Privacy Policy

1. What Data We Collect

We collect the following information when you use Identity Kit:

Account information:

• Name and email address (when you sign up)
• Google account information (if you use Google sign-in: name, email, profile photo)
• Username you choose for your public profile

Profile information you provide:

• Profile photo and portfolio images/videos
• Creator niche, city, language, and bio
• Social media handles and platform URLs
• Follower counts, engagement rates, and audience demographics you self-report
• Brand collaboration history and rate card pricing
• Skills, awards, and other creator information

Automatically collected data:

• IP address and approximate location (country/city level)
• Device type and browser type
• Pages visited and time spent on the Platform
• Profile view counts (aggregated, not individual viewer identity)

2. How We Use Your Data

We use your data to:

• Create and display your public creator profile
• Generate AI-powered bio, media kit, and CV content using the information you provide
• Allow you to log in and manage your account
• Send you important account notifications (not marketing unless you opt in)
• Improve the Platform by understanding how it is used
• Detect and prevent fraud, abuse, or violations of our Terms of Service
• Comply with legal obligations

We do not use your data to:

• Sell it to brands, agencies, or any third party
• Show you ads (the Platform is currently ad-free)
• Profile you for purposes beyond running the Platform

3. What Is Public vs Private

Since your profile is designed to be shared with brands, most of the information you enter becomes public. Please only add information you are comfortable sharing publicly.

4. Data Sharing & Third Parties

We use the following third-party services to run the Platform:

• Supabase — Database and authentication. Your account and profile data is stored here. Supabase is GDPR-compliant.
• Cloudflare R2 — Storage for your portfolio images and videos. Files are stored in Cloudflare's global CDN.
• Anthropic Claude API — AI used to generate your bio and profile content. Only the information you enter in the form is sent to the AI. This data is not retained by Anthropic for training purposes under our enterprise agreement.
• Vercel — Hosting platform. Your requests pass through Vercel's servers.
• Google OAuth — If you sign in with Google. We receive only your name, email, and profile photo.
• Razorpay — Payment processing (when paid plans are active). We do not store your card details — Razorpay handles all payment data.

We may disclose your data if required by law, court order, or to protect the rights, property, or safety of Identity Kit, its users, or the public.

We will never sell your personal data to any third party.

5. Cookies & Tracking

We use minimal cookies necessary to run the Platform:

• Authentication cookies — To keep you logged in (session management via Supabase Auth)
• Preference cookies — To remember your settings

We do not use third-party advertising cookies. We do not use Facebook Pixel, Google Ads remarketing, or similar advertising trackers.

You can disable cookies in your browser settings, but this may prevent you from logging in to the Platform.

6. Data Storage & Security

Your data is stored on servers provided by Supabase and Cloudflare. Both use industry-standard security measures including encryption at rest and in transit (HTTPS/TLS).

We implement reasonable technical and organizational security measures. However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

We retain your data for as long as your account is active, or as needed to provide the Services. If you delete your account, we will delete your personal data within 30 days, subject to legal retention obligations.

7. Your Rights

You have the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you
• Correction — Update or correct inaccurate information (you can do this directly through the Platform)
• Deletion — Delete your account and associated data at any time through your dashboard, or by emailing anilprajapati2667@gmail.com
• Portability — Request an export of your profile data in a machine-readable format
• Objection — Object to processing of your data for certain purposes
• Opt-out of communications — Unsubscribe from any non-essential emails at any time

To exercise any of these rights, contact us at anilprajapati2667@gmail.com. We will respond within 30 days.

8. Children's Privacy

The Platform is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided personal data to us, please contact us at anilprajapati2667@gmail.com and we will delete such information.

Users between 13 and 18 years of age may use the Platform with verifiable parental consent.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email and by displaying a notice on the Platform.

The "last updated" date at the top of this page will always reflect when the most recent changes were made. We encourage you to review this policy periodically.

Your continued use of the Platform after changes are made constitutes your acceptance of the updated Privacy Policy.

10. Contact Us

For any privacy-related questions, concerns, or requests, please contact us:

• Email: anilprajapati2667@gmail.com
• General contact: identitykit.in/contact or WhatsApp +91 79842 66725

We take privacy seriously and will respond to all legitimate requests within 30 days.