Who we are
CURNT.SOCIAL ("CURNT", "we", "us") is a platform that connects creators with brands. This policy explains what data we collect, why, and how we protect it.
We are based in Sweden and operate under EU General Data Protection Regulation (GDPR).
Contact: curnt.social@gmail.com
What we collect
When you sign up as a creator or a brand, we collect the information you choose to share with us:
Creators
- Email address, full name, city
- Social media handles (Instagram, TikTok, YouTube)
- Featured post URLs you choose to share
- Content niche, main platform, follower range, typical views, audience location
- Whether you use AI tools, have brand experience, or work with management
- Types of partnerships you're interested in
- Any additional notes you provide
Brands
- Work email, full name, company name
- Website and (optional) job role
- Budget range, campaign goals, target platforms and creator categories
- Timeline and any additional notes
Automatically collected
- IP address (for rate limiting and security)
- Timestamp of signup
- Basic browser information sent by your browser (user agent)
How we use your data
- To match you with the right opportunities. Creator data helps us recommend you to brands whose campaigns actually fit. Brand data helps us find creators who fit your audience.
- To contact you. We reach out to creators about relevant opportunities and to brands about their campaigns.
- To operate the service. Basic technical use: preventing abuse, debugging, ensuring signups don't get duplicated.
We do not sell your data. We do not share it with advertisers. We do not use it to train AI models.
Where your data lives
- Vercel hosts our website and stores your signup data in Vercel KV (Redis). Data is hosted in EU regions.
- Anthropic (Claude) is used for AI-powered search inside our internal admin dashboard. When our team searches, only the search query is sent to Anthropic — never your personal data.
- OpenStreetMap Nominatim is used to geocode city names for our internal map view. Only the city name is sent, no personal data.
All service providers are bound by data processing agreements aligned with GDPR.
How long we keep it
We keep your signup data as long as your relationship with CURNT is active. If you ask us to delete your data, we do so within 30 days, except where we're required to retain limited records for legal or accounting purposes.
Rate-limit logs and IP addresses tied to signups are kept for security purposes and rotated periodically.
Your rights
Under GDPR you have the right to:
- Access — request a copy of the data we hold about you
- Correction — ask us to fix inaccurate information
- Deletion — ask us to remove your data ("right to be forgotten")
- Portability — get your data in a machine-readable format
- Object — opt out of certain uses of your data
- Complain — file a complaint with your local data protection authority (in Sweden: Integritetsskyddsmyndigheten, imy.se)
To exercise any of these rights, email us at curnt.social@gmail.com. We respond within 30 days.
Security
We take security seriously:
- All data is transmitted over HTTPS (TLS 1.3)
- Admin dashboard is protected by password authentication and session cookies (HttpOnly, Secure, SameSite=Strict)
- Strict rate limiting to prevent abuse
- Content Security Policy, HSTS and other security headers in place
- Server-side input validation and sanitization on every request
No system is perfectly secure. If you discover a vulnerability, please email curnt.social@gmail.com.
Cookies
CURNT uses only strictly necessary cookies:
- admin_session — used only for our internal admin dashboard authentication. Not set for regular visitors.
We do not use tracking or advertising cookies. No cookie banner is required for our public site because we do not set any non-essential cookies.
Changes to this policy
We may update this policy from time to time as our service evolves. Material changes will be communicated by email to registered users, and the "Last updated" date at the top will reflect the latest change.
Questions
Reach out anytime at curnt.social@gmail.com.