Privacy Policy

Table of Contents

1. Information We Collect
2. How We Use Your Information
3. Data Sharing and Disclosure
4. Your Privacy Rights
5. Data Security
6. International Data Transfers
7. Children's Privacy
8. Changes to This Policy
9. Contact Us

1. Information We Collect

Account Information

When you create an EAFTOS account, we collect your name, email address, company name, and password (stored as a secure hash).

Creator Data

When you upload or connect creator profiles, we collect social media handles, public profile URLs, and publicly available metrics (followers, engagement rates, post data). We do not access private accounts or non-public information.

Usage Data

We automatically collect information about how you interact with EAFTOS, including pages viewed, features used, time spent, and technical data (IP address, browser type, device information).

Cookies and Tracking

We use cookies and similar technologies for authentication, analytics, and to remember your preferences. You can control cookies through your browser settings.

2. How We Use Your Information

We use the information we collect to:

• Provide Our Services: Generate EAFTOS Scores, growth forecasts, and creator analytics.
• Improve Our Platform: Use aggregate, anonymized data to refine our prediction models and algorithms.
• Communicate with You: Send service updates, respond to support requests, and share product announcements (you can opt out anytime).
• Ensure Security: Detect fraud, prevent abuse, and protect the integrity of our platform.
• Comply with Legal Obligations: Respond to legal requests, enforce our terms, and protect rights and safety.

3. Data Sharing and Disclosure

We do not sell your data to third parties.

We may share your information only in the following limited circumstances:

• Service Providers: We use trusted third-party providers for hosting (AWS/DigitalOcean), analytics (Google Analytics), and payment processing (Stripe). These providers are contractually obligated to protect your data.
• Legal Requirements: We may disclose data if required by law, court order, or government regulation.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.
• With Your Consent: We will share your data with third parties only if you explicitly authorize us to do so.

Agency Data is Siloed: Creator data uploaded by one agency is never shared with other agencies or third parties.

4. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request corrections to inaccurate or incomplete data.
• Deletion (Right to be Forgotten): Request deletion of your account and associated data.
• Data Portability: Request an export of your data in a machine-readable format.
• Opt-Out: Unsubscribe from marketing emails at any time.
• Restrict Processing: Request that we limit how we use your data.

To exercise these rights, contact us at privacy@eaftos.com. We will respond within 30 days.

5. Data Security

We take data security seriously and implement industry-standard protections, including:

• Encryption in transit (TLS/SSL) and at rest
• Secure authentication with hashed passwords
• Regular security audits and vulnerability assessments
• Access controls and role-based permissions
• SOC 2 Type II compliance (planned)

While no system is 100% secure, we continuously monitor and improve our security practices.

6. International Data Transfers

EAFTOS is based in the United States. If you access our services from outside the US, your data may be transferred to, stored, and processed in the US or other countries where our service providers operate.

We comply with applicable data protection laws, including GDPR (for EU users) and use Standard Contractual Clauses or other approved mechanisms for international transfers.

7. Children's Privacy

EAFTOS is a business-to-business (B2B) platform and is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children.

If we become aware that we have inadvertently collected data from a child under 13, we will take steps to delete it immediately.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

If we make material changes, we will notify you via email or by posting a prominent notice on our website at least 30 days before the changes take effect.

Your continued use of EAFTOS after changes are effective constitutes acceptance of the updated policy.

9. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: