Privacy Policy

Note on status: This Policy is in effect as of the date above and reflects how Laumika actually operates today. We are finalizing our policies with legal counsel and may refine this page; the current version is accurate and binding.

1. What this covers

This Policy explains what Laumika collects, what we do with it, who else sees it, and what you can do about it.

Laumika is a creator directory. Brands search it to find creators to work with. We designed it to collect as little as the service needs: no third-party analytics, no advertising trackers, no data sold to anyone, and short retention on almost everything we gather automatically.

Two things about Laumika shape most of the answers below, and we’d rather you know them up front than find them in a footnote:

We build profiles for creators who haven’t signed up. We create them from information creators have already made public, so brands can find people before those people have heard of us. If we’ve made one for you, you can claim it, change it, or have it taken down. Section 7 explains how.

Creator contact details are gated. They never appear on a public profile and aren’t in the page source. A signed-in user gets them through a controlled reveal, and we record that the reveal happened.

2. What we collect

2.1 What you give us

When you create an account: your role (creator, brand, or agency), your confirmation that you’re 18 or over, and the date you accepted our Terms. Your email address and password are held by our authentication provider, Supabase Auth — we never see or store your raw password.

Brand and agency accounts also store your company or agency name, your website, and your industry.

When you build or claim a creator profile: your name, handle, headline, bio, profile photo, city and country, website, and whatever professional detail you choose to add — social links and audience figures, audience breakdowns, audience proof, past collaborations, brand experience, portfolio images and video links, testimonials, education, experience, milestones, press, representation, and your rates and working preferences.

Your business contact details, if you add them, so brands can reach you. These are stored separately from the rest of your profile and are never published.

2.2 Profiles we build from public sources

We create creator profiles using information already published on creators’ own public accounts: name, handle, public bio, profile photo, public follower and engagement figures, and public social links. We record where each piece came from.

A photo on a seeded profile is displayed from wherever the creator already hosts it — we link to it rather than copying it onto our servers. We only host a photo once a creator has claimed their profile and uploaded one themselves.

Where a creator has publicly listed a business contact, we may record it. That contact is stored in gated form, is never displayed, and is not currently served through the reveal flow — a brand cannot obtain it today. It exists so that a creator claiming their profile has a starting point. When a profile is claimed, it is removed from the contact record, though a copy is held with the claim record until the profile is deleted.

2.3 Other people’s information

A creator’s profile can name people who have no Laumika account — a manager, an agent, a testimonial source, a named contact at a brand they’ve worked with. Those names may appear publicly on the profile.

Where a profile also holds such a person’s contact details, those are stored in gated form, are never displayed, and are never served through the reveal flow.

If your information appears on a Laumika profile and you don’t own that profile, write to contact@laumika.com and we’ll deal with it.

2.4 What we collect automatically

Very little, and we don’t track your browsing.

Your IP address, for rate limits. We use IP addresses to stop abuse of actions that are easy to abuse: creating an account, signing in, password resets, account recovery, claiming a profile, requesting a verification code, reporting content, requesting a takedown, revealing a contact, and viewing profiles while signed out. These are counters, not logs — we record that an address made a number of attempts in a day, not which pages it visited. They’re deleted within 7 days.

Your IP address, on two specific actions. When you start a profile claim or request a verification code, we store the address against that request. It’s deleted when the associated profile is.

Signed-out profile views are capped. A signed-out visitor can open 30 profiles a day from one IP address before further profiles stop loading for the rest of the day. That’s an anti-scraping measure, and it’s a count — we don’t record which profiles.

A record of each contact reveal: who revealed, whose profile, what kind of contact, and when. No IP address, no device information, no browser fingerprint.

We do not collect device identifiers, browser fingerprints, or any location beyond what you type into your profile.

2.5 Cookies and third-party requests

Laumika sets one cookie: the session cookie that keeps you signed in. No advertising cookies, no analytics cookies, no third-party trackers.

Our fonts are served from our own site. But three things on Laumika do cause your browser to contact someone else, and you should know about them:

• Seeded profile photos load from wherever the creator already hosts them — usually the social platform they’re on. That platform sees your IP address and that you came from Laumika.
• The takedown form loads a bot-protection script from Cloudflare. Cloudflare sees your IP address, browser and referrer.
• Payment pages, if and when paid features are switched on, load Stripe’s payment fields.

3. What we use it for

• Running the directory — showing profiles, search, filtering, connecting creators with brands and with each other
• Signing you in and keeping your account secure
• Passing a creator’s business contact to a brand when a reveal happens
• Stopping fraud, spam and abuse (the IP counters above)
• Emailing you — sign-in links, verification codes, contact-change confirmations, reveal notifications, and account notices
• Meeting legal obligations

We do not sell your personal information and we do not use it for advertising.

4. Who else sees it

We share personal information with the companies that run the platform, and only as much as running it takes.

We use no analytics, advertising, error-tracking or data-enrichment services.

Payment processing is not currently active. Laumika is free to use and we do not collect or hold payment information. If we introduce paid features, we will update this Policy to name the payment processor and describe what it receives before anyone is charged.

The reveal is a disclosure too. When a signed-in user reveals a creator’s contact, that contact goes to them. We can record that it happened; we can’t control what they do with it afterwards.

We may also disclose information where the law requires it, to enforce our Terms, or to protect the safety of Laumika and the people on it.

5. Deleting your profile

5.1 Creators

You can delete your profile yourself, in Settings. You’ll be asked to type your handle to confirm.

