https://withgems.com/assets/PrivacyPolicyPage-COcvD8gf.js

1import{j as e}from"./app-C4Kq0qwe.js";import{L as s,a as i}from"./LegalLayout-D2ubtDfx.js";import"./Nav-LkZbLwdy.js";import"./structuredData-DVvW7n11.js";import"./Seo-BiujKJGZ.js";import"./Footer-Dedo5CrK.js";const t=[{purpose:"Account creation and management",data:"Name, email, phone number",basis:"Contractual necessity"},{purpose:"Brand / Creator matching",data:"Profile, social metrics",basis:"Contractual necessity"},{purpose:"Social integrations (Instagram, TikTok...)",data:"Public data, engagement data",basis:"Consent"},{purpose:"Campaign analytics",data:"Metrics, performance data",basis:"Contractual necessity"},{purpose:"Algorithmic processing / AI",data:"Profile, history, metrics",basis:"Legitimate interest"},{purpose:"Customer support",data:"Messages, history",basis:"Legitimate interest"},{purpose:"Platform improvement",data:"Usage data, logs",basis:"Legitimate interest"},{purpose:"Fraud prevention",data:"IP address, logs, behavior data",basis:"Legitimate interest"},{purpose:"Marketing emails",data:"Email address",basis:"Consent"},{purpose:"Non-essential cookies",data:"Browsing data, preferences",basis:"Consent"},{purpose:"Billing and accounting",data:"Financial data",basis:"Legal obligation"},{purpose:"Identity verification",data:"Identity documents, personal identification data",basis:"Contractual necessity"},{purpose:"International transfers",data:"Any data transferred outside the EU",basis:"SCCs / Adequacy decision"}];function r(){return e.jsxs(s,{path:"/privacy-policy",title:"Privacy Policy",updated:"February 13, 2026",seoTitle:"Privacy Policy | Gems",seoDescription:"How Gems collects, uses and protects personal data: what we collect from brands and creators, our legal bases under the GDPR, retention periods and your rights.",intro:e.jsxs(e.Fragment,{children:[e.jsx("p",{children:'Splash ("Gems", "we", "us", "our") operates Gems, an AI-powered creator advertising platform connecting brands ("Brands") and content creators ("Creators") (the "Platform").'}),e.jsx("p",{children:"This Privacy Policy explains how we collect, use, disclose, and protect personal data when you use the Platform, visit our website, or interact with us."}),e.jsx("p",{children:"By using Gems, you agree to this Privacy Policy. If you do not agree, please do not use the Platform."}),e.jsxs("p",{children:[e.jsx("strong",{children:"Naming clarification."}),' "Gems" is the brand/product name of the Platform; the legal contracting entity and data controller remains Splash.']})]}),children:[e.jsxs(i,{title:"1. Scope",children:[e.jsx("p",{children:"This Privacy Policy applies to:"}),e.jsxs("ul",{children:[e.jsx("li",{children:"Brands using the Platform"}),e.jsx("li",{children:"Creators registered on Gems"}),e.jsx("li",{children:"Visitors to our website"}),e.jsx("li",{children:"Prospects and partners interacting with us"})]}),e.jsx("p",{children:"It does not apply to third-party platforms (e.g., Instagram, TikTok, Stripe), which have their own privacy policies."})]}),e.jsxs(i,{title:"2. Personal Data We Collect",children:[e.jsx("h3",{children:"2.1 Information You Provide Directly"}),e.jsx("h4",{children:"Account & Profile Data"}),e.jsx("h5",{children:"Brand Accounts"}),e.jsxs("ul",{children:[e.jsx("li",{children:"Company name, legal entity information, registered address"}),e.jsx("li",{children:"Account administrators and authorized users (name, email, role)"})]}),e.jsx("h5",{children:"Creator Accounts"}),e.jsxs("ul",{children:[e.jsx("li",{children:"Name, email, birth date, language, phone number"}),e.jsx("li",{children:"Creator profile details (social-media handle, rates, formats, availability), country/region, avatar, and authentication identifiers"}),e.jsx("li",{children:"Delivery information, in case creators need to receive a product"})]}),e.jsx("h4",{children:"Campaign Data & Collaboration Data"}),e.jsxs("ul",{children:[e.jsx("li",{children:"Campaign briefs, timeline, options, product details, budgets, target audience"}),e.jsx("li",{children:"Communications between Brands and Creators"}),e.jsx("li",{children:"Contracts and agreements"}),e.jsx("li",{children:"Creative submissions and approvals: sample products to be shipped, draft content, feedback, approvals

1/declines, and posting confirmations"})]}),e.jsx("h4",{children:"Financial & Billing Data"}),e.jsx("h5",{children:"Brands"}),e.jsxs("ul",{children:[e.jsx("li",{children:"Invoices"}),e.jsx("li",{children:"VAT number, SIRET, or company registration details"}),e.jsx("li",{children:"Wallet top-ups and payment method tokens"}),e.jsx("li",{children:"Payment details via payment providers (we do not store full card numbers)"})]}),e.jsx("h5",{children:"Creators"}),e.jsxs("ul",{children:[e.jsx("li",{children:"Invoices"}),e.jsx("li",{children:"VAT number, SIRET, or company registration details"}),e.jsx("li",{children:"Bank account details (e.g., IBAN, BIC) provided by Creators for payment purposes"})]}),e.jsx("h3",{children:"2.2 Information Collected Automatically"}),e.jsxs("ul",{children:[e.jsx("li",{children:"Technical data: IP address, device, browser, OS, log data, session data"}),e.jsx("li",{children:"Usage data: pages visited, actions performed, feature usage, performance metrics"}),e.jsx("li",{children:"Campaign performance data: views, clicks, conversions, engagement metrics, posting URLs, and attribution signals from integrated analytics/short-link/UTM tools"})]}),e.jsx("h3",{children:"2.3 Third-Party & API Integrations"}),e.jsx("p",{children:"If you connect social accounts (e.g., Instagram, TikTok, YouTube, Facebook, LinkedIn), we may collect:"}),e.jsxs("ul",{children:[e.jsx("li",{children:"Public profile information"}),e.jsx("li",{children:"Post-level analytics, only with your authorization and platform rules"})]}),e.jsx("p",{children:"If you connect Meta Business accounts, we may collect:"}),e.jsxs("ul",{children:[e.jsx("li",{children:"Business profile information"}),e.jsx("li",{children:"Business Manager data (including business portfolio and associated assets)"}),e.jsx("li",{children:"Advertising account information"}),e.jsx("li",{children:"Campaign, ad set, and ad performance data (e.g., impressions, reach, clicks, conversions, spend)"}),e.jsx("li",{children:"Access tokens and permissions required to interact with Meta APIs"})]})]}),e.jsx(i,{title:"3. How We Use Personal Data",children:e.jsxs("ul",{children:[e.jsx("li",{children:"Create and manage user accounts"}),e.jsx("li",{children:"Match Brands with Creators"}),e.jsx("li",{children:"Run campaigns and manage workflows"}),e.jsx("li",{children:"Generate reports and campaign performance analytics"}),e.jsx("li",{children:"Facilitate payments and invoicing"}),e.jsx("li",{children:"Provide support"}),e.jsx("li",{children:"Improve the Platform"}),e.jsx("li",{children:"Ensure security and prevent fraud"}),e.jsx("li",{children:"Comply with legal obligations"})]})}),e.jsxs(i,{title:"4. AI & Algorithmic Processing",children:[e.jsx("p",{children:"Gems uses algorithmic models and machine learning to rank and recommend Creators, suggest pricing benchmarks, predict campaign outcomes, analyze performance, and improve matching quality."}),e.jsx("p",{children:"We do not use private campaign content to train general-purpose external AI models without explicit consent. Where third-party AI services are used, we configure them to prevent data reuse for external model training when possible."})]}),e.jsx(i,{title:"5. Legal Bases (GDPR)",children:e.jsx("div",{className:"legal-table",children:e.jsxs("table",{children:[e.jsx("thead",{children:e.jsxs("tr",{children:[e.jsx("th",{children:"Purpose"}),e.jsx("th",{children:"Data concerned"}),e.jsx("th",{children:"Legal basis"})]})}),e.jsx("tbody",{children:t.map(a=>e.jsxs("tr",{children:[e.jsx("td",{children:a.purpose}),e.jsx("td",{children:a.data}),e.jsx("td",{children:a.basis})]},a.purpose))})]})})}),e.jsxs(i,{title:"6. Data Sharing",children:[e.jsx("h4",{children:"Service Providers"}),e.jsxs("ul",{children:[e.jsx("li",{children:"Hosting and cloud providers"}),e.jsx("li",{children:"Payment processors"}),e.jsx("li",{children:"Analytics tools"}),e.jsx("li",{children:"Identity verification services"}),e.jsx("li",{children:"Communication tools"})]}),e.jsx("p",{children:"All providers are bound by confidentiality and data protection agreements."