Privacy policy

Conversion Club, a trading name of a Dutch general partnership (VOF) registered with the Dutch Chamber of Commerce under KVK number 92840965, is the controller of the personal data described in this Policy. Our business address is Ambachtsplantsoen 5, Sas van Gent, Netherlands. Our privacy and support email is sales@conversionclub.io.

This Privacy Policy applies to the websites, applications, and services where it appears. This Policy (together with our Terms of Service) describes how Conversion Club ("Conversion Club," "we," "us," or "our") collects, uses, and shares information from or about you on the websites, applications, and services where it is located, and offline where this Policy is referenced. By accessing or using our websites, applications, or services, or by interacting with us, you acknowledge these practices.

1. Information We Collect

We (and our vendors and service providers) collect, receive, generate, and infer several categories of personal information and business information depending on the nature of your interactions with us and whether you engage with us as a Creator, Brand/Client, Partner, Contractor, prospective customer, or general website visitor.

We collect your full legal name, preferred name, business name, email address, phone number, billing address, mailing address, invoicing address, and other identifiers used to communicate with you, manage your account, process payments, and fulfill contractual obligations.

We collect unique personal identifiers, online identifiers, IP addresses, cookie identifiers, device identifiers, advertising identifiers, CRM identifiers, internal account IDs, platform user IDs, social media handles, usernames, and authentication credentials.

To provide our clipping and content marketing services, you may connect third-party social media accounts ("Connected Accounts"), including TikTok, Instagram, YouTube, X, and similar platforms. Through APIs and authorized access, we may collect:

• Usernames, user IDs, and profile data
• Content you publish, including videos, images, captions, thumbnails, and descriptions
• Engagement metrics, impressions, views, shares, comments, and likes
• Media URLs, metadata, and technical performance data
• Posting history, follower counts, and subscriber counts
• Audience demographics and analytics where available

2. How We Use Your Information

We use personal information to operate our clipping, short-form content, and marketing services; manage campaigns; facilitate creator-brand partnerships; execute content distribution strategies; track performance; provide analytics; and fulfill contractual obligations.

We use information to invoice Clients, process payouts to Creators, manage subscriptions and refunds, perform accounting, and comply with tax requirements.

We also use information to prevent fraud, detect unauthorized activity, enforce agreements, comply with legal obligations, and protect users and the public.

Where the GDPR or another law requiring a lawful basis applies, we rely on the following bases for these activities:

• Client campaign and account management: performance of a contract where the Client is an individual who is party to that contract; otherwise our legitimate interests in providing contracted campaign services and communicating with Client representatives.
• Creator account access, applications, communication, performance tracking, and payouts on the Client's behalf: performance of any agreement we have directly with the Creator or steps taken at the Creator's request before entering one; where the services agreement is directly between the Creator and Client, our legitimate interests and the Client's legitimate interests in administering that campaign.
• Accounting, tax, and legally required records: compliance with legal obligations.
• Fraud prevention and Platform security: our legitimate interests in protecting our services, users, and business.
• Optional marketing: consent where required, or our legitimate interests in relevant business communications where permitted, with the right to opt out.
• Non-essential analytics, advertising, and tracking cookies: consent where required by law.

3. How We Collect Information

We collect information in several ways depending on how you interact with our Services.

When you register, create a profile, submit forms, sign contracts, communicate with our team, apply for work, or otherwise provide information to us, we collect what you provide. This includes contact details, payment details, business information, identity documents when required for verification, and any content you upload for processing.

When you use our websites, applications, and services, we may collect technical data such as IP address, browser user agent, operating system, referring pages, pages or features you access, and performance metrics. The public website does not currently load marketing or advertising pixels or non-essential analytics scripts. If we add such technologies, we will seek consent before loading them where required by law.

If you link or authorize third-party services such as social platforms or analytics providers, we may receive information from those services under the permissions you grant. This can include profile details, public posts, content you uploaded, audience metrics, engagement data, and other account metadata. We may also acquire data from public sources, data providers, partners, and service integrators to enrich our records and detect misuse.

We may generate additional information about you by analyzing the data we collect. Examples include inferred interests, audience segments, engagement performance estimates, content tags, and other derived metrics used to operate our services and improve recommendations.

