Privacy Policy

The commercial operator of the Service is IWBL, LLC, a limited liability company registered in the State of Delaware, United States. IWBL Limited Liability Partnership (IWBL LLP), Republic of Kazakhstan, Business Identification Number (BIN): 260740022008, may perform software development, technical maintenance, product operations, user support, local data-processing functions, and fallback EasyStaff payout-documentation and settlement functions under a separate services agreement with IWBL, LLC.

Privacy email: [email protected]

This Policy applies to registration and authentication, profiles and the catalog, offers and negotiations, chats and support, orders and attached videos, tracks, public and paid-by-views campaigns, payments, balances, refunds, payouts and withdrawal requests, subscriptions, ratings, recommendations, notifications, and IWBL analytics. Third-party websites and services are governed by their own policies.

We may process the following categories of data:

• Account and authentication: Firebase identifier, email, name, username, role, language, settings, verification status, and session data. Credentials and passwords are handled by Firebase; IWBL does not receive your password in plain text.

• Profile and professional activity: display or legal name, contact details, country, genres, description, photos and media, TikTok links and usernames, portfolio, rates, ratings, profile and video metrics, and details of accounts managed by a manager.

• Content and transactions: tracks, files, links, descriptions and requirements, budgets, offers, negotiations, chat messages, orders, campaigns, deadlines, statuses, published-video links, verification results, reviews, and transaction history.

• Payments and payouts: amounts, balances, fees, transaction statuses and identifiers from the selected payment provider, PayPal, and EasyStaff, refunds, and withdrawal requests. For payouts, we may store the details you provide, including a payout card number, cardholder name, PayPal email, SBP phone number, bank and recipient name, bank details (account number, BIK/SWIFT/BIC, bank name, tax identifiers, and other details required by the selected payment or payout provider), crypto wallet address and network, platform, owner name, country, and city. For payments through a payment provider, bank-card data, CVV/CVC, and 3-D Secure authentication are processed by the payment gateway and by banks/payment systems; IWBL does not receive CVV/CVC in plain text. For an EasyStaff payout, we may share the user's name, contact details, country and address, user and task identifiers, service description, amount and currency, deadlines, completion status, result, and supporting information. The user may provide identity and address documents, date of birth, and payout details for KYC and receipt of funds directly to EasyStaff; IWBL receives them only where needed to perform the contract, verify the transaction, or comply with law.

• Communications: support requests, email and Telegram communications, notifications, and information required to review disputes.

• Technical and analytics data: IP address, device and browser information, server and security logs, cookies and local storage, Firebase and Meta identifiers, usage events, referral sources, and anti-fraud signals.

We obtain data:

• directly from you when you register, complete a profile, upload materials, communicate, pay, or request a payout;

• from a manager, managed creator, or other deal party to the extent needed for collaboration;

• from public TikTok profiles, posts, and statistics and other public sources you identify, including through Apify or another TikTok statistics provider;

• from authentication, payment, and communication providers, including Firebase, a payment provider, PayPal, and Telegram;

• automatically when you use the Service, including technical logs and analytics events.

We process data to:

• create and maintain accounts, authenticate users, and secure the Service;

• display profiles and the catalog, match participants, and operate manager workflows, offers, negotiations, chats, orders, tracks, and campaigns;

• receive and verify video links, obtain public statistics, and produce ratings, recommendations, reports, and analytics;

• account for payments, balances, and fees, accept online payments through a payment provider, create and accept EasyStaff tasks, and handle refunds, payouts, withdrawal requests, disputes, KYC, and anti-fraud checks;

• send service, status, and security notifications, answer requests, and resolve disputes;

• maintain, diagnose, and improve the Service and measure feature and marketing performance;

• comply with contractual, accounting, tax, payment, and other legal requirements and protect the rights of IWBL and its users.

We process personal data with your consent, to enter into or perform a contract or respond to your request, to comply with obligations under the laws of the Republic of Kazakhstan, and in other cases expressly permitted by law. Consent may be given during registration, by submitting a form, choosing a setting, or taking another unambiguous action in the Service. You may withdraw consent, but this does not affect prior lawful processing and may limit features that require the data. Data will not be deleted where retention is required for an unfinished transaction, payout, dispute, or by law.

Parts of profiles, TikTok accounts, rates, ratings, tracks, and campaigns may be publicly visible depending on the selected feature. Musicians, content creators, managers, and other participants receive only the data needed for an offer, negotiation, chat, order, campaign, publication, result verification, payment, or dispute. A manager may access linked accounts within the authority granted to that manager. Authorized IWBL staff and contractors receive access on a need-to-know basis. We do not sell personal data.

