Privacy Policy.

1. Who's collecting

Mai Influence Limited (“Mai Influence”, “we”) is the data controller for personal data processed on this Platform. We're registered in Hong Kong. You can reach us at hello@maiinfluence.com.

2. What we collect

• Account data: name, email, phone, role, password hash (we never see your actual password).
• Talent profile: photos, measurements, languages, social handles, bio, date of birth, nationality, city, rate.
• Payout details: PromptPay ID or Thai bank account name + number, used to send your monthly payout.
• Brand data: company name, logo, brand members, brief content, shortlists, messages with talent.
• Payment data: Stripe Checkout session IDs, payment intent IDs, charge amounts, status. We do not store card numbers — Stripe does that.
• Usage data: pages viewed, swipe actions, timestamps, browser type. We use this for product improvement and fraud signals.

3. Why we collect it

To run the marketplace: match brands with talent, process payments, send payouts, deliver in-app notifications, and keep records for tax and audit. We also use aggregated, anonymised usage data to improve the product.

4. Who we share it with

• Other Platform users — your profile is visible to brands you've been shortlisted on; brand briefs are visible to shortlisted talent. Direct messages are visible only to the parties in the thread and the agency.
• Stripe— for payment processing and refund handling. Stripe's own privacy policy applies to data they hold.
• Supabase — our hosting and database provider. Data is stored in their ap-southeast-1 region (Singapore).
• Vercel — application hosting. Logs and runtime data flow through them.
• Tax & legal authorities — only when compelled by valid legal process.

We do not sell your data, ever.

5. How long we keep it

Active account data for as long as your account is open. Closed accounts: we retain transaction records (project total, payment intent IDs, payout batches) for 7 years to meet HK accounting requirements, then delete. Personal identifiers tied to those records are minimised after account closure.

6. Your rights

You can:

• Access the data we hold on you
• Correct anything that's wrong
• Download a copy of your account data (request via email)
• Delete your account (subject to the retention window for transaction records noted above)
• Object to specific processing

Email hello@maiinfluence.com and we'll respond within 30 days.

7. Cookies

We use a small number of cookies: one for your auth session (required to keep you signed in) and analytics cookies to understand which pages get used. No third-party advertising cookies.

8. Security

Data in transit uses TLS. Data at rest is encrypted at the database level. Access to production data is limited to the founding team and is logged. We do not have access to your card number — Stripe holds that.

9. Children

The Platform is not intended for children under 18 to use directly. Talent under 18 must be onboarded by a parent or legal guardian, who is the account holder.

10. Changes

We'll update this policy when we change how we handle data. Material changes will be notified by email.