Laumika
Create an account

Privacy Policy

Effective date: July 28, 2026

Data controller: AF Limited, LLC (“Laumika,” “we,” “us,” “our”)

Contact: contact@laumika.com

Note on status: This Policy is in effect as of the date above and reflects how Laumika actually operates today. We are finalizing our policies with legal counsel and may refine this page; the current version is accurate and binding.

1. Overview

This Privacy Policy explains what information Laumika collects, how we use it, who we share it with, and the choices you have. Laumika is a professional creator directory. We have designed the platform to collect only what the service needs — we do not use third-party analytics or advertising tracking, we do not sell your data, and we limit and delete what we collect wherever we can.

2. Information We Collect

2.1 Information you provide

  • Account information. When you create an account, we store your role (creator, brand, or agency), your age confirmation, and the date you accepted our Terms. Your email address and password are handled by our authentication provider (Supabase Auth); we never store your raw password, and we do not store additional account details such as company, website, or industry.
  • Creator profile information (when you claim or build a profile).Name, handle, headline, bio, profile photo, location (city and country), website, and the detailed professional information you choose to add: social links and audience statistics (follower counts, average views, engagement), audience breakdowns (age, gender, geography, interests, languages), audience proof, past collaborations, brand experience, portfolio items, testimonials, education and experience, and your “working with me” details (rates, work style, availability, whether you travel, etc.).
  • Business contact information. Creators may provide business contact details (such as a contact email) so brands can reach them. Contact details are gated— they are never included in the public directory listing and are revealed only through Laumika’s controlled reveal flow.

2.2 Information from public sources (seeded profiles)

To build the directory, Laumika may create creator profiles using information that is publicly available on creators’ own public profiles — such as name, handle, public bio, profile photo (or a link to a publicly-displayed photo), public follower/engagement figures, and public social links. Where a creator has publicly listed a business contact, we may also record it; that contact is stored in gated form, is not displayed publicly, and is not currently served or revealed through the platform. We record the public source of seeded information.

2.3 Information about third parties in profiles

A creator’s profile may include information about other people who are not Laumika users— for example, the name of a creator’s manager, agent, or agency, the name of a person who gave a testimonial, or the name of a brand contact from a past collaboration. A representative’s name or agency, a testimonial source’s name, and a named brand contact may be displayed publicly on the profile. Where the profile also includes such a person’s contact details(for example, a manager’s or agent’s contact), those contact details are stored in gated form and are not displayed publicly or served through the reveal flow.If you believe your information appears in a Laumika profile and you are not the profile’s owner, contact us at contact@laumika.com and we will address it.

2.4 Information collected automatically

We collect very little automatically, and we do not track your browsing:

  • IP address — limited use, short retention. We record the IP address associated with specific security-sensitive actions— starting a profile claim and requesting a verification code — and we use IP addresses to rate-limit abuse-prone actions (sign-in links, account recovery, claims, and contact reveals). We read this only from our hosting provider’s connection header. We do not maintain a general browsing or page-view log, and we do not collect device identifiers, user-agent fingerprints, or location beyond what you provide. IP addresses recorded for rate-limiting are automatically deleted within 7 days; IP addresses recorded on a profile claim or verification request are deleted when the associated profile is deleted.
  • Contact-reveal records.When a brand reveals a creator’s contact through the platform, we log that a reveal occurred (who revealed, which profile, which contact type, when) for security and anti-abuse purposes. These records are internal and administrative; they do not store IP addresses, device information, or user-agent data.

2.5 Cookies

Laumika uses a single, strictly-necessary cookie: the authentication session cookie that keeps you signed in. We do not use advertising cookies, analytics cookies, or third-party tracking cookies. Our fonts are self-hosted, so loading a Laumika page does not send your data to any font or content-delivery provider.

