USA. We are the data controller for the personal data described below. For anything in this policy, write to privacy@profilezone.io.

2. What we collect

When you create an account

Your email address and a password. Passwords are stored by our authentication provider as a salted hash — we never hold the password itself and cannot read it.

When you apply as an account owner

Account owners hand over more than anyone else on the platform, so this list is exhaustive on purpose:

• Your full name, city and country.
• Your profile photo, headline and the description you write about yourself.
• The social profiles you list: the URL, platform, follower or connection count, and account age.
• If you offer freelance services: your skills, services, hourly rate and availability.
• Payout details. The method you choose and the details it needs, including a cryptocurrency wallet address where that is how you are paid.
• The typed signature you enter when you accept the account owner agreement, together with the date.
• The IP address and browser user-agent recorded at the moment you submit the application. We keep these as evidence of who agreed to what, and for fraud checks.

When you apply as a business

• Your first and last name, job title, phone number and work email.
• Your company name, website, industry and team size.
• Your budget range, the platforms you are interested in and what you intend to use them for.
• The IP address and user-agent recorded when you submit, as above.

When you rent an account

• The rental record: which account, which term, the agreed rate and the dates.
• The brief you write for the account owner, which that account owner can read.
• Payment data is handled by Stripe, not by us. Card numbers are entered on Stripe's own checkout page and never reach our servers. We receive back a payment reference, the amount, and whether it succeeded.

When you contact us

Support tickets and contact messages, including whatever you choose to put in them, and the email address we reply to.

3. What we don’t do

4. Why we hold it

• To perform the contract. We cannot run a rental without knowing who the parties are, what was agreed and where to send the money.
• To verify identity. The platform's premise is that account owners are real, identified people. Verification exists to protect the businesses renting and the owners themselves.
• To prevent fraud and abuse. IP addresses, user-agents and application records let us spot duplicate or fraudulent signups.
• To meet legal and tax obligations, including keeping records of payments made.

5. Who we share it with

We use a small number of processors, each for one job:

• Supabase — our database, file storage and authentication.
• Vercel — hosting for the website itself.
• Stripe — card payments. Stripe is a controller in its own right for the payment data it collects.

We also share data between the two sides of a rental, which is the point of the service:

• A business browsing the marketplace sees an account owner’s first name and last initial, location, headline, listed profile metrics and photo.
• Once a rental starts, each side sees what the contract needs: the owner reads the brief, the business sees who they have engaged.
• Account owners never see a client’s payment details, and clients never see an owner’s payout details.

We will disclose data to law enforcement or a regulator where we are legally required to, and to professional advisors where necessary. We will not hand over your data because someone merely asks.

6. How long we keep it

• Account and profile data — while your account is open, and for 30 days after you close it.
• Rental and payment records — for as long as tax and accounting law requires us to keep them, which is longer than your account may last.
• Signed agreements, with their IP and timestamp — for the life of the agreement plus any limitation period that applies to it.
• Support messages — two years from the last reply.
• Rejected applications — six months, so we are not re-reviewing the same application repeatedly.

7. Your rights

Depending on where you live, you have some or all of the following rights. We apply them to everyone rather than checking your address first:

• Access — ask for a copy of what we hold about you.
• Correction — have anything inaccurate fixed. Most of it you can edit yourself in your dashboard.
• Deletion — have your data erased, except where we are legally required to keep a record (payments, mainly).
• Portability — receive your data in a machine-readable form.
• Objection and restriction — object to a particular use, or ask us to pause it while a dispute is resolved.
• Complaint — complain to your local data protection authority. We would rather you came to us first, but it is your right either way.

Write to privacy@profilezone.io. We will respond within 30 days, and we will not charge you for it.

8. Cookies

We set cookies for one purpose: keeping you signed in. They hold your session so that moving between pages does not log you out. There are no advertising, analytics or profiling cookies on this site, which is why you have not been shown a consent banner — there is nothing to consent to beyond the cookies that make signing in work.

Clearing them signs you out. Nothing else breaks.

9. Where your data lives

Our database and file storage are hosted by Supabase in the United States (US East, Northern Virginia), and the site is served by Vercel’s global network. If you are in the UK or the EEA, your data may be transferred outside it to the providers named above, which rely on standard contractual clauses for those transfers.

10. Changes and contact

If we change this policy in a way that affects what we do with data we already hold, we will tell account holders by email rather than quietly editing the page and changing the date.

Questions, requests and complaints: privacy@profilezone.io, or write to us at 16192 Coastal Highway, Lewes, Delaware, USA.