4. How We Share Your Information

We only share personal information in the ways described below and only as reasonably necessary for the purposes set out in this Policy.

We share data with companies and individuals that perform services on our behalf, such as hosting providers, payment processors, analytics and reporting providers, email and messaging vendors, customer support platforms, accounting and tax processors, and professional advisors. We require these providers to maintain appropriate safeguards and use information only to provide contracted services.

To execute campaigns, fulfill content services, and enable creator-brand collaboration, we may share content, performance metrics, contact information, and campaign data with creators, brand clients, and strategic partners as necessary to deliver the Services you requested.

We share aggregated and non-identifiable analytics with advertising partners and platforms for campaign optimization and measurement. Where allowed under law and your choices, we may also share identifiers used for advertising to enable targeted distribution and measurement.

We may disclose information to comply with legal processes, legal obligations, or governmental requests; to protect the safety, property, or rights of our users, the public, or Conversion Club; and to detect, investigate, or prevent fraud, security incidents, or other illegal activity.

If we reorganize, merge, sell assets, or are acquired, information may be transferred to a successor organization. We will require the acquiring party to honor the terms of this Policy.

We may publish or share anonymized, aggregated, or deidentified information that cannot reasonably be used to identify you.

5. Your Choices About Your Information

You have practical choices for how your data is used and how we communicate with you.

You may request access to the personal information we hold about you and ask that inaccurate information be corrected.

Subject to applicable legal and contractual retention obligations, you may request deletion of your personal information. Deletion requests do not require us to delete information we must retain for legal, tax, accounting, or legitimate business reasons.

Where technically feasible, we will provide a machine-readable copy of certain personal information you provide to us. You may also ask us to restrict or object to certain processing activities where applicable under law.

If you are a resident of a jurisdiction that provides a right to opt out of sale or sharing of personal information, you may submit a request using the contact methods below. You may also opt out of targeted advertising through the opt-out tools provided by advertising platforms or by following the unsubscribe link in our marketing messages.

Most browsers let you manage cookie settings. You can refuse cookies through your browser settings. The optional Calendly booking calendar loads only after you choose to open the third-party embed; you may instead open Calendly in a new tab.

To exercise any of these choices, email sales@conversionclub.io. For identity verification, we may require reasonable information so we can honor the request for the correct account. For GDPR/EEA requests, we will respond without undue delay and in any event within one month of receipt. Where permitted by law, this period may be extended by up to two additional months where necessary due to the complexity or number of requests. We will inform you of an extension and the reason for it within the first month.

6. Your EEA Privacy Rights

If you are in the European Economic Area, you may exercise the following rights under the GDPR, subject to the conditions and exceptions that apply to each right:

• Access: ask whether we process your personal data and request a copy and information about that processing.
• Rectification: ask us to correct inaccurate personal data or complete incomplete data.
• Erasure: ask us to delete personal data where the applicable conditions are met.
• Restriction: ask us to limit processing in circumstances provided by law.
• Data portability: receive eligible data you provided to us in a structured, commonly used, machine-readable format and transmit it to another controller where technically feasible.
• Objection: object to processing based on legitimate interests or to direct marketing.
• Withdrawal of consent: withdraw consent at any time for processing based on consent, without affecting the lawfulness of earlier processing.
• Complaint: lodge a complaint with the supervisory authority in your country. In the Netherlands, this is the Autoriteit Persoonsgegevens.

To exercise these rights, email sales@conversionclub.io. We will respond without undue delay and within one month of receipt. Where the GDPR permits an extension because of the complexity or number of requests, we may extend this period by up to two additional months and will inform you and explain why within the first month.

7. Your U.S. State Privacy Rights

Residents of California and other states with comprehensive privacy laws may have the following rights:

• Right to Access / Know: You may request disclosure of categories and specific personal information collected.
• Right to Deletion: You may request deletion of personal information, subject to statutory retention exceptions.
• Right to Correction: You may request correction of inaccurate personal information.
• Right to Opt-Out: You may opt out of "selling" or "sharing" personal information and targeted advertising.

To submit requests, email sales@conversionclub.io.

8. Your Canadian Privacy Rights

If you are a resident of Canada, you may have rights under applicable federal and provincial privacy laws.

You may be entitled to request access to and correction of your personal information. You may also withdraw consent where our processing relies on consent.

Send requests to sales@conversionclub.io. We will identify the personal information we hold related to your request, provide a copy where required by law, and correct inaccurate information.

If you remain unsatisfied after contacting us, you may lodge a complaint with the Office of the Privacy Commissioner of Canada or the relevant provincial privacy authority.

9. International Data Transfers

Our operations are global, and data may be transferred to and processed in countries other than the country where you live.

Transfers may be necessary to provide our Services, host data, or support business operations. Where transfers occur, we rely on appropriate safeguards such as contractual commitments with our processors, standard contractual clauses, binding corporate rules when applicable, and other lawful transfer mechanisms. We also implement technical and organizational measures to protect your data in transit and at rest.

Data may be processed in the United States and in other countries where our service providers operate. Where personal data is transferred outside the EEA, we use an applicable lawful transfer mechanism, such as an adequacy decision or Standard Contractual Clauses, where required.

10. Security & Data Retention

We implement administrative, physical, and technical safeguards appropriate to the sensitivity of the data. Examples include encryption in transit using industry-standard protocols, encryption at rest for sensitive data where feasible, role-based access controls, secure development practices, regular security assessments, employee training, logging and monitoring, and a documented incident response plan.

We retain information as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Typical retention periods include account and transactional records for up to seven years for tax and accounting purposes, logs and analytics for between one and twenty-four months depending on purpose, and marketing preference records until you unsubscribe. We may retain anonymized or aggregated information indefinitely.

If we discover a security incident that materially affects personal information, we will follow applicable notification requirements, including notifying affected individuals and regulators where required by law.

11. Age Restrictions

Our Services are intended solely for individuals who are at least 18 years of age.

We do not knowingly collect personal information from individuals under 18. If we become aware that we have collected information from a minor, we will promptly delete such information.

12. Withdrawing Consent

Where processing is based on consent, you may withdraw consent at any time.

To withdraw consent for activities such as email marketing, profiling for advertising, or Connected Account access, use the unsubscribe link in communications, revoke permissions through the Connected Account interface, use any available controls for optional third-party content, or email sales@conversionclub.io. Withdrawal of consent will not affect processing that occurred prior to withdrawal or processing that is otherwise permitted by law.

13. Third-Party Sites & Services

Our Services may contain links, embedded content, or integrations with third-party sites and services.

When you click third-party links, use social logins, or view embedded content, the privacy practices of those third parties apply. We are not responsible for those practices.

Third-party plugins and widgets may collect information about your usage and may set cookies. Review the privacy policies of platforms you connect to for details on how they handle your data.

14. Contact Us

When you submit a request to access, correct, delete, or port personal information, we will ask for information needed to verify your identity, such as account identifiers, email address, recent transaction details, or other data that only the account owner would know. We will not request sensitive authentication data such as full payment card numbers.

For GDPR/EEA requests, we will respond without undue delay and in any event within one month of receipt. Where permitted by law, this period may be extended by up to two additional months where necessary due to the complexity or number of requests. We will inform you of an extension and the reason for it within the first month. Other legally prescribed response periods apply where relevant.

If we deny a request in whole or in part, we will explain the reasons. We may redact information or refuse requests where permitted by law, such as to protect another person, comply with legal obligations, or where the request is manifestly unfounded or excessive.

For privacy questions, data requests, complaints, or to exercise your rights, email sales@conversionclub.io.

Business address: Conversion Club, Ambachtsplantsoen 5, Sas van Gent, Netherlands.

Provide your full name, email or account identifier, a clear description of your request, and any verification details required. If you have a legal or regulatory complaint, you may contact your local data protection authority.

15. Updates to This Policy

We may update our Policy to reflect changes in practices, legal requirements, or service features. When we make material changes, we will post the new effective date and notify users as required by law. Continued use of our Services following posting constitutes acceptance of the revised Policy.

This Privacy Policy is governed by the laws identified in our Terms of Service. If you have unresolved concerns, you may refer them to the relevant supervisory authority.