3. How We Use Information

We use the information we collect to:

  • operate the directory — display profiles, enable search and discovery, and connect creators, brands, and agencies;
  • authenticate you and keep your account secure;
  • enable verified business contact and outreach through the platform;
  • prevent fraud, abuse, and spam (including the limited, short-retention IP use above);
  • communicate with you (for example, sign-in links, claim verification, and important notices) via our email provider;
  • comply with legal obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

4. How Information Is Shared

We share personal information only with the service providers that operate the platform, and only as needed to run it:

  • Supabase — our database and authentication provider. Stores your email and password hash (in its authentication system) and hosts all profile data.
  • Netlify — our hosting/edge provider. Processes web requests (and is the source of the connection IP used for the limited security purposes above).
  • Resend — our transactional email provider. Receives recipient email addresses to deliver sign-in links, verification codes, contact-change confirmations, reveal notifications, and account-related emails.

We do not currently use any analytics, advertising, error-tracking, or data-enrichment services. Payment processing is not currently active; if we introduce paid features, we will update this Policy to disclose the payment processor before collecting any payment information.

We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety, or security of Laumika and its users.

5. Data Retention and Deletion

5.1 Deleting your account or profile

To request deletion of your account or data, contact us at contact@laumika.com.

How deletion works depends on the type of account, and there is an important distinction to understand:

  • Deleting your login vs. deleting your profile are different. For a creator, deleting your login account removes your ownership of the profile but does not by itself remove the profile’s content — the profile becomes unowned. To have the profile and its content permanently deleted, request profile deletion. When we process a creator profile deletion, we permanently remove the profile and all of its associated personal data — profile details, social links, audience data, portfolio, testimonials, business contact information, and related records — through a cascading deletion, after a short grace period of approximately 30 days. This is a genuine, permanent deletion, not merely hiding the profile.
  • Brand and agency accounts. Deletion for brand and agency accounts is currently handled manually on request (contact us).

5.2 What we retain, and why

For security, integrity, and legal-compliance reasons, a limited set of records is retained even after deletion, by design:

  • Moderation and audit records. We keep an append-only log of administrative and moderation actions (for example, when a profile is hidden or removed). These records identify the administrator and the action, not your profile content, and are retained for security and accountability.
  • Do-not-re-add suppression list. If a seeded profile is removed or someone opts out, we keep a one-way cryptographic fingerprint (not the original data) of the relevant public source, solely so that the profile is not re-created from public sources in the future. We cannot reverse this fingerprint to recover the original information; its only purpose is to honor the removal.
  • De-identified activity records. Internal contact-reveal records are retained for anti-abuse purposes, but their links to specific people are removed so that only de-identified information remains: the link to a creator’s profile is removed when that profile is deleted, and the link to a vieweris removed when that viewer’s account is deleted.

We do not retain payment or financial records, because Laumika does not currently process payments.

6. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, or restrict the use of your personal information, and to object to certain processing.

To exercise any of these rights — including if you are a non-user whose information appears in a profile (for example, as a testimonial source, a named contact, or a creator’s representative) — contact us at contact@laumika.com.

7. Seeded Profiles — Your Control

If Laumika created a profile for you from public sources, you can:

  • claim it and take ownership;
  • edit or update it once claimed; or
  • request its removal at any time — whether or not you claim it — by contacting contact@laumika.com.

When you request removal, we delete the profile and add its source to our one-way suppression list so it is not re-created.

8. Security

We protect information with measures including gated access to sensitive contact data, row-level database security, encrypted authentication handled by our provider, append-only audit logging of administrative actions, and short retention windows for the limited data we collect automatically. No system is perfectly secure, but we work to protect your information and to limit what we collect in the first place.

9. Age Requirement

Laumika is intended for users 18 and older, and the platform is safe-for-work only. We do not knowingly collect personal information from anyone under the minimum age. When we create seeded profiles from public sources, it is our practice not to knowingly include individuals under the minimum age, and we will remove any such profile brought to our attention.

10. International Users

Laumika is operated from the United States. If you access it from outside the U.S., your information will be processed in the U.S. and other countries where our providers operate.

11. Changes to This Policy

We may update this Policy from time to time. We will post the updated Policy with a new effective date and, for material changes, provide reasonable notice.

12. Contact

Questions or requests about your privacy? Contact us at contact@laumika.com.