Privacy Policy for Echo

Last Updated:

1. Overview Echo is committed to protecting your privacy while operating across the United States and the United Kingdom. This policy explains our data practices in compliance with the UK General Data Protection Regulation (UK GDPR) and the California Consumer Privacy Act (CCPA/CPRA).

2. Information We Collect

Directly from You: Names, professional email addresses, and account credentials.
Via Social Media APIs: When Creators connect their accounts, we collect public profile data, handles, follower counts, engagement stats, and historical post data for AI-driven vetting and safety auditing.
Technical Data: IP addresses, browser types, and usage patterns via cookies.

3. How We Use Your Data We process your information to provide our marketplace services under the legal bases of Contractual Necessity and Legitimate Interest. Specifically:

To match Brands with relevant, safe, and authentic Creators.
To perform automated brand safety audits on Creator content history.
To verify that live content meets campaign brief requirements (e.g., hashtag detection).

4. Data Sharing We share Creator performance metrics and AI-generated "Safety Scores" with potential Brand partners. We do not sell personal data to third parties for independent marketing.

5. International Data Transfers As we operate in the US and UK, your data may be stored or processed in either jurisdiction. We ensure that such transfers are protected by standard contractual clauses or other legally recognized safeguards.

6. Your Rights

UK/EEA Users: You have the right to access, rectify, or erase your data, and the right to object to processing.
California Users: You have the right to know what personal information is collected and the right to request deletion. To exercise these rights, contact our Privacy Team at [Insert Email].

7. Third-Party Platforms Our services rely on integrations with Instagram, TikTok, and YouTube. We are not responsible for the privacy practices of these third-party platforms.