Privacy notice

Privacy Policy

This policy explains what personal data LetzCreators processes, on what legal basis, and the rights you have under the GDPR (Regulation (EU) 2016/679).

Last updated: October 2026

01Data controller

The controller responsible for the processing of your personal data on this platform is:

Daumedia S.à r.l.-S
13, Rue de la Fontaine, L-3768 Tétange, Luxembourg
support@letzcreators.lu

02What data we process and why

Account data Contract

When you register we store your name, email address and an encrypted password to create and secure your account and to provide the service.

Session & security cookies Legitimate interest

We set strictly necessary cookies for login, staying logged in and CSRF protection. See our Cookie Policy →

Public creator profiles Legitimate interest

To power our discovery and analytics features we collect publicly available information from Instagram and TikTok profiles (e.g. handle, follower counts, public posts and engagement). We process this on the basis of our legitimate interest in operating an influencer discovery platform. Creators can ask us to remove their profile at any time.

Newsletter & waitlist Consent

If you sign up for our newsletter or a plan waitlist, your email address is stored and synced to our email provider. The waitlist form also asks a few optional questions (your role, topics of interest, platforms, budget range, how often you run campaigns, first name and company); whatever you choose to answer is stored alongside your address and synced too. You can unsubscribe at any time.

Automated content analysis Legitimate interest

Public post captions are sent to a language-model provider to classify content (e.g. niche, cooperations, discount codes). No account login data is included in this processing.

03Service providers we use

We work with carefully selected providers who process data on our behalf as processors under Art. 28 GDPR:

Provider Purpose
Cloudways / DigitalOcean Hosting and infrastructure of the platform and database.
Hostinger Hosting and infrastructure of the platform and database.
Hetzner Object Storage Object storage (EU, Germany) for post images captured from public profiles.
Apify Collection of publicly available Instagram and TikTok profile data.
OpenRouter Automated analysis and classification of public post captions.
Mollie Processing your payment. For this step Mollie acts as an independent controller under its own privacy terms.
Mollie Creating, numbering, rendering and sending your invoice. For this step Mollie acts as our processor. We transmit your name or company name, address, country, email, language, your VAT number where applicable, and the invoice line items — nothing about your use of the platform.
Brevo Sending newsletters and managing waitlist subscriptions, including segmenting subscribers by the optional details they provided.
Google Fonts Web fonts are loaded from Google servers, which receive your IP address when a page loads.
Transfers outside the EU

Some of these providers may process data outside the European Union. In those cases transfers are safeguarded by EU Standard Contractual Clauses or an equivalent adequacy mechanism.

A copy of every invoice stays with our invoicing provider

Once an invoice is issued, a copy remains with Mollie. We cannot delete it there, and because invoices are subject to a statutory retention period, we may not delete our own copy either. Any request for access will name this recipient.

04Internal usage statistics

We record anonymised events about how the platform is used — pages opened, features triggered, searches that returned nothing — in order to improve the product and detect malfunctions. The results are only ever viewed as aggregate figures.

Legal basis
Our legitimate interest in developing the service in line with actual demand (Art. 6(1)(f) GDPR).
What is stored
The event name, an optional reference to your account, a pseudonymised session identifier and a handful of technical details such as the plan or the search term used.
Retention
Events are deleted automatically after 400 days.
Disclosure
This data stays on our own infrastructure and is not passed on to third parties.

IP addresses and browser identifiers are never stored. You can object to this processing at any time using the contact details above.

05How long we keep data

We keep personal data only as long as necessary for the purposes described above or as required by law. Account data is deleted when you close your account; newsletter data until you unsubscribe.

06Your rights

Under the GDPR you have the following rights regarding your personal data:

  • Right of access to your personal data
  • Right to rectification of inaccurate data
  • Right to erasure (the right to be forgotten)
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing based on legitimate interest
  • Right to withdraw consent at any time

Supervisory authority

If you believe your data is being processed unlawfully, you have the right to lodge a complaint with the Luxembourg supervisory authority:

Commission nationale pour la protection des données (CNPD)
cnpd.public.lu