To operate the Service, we may use providers including Google Firebase (authentication, analytics, and notifications), Meta Pixel (advertising measurement and advanced matching where used), a payment provider (internet acquiring and payment gateway), PayPal (payments), DigitalOcean Spaces (file storage), Telegram (bot, notifications, and support), Resend (email), Apify or another TikTok statistics provider (collection of public TikTok statistics), and infrastructure, security, and professional-service providers.

The payment provider may process payment data, card data, 3-D Secure authentication, payment statuses, and technical transaction identifiers as needed for online payment acceptance, verification, refunds, anti-fraud controls, and compliance with Visa and Mastercard payment-system rules. Card data is entered on the payment gateway side; IWBL does not receive CVV/CVC in plain text.

EasyStaff UAB (registration number 305643163, Lithuania) provides IWBL with task administration, contractor engagement, and payout services. For these purposes, IWBL may share with EasyStaff the data listed in Section 3. EasyStaff independently determines the KYC, payment, tax, sanctions, and anti-fraud checks it requires and may act as an independent data operator or controller for that processing. EasyStaff may share data with banks, payment and verification services, tax authorities, and other competent authorities under its own policy and applicable law.

Some providers, including EasyStaff, may process data outside the Republic of Kazakhstan. Such transfers are limited to what is necessary for the stated purposes and require a legal basis and safeguards provided by law. Kazakhstan law requires the accumulation and storage of personal data in a database located in Kazakhstan; using foreign providers does not remove this requirement. We may disclose data to public authorities or other persons where required by law or necessary to protect lawful rights.

We retain data while an account is active and for as long as it is needed for the purposes described in this Policy. After account closure, data is deleted, anonymized, or restricted, except for order, payment, payout, accounting and tax records, proof of consent, dispute materials, and security logs that must be retained for applicable mandatory periods or to protect rights. Backups are deleted through their rotation cycle. Public display of profiles and materials ends or is restricted unless continued publication is required for an active transaction, by law, or to resolve a dispute.

We use access controls, authentication, encryption in transit, logging, backups, and organizational controls appropriate to the nature of the data and risks. Users are responsible for securing their accounts and devices. No method of storage or transmission is completely secure. Report a suspected incident to [email protected].

The Service uses cookies and browser local storage for authentication, security, language, preferences, cart, and interface state. Firebase Analytics and Meta Pixel may measure visits, events, and advertising conversions; where Meta advanced matching is used, normalized contact details may be transmitted according to settings and applicable consent. Optional analytics and marketing technologies are used with consent where required by law. Restricting them through consent or browser settings may affect analytics but should not disable strictly necessary functions.

To the extent provided by the laws of the Republic of Kazakhstan, you may:

• know whether and how your data is processed, including purposes, sources, methods, categories, retention periods, and possible cross-border transfers;

• access your data and obtain confirmation of processing;

• request correction of inaccurate or incomplete data;

• request blocking or destruction of data collected or processed unlawfully or no longer needed for its stated purpose;

• withdraw consent subject to statutory exceptions and outstanding obligations;

• object to an automated decision that applies to you and request human review;

• complain to the competent authority or a court.

To submit a request, email [email protected]. We may ask for information needed to verify your identity and protect the account.

IWBL may automatically calculate statistics, ratings, recommendations, order and campaign statuses, and indicators of fraud or technical violations. We do not intend to make solely automated final decisions that by themselves create, change, or terminate your legal rights. If an automated result materially affects access to an order, payment, or payout, you may request an explanation and human review through support.

The Service is intended for persons with legal capacity. A minor may provide personal data and use the Service only with the consent and involvement of a legal representative where required by law. If you believe a minor's data was obtained without a proper basis, contact us so that we can investigate and take appropriate action.

We may update this Policy when the Service, providers, or laws change. The current version and update date are published on this page; we will provide notice of material changes through available channels where required or reasonably practicable. For privacy questions and rights requests, contact: IWBL, LLC; email: [email protected].

When processing withdrawal requests, we may account for the requested amount, IWBL fee, amount after the IWBL fee, selected payout method, payout statuses, and provider technical identifiers. IWBL does not calculate or withhold intermediary fees charged by banks, payment systems, or payout providers, and does not determine the tax regime of the recipient's country. The recipient is responsible for taxes, reporting, and other obligations related to the income received. The amount actually received may be lower than the amount sent for payout because of intermediary fees, conversion, or the selected provider's requirements.