Privacy notice

Effective version: 2026-09-10

Messages to Spherein

Feedback and support conversations are private to you and the authorised Spherein team. We store your messages, topic, account association and the page path you sent them from (without query parameters). New messages are also forwarded to our support email inbox through Resend. Team replies appear in your Spherein conversation. These messages are used to respond to requests and improve the product.

What Spherein does

Spherein helps adult creators, brands and agencies discover each other and discuss collaborations. The operator identified below is responsible for the personal data processed to run this service.

Information we process and why

• Account email, authentication identifiers and verification status: to sign you in, secure your account and provide the service. With Google sign-in, Google provides basic identity information such as your email, name and profile image. We do not request access to Gmail messages, contacts or Drive.
• Account type, 18+ confirmation and terms acceptance: to establish eligibility and record your agreement. We do not ask for your date of birth or identity document during signup.
• Profile name, photo, cover image, bio, city/town, languages, skills, interests and social links: to show your profile and help members find relevant collaborators. You decide whether to publish your profile. Profile photos and covers follow that visibility and can be replaced or removed; normal uploads are re-encoded to remove embedded camera/location metadata.
• Posts, applications, offers, messages, attachments, reactions and read receipts: to provide the features you use. Other participants see the information you share with them.
• Submitted skill suggestions and their review status help us improve the available skill list. Suggestions are linked to your account, visible to the operator, and removed with account deletion. We also summarise post interests, requested skills, locations and application statuses to understand demand.
• Reports, blocked-member choices and support requests: to investigate abuse, resolve problems and respond to account requests.
• Sign-in dates and counts, and aggregate counts of accounts and actions: to maintain the service and understand whether it is useful. Security providers may also process IP addresses, browser information and technical logs to prevent abuse.

Where GDPR applies, providing the requested account and collaboration features is based on performing our agreement with you. Safety, troubleshooting and basic operational measurement rely on legitimate interests in maintaining a useful, secure service, subject to your rights. Records required by applicable law are processed on that basis.

Optional measurement and email updates

Active-time measurement is off by default. If you enable it in Privacy choices, we record approximate active seconds per account per UTC day while the tab is focused and you recently interacted. We do not capture the content of your interactions, screen recordings, keystrokes or activity on other sites. Consent is optional and can be withdrawn there at any time; switching it off deletes your stored active-time records.

Email updates are a separate optional choice in Notifications and go to your verified account email. Account verification, password recovery and essential security communications are separate from optional updates. Turning off updates does not delete your account.

Who can see your information

Published profiles and open posts are visible to signed-in members. Collaboration messages and attachments are restricted to their participants through access controls. Authorised operators may access records when needed for support, security or investigating reports. Messages are not end-to-end encrypted. Do not send identity documents, financial credentials or other highly sensitive information in chat.

We use Supabase for authentication, the database and file storage, and Vercel for hosting and delivery. Google processes sign-in under its own privacy policy when you choose it. Email delivery providers process recipient details and email content when email services are enabled. Service providers and authorities may receive data when necessary to provide the service or comply with law. We do not sell personal data or provide message contents to advertisers.

Agency workspaces

Agency owners and accepted managers can manage their campaigns, client relationships and internal budgets. Accepted team members can access campaigns assigned to them. Applying shares your profile name, city, skills, proposal and proposed fee with that campaign team, even when your profile is hidden. Each offer’s Breakroom remains private to its sender and recipient. An agency may share a selected work link and delivery notes with an accepted client for review; internal fees, budgets and notes are not included. Accepting a client or creator-representation invitation allows the relationship to appear on the agency profile when your own profile is visible. You can revoke a relationship in Workspace. Agency deletion removes its campaigns and associated applications, offers, Breakrooms, deliveries and reviews. Individual account deletion removes associated records through the same account cleanup process.

Storage and international processing

The release database and uploaded-file storage are configured in Mumbai, India. Hosting, authentication integrations, email delivery, support and security processing may involve other countries. This is not a promise that every copy stays in India. Supabase and Vercel publish data-processing terms that include safeguards for qualifying international transfers, including Standard Contractual Clauses. Contact us for the applicable safeguards and copies. Provider agreements and the transfer assessment must be confirmed before public registration opens. Read Data & storage for the service controls.

Retention

Account and collaboration records are retained while your account and the associated features remain in use. You may request deletion at any time. When automated deletion is enabled, the Delete account and personal data confirmation disables account access and hides your profile, then queues file and account cleanup. This deletes associated shared Breakrooms for both participants, including messages and attachments, as explained before confirmation. Personal sign-in and active-time records are deleted, not retained as user-linked metrics. Only an anonymous overall count of completed deletions remains. Our operational target is to complete live-data cleanup within seven days. A failed cleanup remains queued for retry and operator attention. Where specific legal obligations or legal claims require retention, we restrict the necessary records and explain the reason and applicable retention criteria; this is not a blanket exception for all records. Daily optional-time and sign-in records use a rolling 90-day operational retention window, cleaned when measurements are recorded or the founder dashboard is opened. Backups and provider logs may remain until their provider retention cycle ends and are not necessarily erased immediately with live records.

Your choices and rights

You can edit or hide your profile, change email and analytics choices, block members and download basic account/profile data. Use Delete account and personal data in Privacy choices when available, or Support and the contact below to request a complete export, deletion, correction, restriction or object to applicable legitimate-interest processing. We may need proportionate verification of ownership. Where GDPR applies, we respond to rights requests without undue delay and within one month; if a permitted extension is necessary, we explain it within that first month. Withdrawing consent does not affect earlier lawful processing. Where applicable, you may complain to your data protection authority and exercise access, portability and other statutory rights.

Account email and authentication information are necessary to provide an account. Optional profile fields and optional measurement are not required for sign-in; publishing a profile requires the fields shown in onboarding. We do not make decisions with legal or similarly significant effects solely through automated processing.

Cookies and changes

Authentication cookies are needed to keep you signed in. We do not add advertising trackers or third-party behavioural analytics in this release. We will update this notice when processing changes and request a new choice when required. Spherein is for people aged 18 or older; contact us if an underage account is identified.