}),e.jsx("h4",{children:"Between Brands and Creators"}),e.jsx("p",{children:"Certain data is shared between Brands and Creators to enable collaborations (e.g., profile information, campaign details, communications)."}),e.jsx("h4",{children:"Legal & Compliance"}),e.jsx("p",{children:"When required by law or to protect rights and safety."}),e.jsx("h4",{children:"Business Transfers"}),e.jsx("p",{children:"In case of merger, acquisition, or restructuring."}),e.jsx("p",{children:"We do not sell personal data."})]}),e.jsx(i,{title:"7. International Transfers",children:e.jsx("p",{children:"Data may be processed outside your country. Where required, we rely on Standard Contractual Clauses (SCCs), adequacy decisions, and additional technical safeguards."})}),e.jsxs(i,{title:"8. Data Retention",children:[e.jsxs("ul",{children:[e.jsx("li",{children:"Account data: duration of account + up to 24 months after closure"}),e.jsx("li",{children:"Campaign data: up to 36 months after the related campaign completes"}),e.jsx("li",{children:"Financial records: up to 10 years (legal obligation)"}),e.jsx("li",{children:"Logs: 90 days, unless extended for security investigations or legal holds"})]}),e.jsx("p",{children:"After retention, data is deleted or anonymized, unless law requires longer retention."})]}),e.jsxs(i,{title:"9. Your Rights",children:[e.jsx("p",{children:"Depending on your location, you may have the right to access your data, correct inaccurate data, request deleti

1on, restrict processing, object to processing, withdraw consent, and request data portability."}),e.jsxs("p",{children:["To exercise your rights, contact us at"," ",e.jsx("a",{href:"mailto:[email protected]",children:"[email protected]"}),". Splash should respond within one month. Deletion requests covering data collected through Meta platforms follow our"," ",e.jsx("a",{href:"/data-deletion",children:"Data Deletion Policy"}),"."]}),e.jsxs("p",{children:["You also have the right to lodge a complaint with your local data protection authority. In France, this is the CNIL:"," ",e.jsx("a",{href:"https://www.cnil.fr",target:"_blank",rel:"noreferrer",children:"www.cnil.fr"}),"."]})]}),e.jsx(i,{title:"10. Cookies",children:e.jsx("p",{children:"We use cookies to maintain sessions, remember preferences, analyze usage, and improve performance. You can manage cookies via browser settings or our cookie banner."})}),e.jsxs(i,{title:"11. Security",children:[e.jsx("p",{children:"We implement appropriate technical and organizational measures, including encryption in transit (SSL/TLS), access control and role-based permissions, secure infrastru

1cture, monitoring, and logging."}),e.jsx("p",{children:"No system is 100% secure, but we continuously improve our safeguards."})]}),e.jsxs(i,{title:"12. Children's Privacy",children:[e.jsx("p",{children:"The Platform is not directed to children under 16. If we learn that we have collected personal information from a child below the applicable legal age threshold without proper consent, we will delete it promptly."}),e.jsx("p",{children:"In the EU, the default GDPR age for independent consent is 16, and national laws may lower it down to 13. In France, this threshold is 15."})]}),e.jsx(i,{title:"13. Changes to This Policy",children:e.jsx("p",{children:"We may update this Privacy Policy. If changes are material, we will notify users by email or within the Platform. The latest version is always available on our website."})}),e.jsxs(i,{title:"14. Contact",children:[e.jsx("p",{children:"Splash (data controller and operator of Gems)"}),e.jsxs("p",{children:["Email: ",e.jsx("a",{href:"mailto:[email protected]",children:"[email protected]"})]}),e.jsxs("p",{children:["Website:"," ",e.jsx("a",{href:"https://withgems.com",target:"_blank",rel:"noreferrer",children:"https://withgems.com"})]})]}),e.jsxs(i,{title:"15. Data Protection Officer (DPO)",children:[e.jsx("p",{children:"Splash has designated a Data Protection Officer for privacy-related questions and rights requests."}),e.jsxs("p",{children:["DPO contact: ",e.jsx("a",{href:"mailto:[email protected]",children:"[email protected]"}),' (subject: "DPO Request").']})]})]})}r.displayName="PrivacyPolicyPage";export{r as Component};