Privacy Policy

1. What we collect

• Account: your email address (used to sign in with one-time codes and to send notifications).
• Profile: name, username, profile photo link, bio, country, city/region, languages, timezone (read from your device, used for deadlines), and whether you are a creator or a brand.
• Creator details: content category and types, sponsorship preferences, and social accounts you add — handle, link, follower/subscriber count and average views.
• Official connections (optional): if you connect YouTube or Instagram, we receive your channel/account ID, name, follower count, recent videos or posts, and their public view, like and comment counts. We use the access token once to read these and do not store it; YouTube access is revoked immediately.
• Brand details: company name, website, industry, description, and — if you request verification — registered business name, optional GSTIN and your role.
• Activity: campaigns, applications (including requested fees), messages, offers and counteroffers, agreed terms, submitted content links, saved items, notifications, reports and blocks.
• Safety data: verification codes, account restrictions, and records of actions taken by our admins.
• Browser storage: your sign-in session is stored in your browser so you stay logged in. We do not use analytics, advertising or tracking cookies.

2. Why we use it

• To create and secure your account and let you sign in.
• To show your profile and campaigns to other users, and to calculate explained match scores and price guidance.
• To let creators and brands message, negotiate and manage collaborations.
• To send in-app and email notifications about your applications, offers, content and deadlines.
• To prevent fraud, spam and abuse — for example flagging scam-like messages, unusual stats or mass-applying — and to review reports.
• To draft an application pitch when you ask our AI helper (see section 4).

We use your data because you give consent when you create an account, and to provide the service you asked for. We do not sell your personal data or use it for advertising.

3. What other users can see

• Public: creator profiles (name, username, photo, bio, location, languages, category, platforms and their stats, recent videos/posts from connected accounts), media kits, and open campaigns. These pages can appear in search engines.
• Only the other party: your applications, messages, offers and collaboration details are visible only to the brand or creator involved (and to our admins when investigating a report).
• Never shown publicly: your email address, GSTIN and verification details.

4. Service providers we share data with

• Macaly and Convex — hosting, database and backend. Our database is hosted in the European Union (Ireland).
• GitHub Pages — serves the Cube3 website files.
• Email delivery through our hosting provider's built-in email service.
• AI pitch helper — only when you press "Draft my pitch", your profile facts and the campaign details are sent to an AI model provider through our hosting provider's AI gateway to generate a draft.
• Google (YouTube) and Meta (Instagram) — only if you choose to connect those accounts.

Some providers process data outside India. We only share what each needs to provide its service. We may also disclose data if required by law.

5. How long we keep it

• Account and profile data: while your account is active.
• When you delete your account (or ask us to): we delete or anonymise your profile, social accounts and saved items within 30 days. Messages and agreed terms you exchanged with another user may be kept in anonymised form so their records stay intact, and reports or safety records may be kept as long as needed to prevent abuse or meet legal obligations.

6. Your rights

Under the DPDP Act you can:

• ask for a summary of the personal data we hold about you;
• correct or update it (most of it you can edit yourself in your profile);
• withdraw consent and delete your account yourself (Profile → Delete account), or ask us to do it;
• turn off email notifications in your profile;
• nominate someone to exercise these rights for you in case of death or incapacity;
• raise a grievance with us, and if unresolved, with the Data Protection Board of India.

Email boya16573@gmail.com from your account email address. We will respond within 30 days.

7. Users outside India

European Union, EEA and United Kingdom (GDPR / UK GDPR). We process your data on these legal bases: to perform our contract with you (running your account, matching, messaging and collaborations); your consent (optional features such as email notifications, the AI pitch helper and platform connections — you can withdraw it at any time); and our legitimate interests in keeping Cube3 safe (fraud and spam prevention, reviewing reports). You have the right to access, correct, delete, restrict or object to processing of your data, to receive a copy in a portable format, and to complain to your local data protection authority. Your data is stored in the EU (Ireland); some providers may process it in other countries, including India and the United States, using safeguards such as standard contractual clauses where required.

United States, including California. We do not sell your personal information or share it for cross-context behavioural advertising. You can request access to or deletion of your data as described in section 6.

Everywhere else. We apply the rights in section 6 to all users. If your local law gives you additional rights, contact us and we will honour them.

8. Age

Cube3 is only for people aged 18 or older (or the age of majority where you live, if higher). We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will remove it.

9. Security

Sign-in uses one-time email codes (no passwords to steal). Access to private data is checked on our servers for every request, secret keys never go to your browser, and messages are shown as plain text with warnings on suspicious links. No system is perfectly secure; if we learn of a breach affecting you, we will notify you and the authorities as the law requires. Cube3 will never ask for your password, OTP or a fee.

10. Grievance Officer

Cube3 Grievance Officer — boya16573@gmail.com

11. Changes

If we change this policy in a way that matters, we will tell you in the app before it takes effect. The "Last updated" date above shows the current version.