Privacy notice
Last updated:
About this notice
This notice describes how Alnly handles information in its creator and brand marketplace, websites and mobile applications. It covers account, collaboration and support features. You can contact the Alnly team through the Support page for privacy questions or requests.
Information we process
Account information includes your email address, sign-in provider identifiers, profile name, avatar, role and account status. Authentication is provided through Supabase. Optional authenticator verification adds a second sign-in factor.
Creator and brand information can include biographies, social links, portfolio media, categories, languages, service areas, availability, brand locations and guidelines. Private contact or shipping details are used where a collaboration requires them. We also process briefs, bids, offers, project deliverables, licenses, retainers, reviews and related transaction records.
Messaging information includes messages, attachments, reactions, community membership, read receipts and reports. Technical information includes session identifiers, device or browser push subscriptions, notification preferences, request and security logs, and public-profile visit or action events used for profile analytics. Support requests contain the details you choose to submit. Requests sent without signing in use a secret ticket key; anyone with that key can read the request and replies. An IP-derived keyed fingerprint is retained to limit abuse; the raw IP is not stored in the support ticket. Do not send passwords, authenticator setup keys or full payment-card details.
Why we use information
We use information to authenticate accounts, show profiles and opportunities, support collaboration and licensing, deliver messages and requested notifications, handle support and disputes, protect users from abuse, and maintain reliable services. Profile analytics help creators understand activity on their public profile.
We use optional features when you enable or request them. You can change notification preferences, revoke device permissions, change profile visibility and edit account information. Permission to use a device feature does not replace any consent required for a separate purpose.
Who can see information
Information published on a public profile or public opportunity can be viewed by visitors and search engines. Portfolio media, avatars and brand logos use shareable file URLs. Disabling a public profile does not necessarily invalidate a file URL already shared or remove copies held by other people.
Collaboration records and private deliverables are limited by account role and participation rules. Other participants can access information needed for their collaboration. Message recipients can retain or forward what you send. Alnly messaging is not presented as end-to-end encrypted.
Authorized administrators may access records to operate the service, investigate reports, resolve support requests and meet legal obligations. Public reviews can appear on creator profiles; feedback marked private is intended for the Alnly team. Creator earnings and personal bid averages are treated as private account information.
Service providers and disclosures
Alnly uses Supabase for authentication, database, file storage and realtime services, and hosting providers to deliver its websites. Apple or Google process information when you choose their sign-in services. Apple and browser push providers process delivery information when notifications are enabled. These providers have their own privacy notices.
Information may be processed outside your country by the providers used for the service. Applicable transfer requirements must be met. We may disclose information when required by applicable law, to protect people and the service, or as part of a lawful business transfer with appropriate protections. This notice does not authorize unrelated sale or advertising use of your private information.
Cookies, local storage and offline copies
The web application uses cookies and browser storage for authentication, language, interface preferences and functional features. Mobile apps store session and preference information on the device. Messaging may keep an account-bound local history and pending outbox for offline use. A public support ticket key may be retained in this tab’s session storage until the tab closes; save it privately to return later. Signing out clears the app-controlled account cache; your browser, operating system, downloaded files and other recipients may hold separate copies.
Retention and account deletion
Information is retained while needed to provide the service, fulfill collaboration commitments, maintain transaction and safety records, resolve disputes and meet applicable legal obligations. Different records and backup copies may have different retention periods.
Account settings include a deletion process. Active commitments and unsettled payments must be resolved first. Closure disables the account, removes its public profile and redacts personal account fields. Transaction, security, support or legal records may remain where required. Account closure does not automatically erase copies already received or lawfully retained by other participants. Use Support to ask about a particular record or deletion request.
Your choices and rights
Depending on applicable law, you may request access, correction, deletion, restriction, objection, withdrawal of consent or a copy of your personal data. Use your settings for available self-service controls or submit a privacy request through Support. We may verify your identity and explain any legal reason a request cannot be fully completed. You may also contact the competent data-protection authority; in Egypt, this is the Personal Data Protection Center.
Alnly is intended for adults who can enter binding agreements. Do not create an account if you are under 18. If you believe a child has provided personal information, report it through Support.
Changes
We may update this notice as features or requirements change. The version date appears on this page. Material changes will be communicated through the service where appropriate; changes do not remove rights provided by applicable law.