Privacy Policy — Starfay

Last updated: June 14, 2026

This Privacy Policy describes how Starfay LLC, a Wyoming limited liability company ("Starfay", "we", "us", or "our"), collects, uses, stores, and shares information when you use the Starfay platform at starfayglobal.com ("Platform").

By using the Platform, you agree to the collection and use of your information as described in this Privacy Policy.

1. Information We Collect

1.1 Information you provide directly

• Account information: name, email address, password, and account type (Brand or Creator)
• Profile information: display name, bio, niche, pricing, social media links, profile photo, and AI influencer details
• Payment information: billing details processed through Stripe. We do not store your full card number — all payment data is handled directly by Stripe
• Communications: messages sent through the Platform's messaging system, contract details, dispute descriptions, and reviews
• Ambassador applications: pitch content submitted when applying to the Ambassador program

1.2 Information collected automatically

• Usage data: pages visited, features used, time spent on the Platform, clicks, and search queries
• Device and technical data: IP address, browser type, operating system, device identifiers, and referring URLs
• Cookies and similar technologies: we use cookies and local storage to maintain your session, remember your language preference, and analyze usage patterns

1.3 Information from third parties

• Google OAuth: if you sign in with Google, we receive your name, email address, and profile picture from Google
• Stripe: we receive payment status, transaction identifiers, and Stripe Connect account status from Stripe to manage payouts to Creators

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Facilitate connections and collaboration agreements between Brands and Creators
• Process payments and manage escrow through Stripe
• Send transactional emails (contract updates, payment confirmations, dispute notifications)
• Operate the affiliate and ambassador programs
• Detect and prevent fraud, abuse, and violations of our Terms and Conditions
• Improve the Platform's features, performance, and user experience
• Comply with applicable legal obligations
• Evaluate Ambassador applications using automated AI-assisted analysis (GPT-4 powered scoring), with human review available upon request

3. Legal Basis for Processing (for EEA/UK Users)

If you are located in the European Economic Area or the United Kingdom, our legal basis for processing your personal data includes:

• Contract performance: processing necessary to provide the Platform's services
• Legitimate interests: fraud prevention, platform security, and improving our services
• Consent: where you have explicitly agreed to specific processing, such as marketing communications
• Legal obligation: where we are required to process data to comply with applicable law

4. How We Share Your Information

We do not sell your personal data. We may share your information with:

• Stripe: to process payments, manage payouts, and handle Connect onboarding. Stripe's Privacy Policy is available at stripe.com/privacy
• Supabase: our database and authentication provider, which stores your account and platform data
• Resend: our email delivery provider, which processes your email address to send transactional emails
• OpenAI: Ambassador application pitches are analyzed using OpenAI's API. Please refer to OpenAI's Privacy Policy at openai.com/privacy
• Law enforcement or regulators: where required by applicable law, court order, or governmental authority
• Business transfers: in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction

All third-party providers are contractually required to handle your data in accordance with applicable privacy laws.

5. Creator Profile Data

Information included in Creator listings — including AI influencer name, description, niche, follower count, pricing, and photo — is publicly visible to all users of the Platform, including unregistered visitors. Please do not include sensitive personal information in your public listing.

6. Messaging and Contract Data

Messages exchanged between Brands and Creators through the Platform are stored to facilitate the collaboration process and for dispute resolution purposes. We do not read private messages except when required to investigate a reported dispute or violation of our Terms.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the Platform's services. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal, tax, or fraud prevention purposes.

Transaction records and contract data may be retained for up to 7 years for accounting and legal compliance purposes.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Rectification: request correction of inaccurate or incomplete data
• Erasure: request deletion of your personal data ("right to be forgotten")
• Portability: request your data in a structured, machine-readable format
• Objection: object to certain types of processing, including profiling
• Restriction: request that we limit how we use your data

To exercise any of these rights, please contact us at legal@starfayglobal.com. We will respond within 30 days.

9. Cookies and Tracking Technologies

We use the following types of cookies and local storage:

• Essential: required for the Platform to function (session management, authentication)
• Preference: remember your settings, such as your language preference (starfay_locale)
• Analytics: help us understand how users interact with the Platform (aggregated and anonymized)

You can control cookies through your browser settings. Disabling essential cookies may affect the Platform's functionality.

10. Language Detection

We use your IP address (via ipapi.co) to detect your country and automatically serve the Platform in your preferred language (English, Spanish, or Portuguese). This IP lookup is performed once per session and the result is stored locally in your browser. We do not store your IP address on our servers beyond what is automatically logged by our hosting infrastructure.

11. Children's Privacy

The Platform is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account on the Platform, please contact us at legal@starfayglobal.com and we will promptly delete the account and associated data.

12. International Data Transfers

Starfay LLC is based in the United States. If you access the Platform from outside the United States, your data will be transferred to and processed in the United States. We take appropriate measures to ensure that such transfers comply with applicable data protection laws.

13. Security

We implement industry-standard security measures to protect your personal data, including encryption in transit (HTTPS), secure authentication, and access controls. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through a prominent notice on the Platform. Your continued use of the Platform after such notification constitutes your acceptance of the updated Privacy Policy.

15. Contact

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us at:

Starfay LLC
Email: legal@starfayglobal.com
Website: https://starfayglobal.com

This Privacy Policy is effective as of the date listed above and applies to all users of the Starfay platform.