Privacy Policy
This Privacy Policy describes how Daring Spirit Oy, Helsinki, Finland ("Promobeez", "we", "us") processes personal data in connection with the website promobeez.com and related services (the "Service"). We act as the data controller within the meaning of the EU General Data Protection Regulation (GDPR).
In short: we collect what you give us plus limited information that creators publish publicly on social media, we use it only to operate the Service and contact you about it, we never sell your data, and we will delete your profile and all associated personal data on request — just email team@promobeez.com.
1. What Data We Collect
| Category | Examples | Source |
|---|---|---|
| Identity & contact | Name, email address, phone number | Provided by you (signup forms) |
| Business details | Business name, type, website, city, legal entity and Business ID, the name and role of the person acting for the business, their confirmation of authority, brand and franchise approvals and its timestamp, and any evidence of authority or approval they provide | Provided by you |
| Creator details | Social media handle, follower range, city | Provided by you |
| Public social media data | Public profile metrics (e.g. follower counts, engagement), public posts that tag, mention, or geolocate a business on the Service, links to those posts, their publication date and public metrics (views, likes, comments) | Publicly available on third-party platforms (e.g. Instagram, TikTok) |
| Collaboration data | Detected collaborations between a creator and a business on the Service, and the number of them | Derived by us from public social media data |
| Technical data | IP address, browser type, page URL, timestamps | Collected automatically |
| Communications | Emails and messages you send us | Provided by you |
We do not intentionally collect special categories of personal data (e.g. health, political views) and ask you not to submit such data.
2. Purposes and Legal Bases
- Operating the Service — creating and managing accounts, enabling introductions between businesses and creators (Art. 6(1)(b) GDPR — contract / pre-contractual steps).
- Creator analytics and collaboration detection — estimating creator metrics and scores from public content, detecting when a creator and a business who connected through the Service appear to have collaborated, and tracking the public metrics of the related content for a limited period, so that users can see the results of introductions (Art. 6(1)(f) — our and our users’ legitimate interest in a transparent, useful Service). A detected collaboration, including the creator’s public post and its public metrics, is visible only to the business concerned; other users see only an aggregate count next to the business’s offer, without identifying any creator. This involves limited profiling but no decisions producing legal or similarly significant effects. Detection is automated and may be inaccurate; you can ask us to correct or remove a detected collaboration at any time.
- Service communications — confirmation emails, launch notifications, important updates (Art. 6(1)(b) and 6(1)(f) — legitimate interest).
- Marketing communications — news about Promobeez; you can opt out at any time via the unsubscribe link or by emailing us (Art. 6(1)(f) / consent where required).
- Verifying authority to act for a business — recording who published an offer and their confirmation that they may act for the business and use its brand, requesting evidence where needed, and handling notices from brand owners, franchisors, or other rights holders (Art. 6(1)(f) — our legitimate interest in preventing unauthorised use of brands and in establishing, exercising, or defending legal claims).
- Security, debugging, and abuse prevention (Art. 6(1)(f) — legitimate interest).
- Legal compliance (Art. 6(1)(c)).
3. What We Do NOT Do
- We do not sell your personal data.
- We do not use your data for automated decision-making producing legal effects.
- We do not share your contact details with other users without your action — contacts are exchanged only through the mechanics of the Service that you initiate.
4. Sharing and Processors
We share personal data only with service providers ("processors") who help us run the Service, under data-processing agreements, for example:
- hosting and infrastructure providers (e.g. Vercel);
- email delivery providers (e.g. Resend);
- form/workflow processing tools operated by us.
Some providers may be located outside the EU/EEA. In such cases we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses or adequacy decisions.
We may also disclose data if required by law or to protect our legal rights.
5. Retention
We keep personal data only as long as necessary for the purposes above: account and profile data for as long as your registration is active, and thereafter only as needed to comply with legal obligations or resolve disputes. Collaboration data is kept while the profiles it is linked to remain active; public metrics of related content are tracked only for a limited period after publication. Data is deleted or anonymised when no longer needed.
6. Your Rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- rectify inaccurate or incomplete data;
- erase your data ("right to be forgotten") — on request we will delete your profile and all associated personal data, except data we are legally required to retain;
- restrict or object to processing based on legitimate interest, including creator analytics and collaboration detection — on request we will unlink or remove a detected collaboration;
- data portability — receive your data in a machine-readable format;
- withdraw consent at any time where processing is based on consent;
- lodge a complaint with a supervisory authority — in Finland, the Office of the Data Protection Ombudsman (tietosuoja.fi).
To exercise any right, email team@promobeez.com. We respond within one month as required by the GDPR.
7. Cookies and Analytics
promobeez.com uses analytics and attribution tools to understand how visitors find us and whether signups succeed. These may include:
- Google Analytics (GA4) — aggregated traffic and event data;
- Meta Pixel — aggregated ad performance and conversion signals;
- Signup attribution cookie (
pb_attribution) — stores the first traffic source we detect (for example Facebook Ads, Google Search, or direct visit) for up to 30 days on.promobeez.com, so we can link a completed signup on my.promobeez.com to the original visit. It may include referrer URL and ad click identifiers such asfbclidorgclid.
Attribution data is saved to your Promobeez account only when you complete signup, not when you simply sign in. You can clear cookies in your browser at any time. Where required by law, we ask for your consent before non-essential cookies.
8. Security
We apply appropriate technical and organisational measures (encryption in transit, access controls, minimal data collection) to protect personal data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
9. Children
The Service is not directed at persons under 18, and we do not knowingly collect their data. If you believe a minor has provided us data, contact us and we will delete it.
10. Changes to This Policy
We may update this Policy from time to time. The current version with its "Last updated" date is always available on this page.
11. Contact
Data controller: Daring Spirit Oy · Helsinki, Finland
Email: team@promobeez.com