Straight away: your profile comes off Laumika. It leaves the directory and the public page stops loading. You’re signed out everywhere.

For 30 days: you can change your mind. Sign back in and you’ll be offered your profile back, exactly as you left it. Your handle is held for you.

After 30 days: your profile and everything on it is permanently deleted — photos, rates, contact details, social links, collab posts, and the applications you sent to brands. Your handle is released and someone else can take it.

Your sign-in survives. Deleting your profile doesn’t delete your login or your email address. You can build a new profile with the same account, or write to us to close the account entirely.

5.2 Brands and agencies

You can close your account in Settings. Closing is not deletion — your sign-in, the opportunities you posted and the applications you received are all kept. Closing deactivates your company or agency record, signs you out, and after about 30 days deletes that record. You can restore it yourself during those 30 days.

For an agency, that also ends any management links to creators on your roster. Those creators’ profiles are untouched.

To have your account removed rather than closed, write to contact@laumika.com.

5.3 What we keep, and for how long

Some records survive a deletion. Here is all of them.

Kept indefinitely, with your identity attached:

• If an administrator removed your profile (rather than you deleting it), we keep a record of it: your name, the business contact and login email that were on it, your social links, your former handle, and the reason. We keep this so we recognise you if you come back, and so we can answer questions about what happened. This does not apply when you delete your own profile — that keeps nothing of the kind.
• If an administrator removed your brand or agency account (rather than you closing it), we keep a record of it: your login email, your company or agency name, your website, an internal payment reference, the titles and number of opportunities you posted, the number of applications you received, and the reason.
• If someone reported you or you reported someone, we keep the report: the reporter’s email, what was reported, the text of the report, and any note an administrator added.
• Administrative and moderation actions — who did what, when, to which profile, and why. No account on Laumika, including an administrator’s, can delete an entry from this log.
• If you filed an account-recovery request, we keep a record of it, including a masked version of the email involved and a one-way fingerprint of the IP it came from.

Kept indefinitely, without your identity:

• Records that a contact reveal happened. The link to your profile is removed when your profile is deleted; the link to the viewer is removed when their account is deleted.
• A record that a deletion completed — an internal reference and a date, with nothing identifying attached.
• A one-way fingerprint of your public social links, so that our seeding doesn’t recreate your profile from public sources later. It can’t be reversed to recover the original. When you delete your own profile, this is the only fingerprint we write — we do not fingerprint your email address, so your email is not blocked if you return. When a profile is removed by an administrator, we fingerprint the business contact email as well, because that removal is a request not to be contacted.

Kept for 7 days:

• IP addresses used for rate limiting.
• Database backups. Our database is backed up daily and those backups are kept for seven days, so a copy of your profile details can outlast the permanent deletion by up to a week. Your photos aren’t in those backups at all.

We do not retain payment or financial records, because Laumika does not currently process payments.

5.4 What we can’t take back

Deleting your profile does not reach these, and nothing we do can:

• A contact already revealed to a brand. They have your email address. It’s in their inbox and their systems. We can’t recall it.
• A link preview already copied by another service. When your profile link is shared in Slack, iMessage, WhatsApp, LinkedIn or an email, that service fetches a preview card and stores its own copy on its own servers. Search engines do the same. We can’t expire, invalidate or ask for those back.
• A page someone saved, screenshotted or copied. Your profile is public by design, and public means copyable.
• For up to an hour after you delete an image, copies already held in caches can still be served while they age out.
• For up to two hours after you delete an image, an upload link already issued for it can still place a copy back.

We’d rather say this plainly than promise an erasure we can’t perform.

6. Your rights

Depending on where you live, you may have the right to see what we hold about you, correct it, delete it, limit how we use it, or object to some uses.

To exercise any of these, write to contact@laumika.com. This includes people who aren’t Laumika users but whose information appears on a profile — a manager, an agent, a testimonial source, a named brand contact.

7. If we made a profile for you

If Laumika built a profile for you from public sources, you have three options:

Claim it. Verify one of the social accounts listed on it and it’s yours to edit, publish, or unpublish.

Have it removed. There’s a “Request removal” link at the bottom of every profile. It doesn’t require an account and it doesn’t require talking to us — the profile comes down immediately and is permanently deleted after a short review window. This route is for profiles you haven’t claimed; if you have claimed your profile, delete it from Settings as described in section 5.1. You can also email contact@laumika.com.

Leave it. It stays as it is, showing only information you’ve already made public, with no contact details reachable by anyone.

When a profile is removed this way, we add a one-way fingerprint of its public sources to a suppression list so our seeding doesn’t recreate it. That can’t be undone — if you later want to come back, write to us and we’ll clear it.

8. Security

Contact details sit behind a database-level wall that no public query can cross. Profile photos are stored privately and served through short-lived links. Administrative actions are written to a log no account can edit. Passwords and sessions are handled by our authentication provider. The data we collect automatically is deleted on a schedule.

No system is perfectly secure. What we can control is how little we hold and how quickly we let go of it.

9. Age

Laumika is for people 18 and over, and everything on it must be safe for work. We don’t knowingly collect information from anyone under 18, and we don’t knowingly create seeded profiles for anyone under 18. If one comes to our attention we remove it.

10. Where your information is processed

Laumika is operated from the United States. If you use it from elsewhere, your information is processed in the U.S. and in other countries where our providers operate.

11. Changes

We may update this Policy. We’ll post the new version with a new effective date, and give reasonable notice of material changes.

12. Contact

Questions or requests: contact@laumika.com