Privacy Policy

1. Data controller

The controller of the personal data collected through oterian.com and app.oterian.com is Velnoa Partners LLC, 30 N Gould St, Sheridan, Wyoming 82801, United States ("Oterian", "we").

For any question about this policy or to exercise your rights, write to [email protected].

2. Data we process

Account data: name, email address, password (stored in encrypted, irreversible form), role (brand or creator) and preferred language.

Platform usage data: campaigns, invitations, orders, content deliveries, order-related messages, published rates, verified social accounts and technical logs (IP address, timestamp, user agent) required for the security of the service.

Payment data: card payments are processed by Stripe. Oterian does not store full card numbers; from Stripe we only receive transaction identifiers, amount, payment status and the billing data strictly needed. For creator withdrawals we process the payout details the creator provides (e.g. IBAN or PayPal email) and, where tax law requires it, tax identification data stored encrypted.

3. Purposes and legal bases

Providing the service (performance of a contract, Art. 6(1)(b) GDPR): creating and maintaining your account, managing campaigns, orders, wallet balance, payments and withdrawals, and enabling communication between brands and creators.

Compliance with legal obligations (Art. 6(1)(c) GDPR): invoicing, accounting, tax and anti-fraud obligations.

Legitimate interest (Art. 6(1)(f) GDPR): platform security, append-only event logging for audit purposes, abuse prevention and service improvement through aggregated metrics that do not identify individuals.

We do not make automated decisions with legal effects on you, nor do we build advertising profiles.

4. Recipients of the data

Stripe, Inc. and its affiliates, as card payment processor and source of transaction data.

Cloudflare, Inc., as content delivery network, DNS and attack protection provider.

Our hosting provider, with servers located in the European Union, where the application and database reside.

Public authorities where a legal obligation exists. We do not sell personal data or share it with third parties for advertising purposes.

5. International transfers

Velnoa Partners LLC is a US entity and some of our providers (Stripe, Cloudflare) process data in the United States. Where data of EU/EEA residents is transferred outside the EEA, the transfer is safeguarded by Standard Contractual Clauses approved by the European Commission and, where applicable, by the EU–US Data Privacy Framework for certified providers.

6. Retention periods

We keep your account data for as long as your account is active. When you delete your account, personal data is erased or anonymised, except data we must retain by law (e.g. invoices and transaction records, for the applicable tax periods).

Technical security logs are kept for a maximum of 12 months unless needed to investigate an incident.

7. Your rights

If you are in the EU/EEA, the GDPR grants you the rights of access, rectification, erasure ("right to be forgotten"), restriction of processing, portability and objection, as well as the right not to be subject to solely automated decisions.

You can exercise them by writing to [email protected] from the email associated with your account. We will respond within one month at most. Account deletion effectively removes your personal data from our systems using crypto-shredding techniques, without prejudice to data we are legally required to keep.

You also have the right to lodge a complaint with your data protection supervisory authority.

8. Security

We apply appropriate technical and organisational measures: encryption in transit (TLS), strong password hashing, encryption at rest for especially sensitive data, append-only event logging for audit, role-based access control and manual review of outgoing payment operations.

9. Changes to this policy

We may update this policy to reflect legal or service changes. The current version will always be published on this page with its last-updated date. If a change is material, we will notify you by email or within the platform.