Privacy Policy

Everyone who signs up: name, email, phone number, password/authentication method (email code or Google sign-in), preferred language, and technical signup data (source, medium, campaign, device type) so we know which marketing effort brought you here.

Clients: the details of a project you post or book (service type, dates, location, budget), and payment/booking records once a project is funded.

Creators (photographers, videographers) and models: everything above, plus your portfolio (photos, videos, bio, rates, categories, languages, years of experience), your city and — if you enter one — a home address and coordinates used only to compute distance to a job. If you go through identity verification, we also process a copy of your Emirates ID and, where applicable, your UAE trade licence — solely to confirm you are who you say you are and legally permitted to trade.

Anyone who messages us: the content of chat-widget conversations, WhatsApp clicks, and — if you use voice input — a recording of your voice message, transcribed to text.

Everyone who visits the site: standard traffic data (pages viewed, referrer, device, approximate location from IP) via Google Analytics, and — only if you explicitly enable it — a browser push-notification subscription (an endpoint and encryption keys your browser generates, not readable by us as personal content).

• To operate the marketplace: match clients with creators, run bookings, process payments, and resolve disputes.
• To verify creator identity and eligibility to trade, where verification is offered.
• To communicate with you: booking updates, OTP codes, support replies, and — only if you opt in — marketing emails, push notifications, or a birthday note.
• To keep the platform safe: fraud/abuse prevention, bot protection on forms, and enforcing our Terms.
• To understand and improve the product: aggregate traffic and conversion analysis, and to measure whether our own advertising is working.
• To meet legal obligations, including UAE consumer-protection and electronic-transaction record-keeping requirements referenced in our Terms.

We do not sell personal data. We share it only with the service providers that make the Platform work, each acting on our instructions:

• Supabase — our database and authentication provider; hosts every table described above.
• Cloudflare (R2) — stores uploaded media and documents (portfolio images/video, verification documents).
• Resend — sends transactional and, where you've consented, marketing email.
• OpenRouter — powers AI features (the guided project-intake chat, voice transcription, document verification, and SEO content generation); relevant text/audio/image content passes through it to generate a response.
• Google — Analytics and Tag Manager (site traffic), Google Ads (once connected, to measure ad performance and, for opted-in conversions, match a booking back to the ad that drove it), and Search Console (organic search performance). See our Connected Platforms page for exactly which are currently live.
• Meta — the Meta Pixel, for advertising measurement and optimisation on Meta's platforms.
• Cloudflare Turnstile — a bot-detection check on signup and intake forms; does not track you for advertising.

When you book a project, your name and contact details are shared with the specific creator (or client) you are matched with — that is the point of the marketplace. We may also disclose data where required by UAE law or a valid legal request.

Our database and file storage are hosted with providers that operate global infrastructure, which can mean data is processed outside the UAE. Where that happens, we rely on our providers' own contractual and security safeguards for the transfer.

We keep account and booking data for as long as your account is active and for a reasonable period after, to meet accounting, tax, and dispute-resolution obligations under UAE law. Verification documents are kept only as long as needed to maintain your verified status, plus the same retention period. You can ask us to delete data that we are not legally required to keep — see Section 7.

Access to personal data is restricted to what each part of the Platform needs (client data, creator documents, and payment records are not all visible to the same systems), transmitted over encrypted connections, and verification documents are stored in access-controlled storage rather than public folders. No system is perfectly secure, and we cannot guarantee absolute security of information transmitted to us.

Under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”), you have the right to request access to the personal data we hold about you, ask us to correct or delete it, object to or restrict certain processing, and withdraw consent for anything we process on that basis (e.g. marketing email or push notifications — you can unsubscribe or turn these off at any time from your account). To exercise any of these rights, contact us via the support channels on the Platform, including WhatsApp support.

We use cookies and equivalent browser storage for essential site function (keeping you signed in), and — where enabled — Google Analytics, Google Tag Manager, and the Meta Pixel for traffic measurement and advertising. You can control cookies through your browser settings; blocking them may affect parts of the site that rely on a signed-in session.

The Platform is intended for users 18 years of age or older and is not directed at children.

We may update this policy from time to time; the version in force at the time you use the Platform is the one that applies. Questions about this policy or your data? Contact us via the support channels on the Platform, including WhatsApp support.