Privacy Policy

Netcore OÜ, a company incorporated in Estonia under registry code 16984312 (VAT EE102615487), with its registered office at Sepapaja tn 6, Tallinn 15551, Estonia (operational offices in Lisbon and Milan), is the data controller for the personal data described in this policy. For any privacy question or to exercise your rights, contact privacy@groupnetcore.com.

This policy explains how we handle personal data of: visitors to our website; business contacts at operators and brands; content creators and influencers we source, evaluate or represent; and people who apply to work with us. It is written to meet the requirements of the EU/UK GDPR.

Depending on your relationship with us, we may process:

• Identity and contact data — name, business email, phone/WhatsApp, company and role;
• Creator profile data — public social handles, follower counts, engagement and reach metrics, audience demographics, content category and market. Much of this is publicly available or provided by you;
• Campaign and performance data — clicks, registrations, deposits and payouts associated with a campaign (via tracking links and postbacks);
• Website data — IP address, device/browser information and usage data collected through cookies and similar technologies (see our Cookie Policy);
• Communications — messages and correspondence with us.

We collect data directly from you; from publicly available sources such as public social-media profiles; and from third-party tools we use to discover and analyse creators (for example, influencer-analytics providers). We do not knowingly collect data of anyone under 18.

We process personal data on the following bases:

• Legitimate interests — to source, evaluate and contact creators for business partnerships, to run and analyse campaigns, and to operate and secure our site. You can object at any time (see “Your rights”);
• Contract — to perform an agreement with a creator, operator or supplier;
• Consent — where we ask for it, for example for marketing communications; you can withdraw it at any time;
• Legal obligation — to comply with tax, accounting and other legal duties.

We share personal data with: operators/brands where a creator is matched to a campaign; service providers acting as our processors under appropriate contracts; and authorities where required by law. We do not sell personal data.

Our main processors are:

• Railway (United States) — hosts our website, our platform and its database;
• Cloudinary (United States) — stores the files uploaded to the platform, such as images, videos and documents;
• Resend (United States) — delivers the emails the platform sends;
• Anthropic (United States) — AI analysis of creator statistics screenshots uploaded to the platform, and classification of public creator profiles (name, handle, follower count and country).

Our website, platform and database are hosted in the United States, and the processors listed above are located there too. Personal data is therefore transferred outside the EEA. For these transfers we rely on the safeguards in each provider’s data processing terms — the European Commission’s Standard Contractual Clauses or, where the provider is certified, the EU–U.S. Data Privacy Framework.

We keep personal data only as long as necessary for the purposes above: for active prospects and partners, for the duration of the relationship and a reasonable period afterwards; for campaign and financial records, for the period required by law. We then delete or anonymise it.

Subject to applicable law, you have the right to access, rectify, erase, restrict or port your data, to object to processing based on legitimate interests, and to withdraw consent. To exercise any right, email privacy@groupnetcore.com. You also have the right to complain to a data protection supervisory authority — our lead authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) — and you may also contact the authority in your own country.

We use a small number of strictly necessary cookies and similar technologies to keep the site and platform working (for example, authentication, security, language and month preferences). We do not use non-essential analytics or marketing cookies, so no consent banner is required.

We use technical and organisational measures to protect personal data, including access controls, encryption in transit and least-privilege access. No system is perfectly secure, but we work to protect your data and to notify you and the authorities of any breach as required by law.

Our site and services are directed at professionals and adults. Campaigns target audiences aged 18 and over. We do not knowingly process the data of minors; if you believe we have, contact us and we will delete it.

We may update this policy. The current version is always the one on this page.

Privacy questions and requests: privacy@groupnetcore.com.