Privacy Policy — Starfay

Last updated: August 8, 2026

This Privacy Policy describes how Starfay ("Starfay", "we", "us", or "our"), collects, uses, stores, and shares information when you use the Starfay platform at starfayglobal.com ("Platform").

By using the Platform, you agree to the collection and use of your information as described in this Privacy Policy.

1. Information We Collect

1.1 Information you provide directly

• Account information: name, email address, password, and account type (Brand or Creator)
• Profile information: display name, bio, niche, pricing, social media links, profile photo, and AI influencer details
• Payment information: billing details processed through Stripe. We do not store your full card number — all payment data is handled directly by Stripe
• Subscription information: your VIP subscription status, renewal date, and Stripe customer identifier. As with payment cards, Starfay does not store card numbers; Stripe processes and stores all subscription payment data
• Communications: messages sent through the Platform's messaging system, contract details, dispute descriptions, and reviews
• Ambassador applications: pitch content submitted when applying to the Ambassador program

1.2 Information collected automatically

• Usage data: pages visited, features used, time spent on the Platform, clicks, and search queries
• Device and technical data: IP address, browser type, operating system, device identifiers, and referring URLs
• Cookies and similar technologies: we use cookies and local storage to maintain your session, remember your language preference, and analyze usage patterns

1.3 Information from third parties

• Google OAuth: if you sign in with Google, we receive your name, email address, and profile picture from Google
• Stripe: we receive payment status, transaction identifiers, and Stripe Connect account status from Stripe to manage payouts to Creators

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Facilitate connections and collaboration agreements between Brands and Creators
• Process payments and manage escrow through Stripe
• Send transactional emails (contract updates, payment confirmations, dispute notifications)
• Operate the affiliate and ambassador programs
• Detect and prevent fraud, abuse, and violations of our Terms and Conditions
• Improve the Platform's features, performance, and user experience
• Comply with applicable legal obligations
• Evaluate Ambassador applications using automated AI-assisted analysis (GPT-4 powered scoring), with human review available upon request

3. Legal Basis for Processing (for EEA/UK Users)

If you are located in the European Economic Area or the United Kingdom, our legal basis for processing your personal data includes:

• Contract performance: processing necessary to provide the Platform's services
• Legitimate interests: fraud prevention, platform security, and improving our services
• Consent: where you have explicitly agreed to specific processing, such as marketing communications
• Legal obligation: where we are required to process data to comply with applicable law

4. How We Share Your Information

We do not sell your personal data. We may share your information with:

• Stripe: to process contract payments, manage payouts, handle Connect onboarding, and process VIP subscription billing. Stripe's Privacy Policy is available at stripe.com/privacy
• Supabase: our database and authentication provider, which stores your account and platform data
• Resend: our email delivery provider, which processes your email address to send transactional emails
• OpenAI: Ambassador application pitches are analyzed using OpenAI's API. Please refer to OpenAI's Privacy Policy at openai.com/privacy
• Law enforcement or regulators: where required by applicable law, court order, or governmental authority
• Business transfers: in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction

All third-party providers are contractually required to handle your data in accordance with applicable privacy laws.

5. Public Listing Data

Information included in public listings is visible to all users of the Platform, including unregistered visitors. What is published depends on the type of listing:

• AI influencer listings: the character's name, description, niche, follower count, pricing, and images.
• AI creator service listings: your display name, profile photo, headline, description, the AI tools you work with, portfolio samples, and pricing.
• Human influencer listings: your display name, profile photo, headline, biography, niche, follower count, links to your social media accounts, pricing, and any metrics screenshots you choose to upload. Because this listing describes a real person, please review carefully what you publish, and do not upload screenshots containing information you do not wish to make public.

You can hide any listing from the marketplace at any time from your dashboard.

6. Messaging and Contract Data

Messages exchanged between Brands and Creators through the Platform are stored to facilitate the collaboration process and for dispute resolution purposes. We do not read private messages except when required to investigate a reported dispute or violation of our Terms.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the Platform's services. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal, tax, or fraud prevention purposes.

Transaction records and contract data may be retained for up to 7 years for accounting and legal compliance purposes.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Rectification: request correction of inaccurate or incomplete data
• Erasure: request deletion of your personal data ("right to be forgotten")
• Portability: request your data in a structured, machine-readable format
• Objection: object to certain types of processing, including profiling
• Restriction: request that we limit how we use your data

To exercise any of these rights, please contact us at legal@starfayglobal.com. We will respond within 30 days.

9. Cookies and Tracking Technologies

We use the following types of cookies and local storage:

• Essential: required for the Platform to function (session management, authentication)
• Preference: remember your settings, such as your language preference (starfay_locale)
• Analytics: help us understand how users interact with the Platform (aggregated and anonymized)

You can control cookies through your browser settings. Disabling essential cookies may affect the Platform's functionality.

10. Language Detection

Our hosting infrastructure provider (Cloudflare) supplies a country code derived from your IP address in the request header (cf-ipcountry). We use that code to automatically serve the Platform in your preferred language (English, Spanish, Portuguese, or Japanese). We do not send your IP address to any third-party service for language or country detection, and we do not store your IP address on our servers beyond what is automatically logged by our hosting infrastructure.

11. Children's Privacy

The Platform is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account on the Platform, please contact us at legal@starfayglobal.com and we will promptly delete the account and associated data.

12. International Data Transfers

The Platform is hosted on Lovable Cloud, which relies on third-party infrastructure providers (including Supabase) to store and process data. Depending on the provider's configuration, your information may be stored or processed in data centres located in different countries, and we do not guarantee processing in any specific country or region. Payment data is processed by Stripe, and AI-assisted features send the relevant content to OpenAI for processing. Where personal data of users located in the European Economic Area, the United Kingdom, or other jurisdictions with data transfer restrictions is transferred outside those regions, we rely on the safeguards offered by the respective processors. You may contact us at the address in Section 15 to request further information about the processors we use.

13. Security

We implement industry-standard security measures to protect your personal data, including encryption in transit (HTTPS), secure authentication, and access controls. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through a prominent notice on the Platform. Your continued use of the Platform after such notification constitutes your acceptance of the updated Privacy Policy.

15. Contact

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us at:

Starfay
Email: legal@starfayglobal.com
Website: https://starfayglobal.com

This Privacy Policy is effective as of the date listed above and applies to all users of the Starfay platform.