DATA PRIVACY & COOKIE POLICY

1. Overview & Scope

Jamal Abu Halaka, trading as Trivaro (“we”, “our”, “us”) respects your privacy and is dedicated to securing the personal information collected from brand clients, partner creators, website visitors, and portal operators. This Privacy Policy details how we collect, process, store, and safeguard your data in compliance with the Swiss Federal Act on Data Protection (FADP) and the European General Data Protection Regulation (GDPR).

2. Information We Collect

We collect information strictly necessary to facilitate high-performance influencer marketing operations and client communications:

• Commercial Contact Data: Name, professional work email, brand title, company name, telephone number, and billing details.
• Creator Performance Data: Publicly available social media metrics, content handles, engagement rates, verified niche categories, and audience geographic breakdowns.
• Campaign Operations Data: Brief submissions, video draft cut reviews, contract milestones, and communication logs.
• Technical Log Telemetry: IP addresses, browser types, session timestamps, and encrypted authentication cookies.

3. Lawful Basis & Purposes for Processing

Under Swiss FADP and European GDPR, we process personal information on the following lawful bases:

• Contractual Necessity: To fulfill campaign deliverables, process verified payouts, and manage talent bookings.
• Legitimate Interests: To evaluate creator authenticity, safeguard against bot fraud, and optimize campaign ROI for brand partners.
• Legal Compliance: To maintain standard financial, taxation, and statutory accounting records.

4. Data Sharing & Third-Party Processors

We never sell or rent user or creator data. Data is shared solely with trusted operational sub-processors under strict Data Processing Agreements (DPAs):

• Cloud Database Infrastructure (Supabase / AWS Switzerland & EU data centers)
• Secure Email Transmission Gateways (Encrypted SMTP / API delivery)
• Accounting & Commercial Banking Desks for verified milestone settlements

5. Data Subject Rights (Swiss FADP & GDPR)

You maintain full statutory rights under European and Swiss data protection legislation:

• The right to access your stored personal information.
• The right to request rectification of inaccurate records.
• The right to request erasure (“right to be forgotten”).
• The right to object to or restrict processing.
• The right to data portability.

To exercise any of these rights, contact our Data Protection Officer at contact@trivaro.com.

6. Security Measures & Retention

We maintain multi-tier security defenses, including end-to-end TLS encryption, row-level database security policies (RLS), and continuous vulnerability monitoring. Personal data is retained solely for the period required to execute active campaigns and comply with statutory legal retention requirements.

7. Legal Contact & Compliance Office

For privacy inquiries, GDPR/FADP requests, or formal communications: