Privacy Policy
Gisou ("we", "our", "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information when you use the Gisou Creator Portal.
1. Data Controller
Gisou
Registered in the Netherlands
Contact: creators@gisou.com
2. Data We Collect
| Category | Data | Purpose |
|---|---|---|
| Identity | Name, date of birth | Account creation, age verification |
| Contact | Email, phone, address | Communication, product shipments |
| Social Media | Handles, follower counts | Creator evaluation, campaign matching |
| Content | Submitted photos, videos, captions | Campaign fulfillment |
| Technical | IP address, browser info | Security, agreement signing compliance |
| Activity | Messages, agreement signatures | Platform functionality, audit trail |
3. Legal Basis for Processing
- Consent - You consent to data processing when you register and accept these terms.
- Contract - Processing is necessary for the performance of your creator agreement.
- Legitimate Interest - Platform security, fraud prevention, and improving our services.
- Legal Obligation - Tax reporting, compliance with applicable laws.
4. How We Use Your Data
- To manage your creator profile and account.
- To match you with suitable campaigns.
- To process and ship product orders.
- To communicate with you about campaigns, content, and agreements.
- To send automated reminders about pending actions.
- To maintain security and audit logs.
5. Data Sharing
We do not sell your personal data. Your data may be shared with:
- Gisou team members who manage the creator program.
- Shipping providers for product delivery (name and address only).
- Legal authorities when required by law.
6. Data Retention
We retain your data for as long as your account is active. After account deletion, we remove all personal data within 30 days. Audit logs related to signed agreements may be retained for up to 7 years for legal compliance.
7. Your Rights (GDPR)
Under the General Data Protection Regulation, you have the right to:
- Access - Download a copy of all your personal data.
- Rectification - Correct inaccurate data through your profile.
- Erasure - Delete your account and all associated data.
- Portability - Receive your data in a machine-readable format (JSON).
- Restriction - Request that we limit processing of your data.
- Objection - Object to processing based on legitimate interest.
- Withdraw Consent - Withdraw your consent at any time.
You can exercise your access, portability, and erasure rights directly from the Privacy section of your dashboard. For other requests, contact creators@gisou.com.
8. Data Security
We implement appropriate technical and organizational measures to protect your data, including:
- Encrypted storage of sensitive data.
- CSRF protection on all API endpoints.
- Rate limiting on public-facing endpoints.
- Audit logging of all significant actions.
- eIDAS-compliant document signing with cryptographic verification.
9. Cookies
The Platform uses essential session cookies required for authentication. We do not use tracking cookies or third-party analytics.
10. International Transfers
Your data is processed and stored within the European Economic Area (EEA). If any transfer outside the EEA is necessary, we will ensure appropriate safeguards are in place.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes through the Platform.
12. Supervisory Authority
If you are unsatisfied with how we handle your data, you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
13. Contact
For privacy-related questions, contact us at creators@gisou.com.
Last updated: February 2026