Privacy policy

1Who is responsible

INFINITY ADSTARS GROUP LTD is the controller of the personal data described here. Questions, requests and complaints go to info@adstars.app, and we answer them ourselves rather than routing them to a form.

2What we collect

• —Account data — name, email, password hash, role, and for specialists the identity evidence required by verification.
• —Profile data — professional title, headline, disciplines, experience, availability, rates, and anything else you choose to publish.
• —Engagement data — briefs, proposals, contracts, milestones, approvals, chat messages, attachments and deliverables.
• —Verification data — the documentary evidence behind a claimed result, and, where you connect one, metrics read from your advertising account.
• —Payment data — the identifiers our payment provider returns. We do not store full card numbers.
• —Technical data — IP address, device and browser information, and rate-limiting records, collected to keep the service available and to stop abuse.
• —Marketing data — the email address you give a signup form, and whether you consented to marketing at the point you gave it.

3Why we use it, and on what basis

• —To provide the platform and the features you are using — performance of our contract with you.
• —To verify identity, skills and results, and to moderate published content — legitimate interests in a marketplace that is not fraudulent, and legal obligation where anti-money-laundering rules apply.
• —To operate escrow, payouts and invoicing — performance of contract, and legal obligation for records we must retain.
• —To adjudicate disputes — performance of contract, and legitimate interests in a workable resolution process.
• —To keep the service secure and available, including rate limiting and abuse detection — legitimate interests.
• —To send launch and product email — consent, which you may withdraw at any time from any message we send.

4Connected advertising accounts

Where a specialist connects an advertising account, we read only the metrics needed for the results being verified and for the analytics shown inside the relevant project. We do not read message content, contact lists or unrelated campaigns.

A connection can be revoked by the specialist at any time from the platform or from the advertising provider. Revoking it stops further reads and downgrades any result whose level depended on the connection.

5Who else processes it

• —Stripe — payments, escrow and payouts, as an independent controller for its own regulatory purposes.
• —Our cloud hosting and database provider — infrastructure on which the platform runs.
• —Our email delivery provider — transactional and, where consented, marketing email.
• —AI model providers — for the audit, brief builder, matching explanations and copilots. Prompts derived from your data are sent to produce output for you, and are not used by us to train models.

We do not sell personal data, and we do not share your brief or project data with other clients or specialists.

6What is public, and what is not

The public directory, public profiles, published case studies, endorsements, knowledge articles and share links show only what has been deliberately published — and, where a client's result is involved, only with that client's recorded consent.

Publication and consent are both revocable. When either is withdrawn, the item is removed from the profile, from shortlists and from any shared link, at the database level rather than by hiding it.

7How long we keep it

• —Account and profile data — while the account is open, then deleted or anonymised within 90 days of closure.
• —Engagement, milestone and payment records — retained for the period our tax and accounting obligations require, typically six to seven years, because they evidence money that moved.
• —Dispute records — retained for the same period, since they are the reasoning behind a financial outcome.
• —Verification evidence — retained while the verification stands, and deleted when it is withdrawn or the account closes.
• —Marketing contacts — until you unsubscribe, then a suppression record only, so we do not email you again by accident.

8Your rights

• —Access — a copy of the personal data we hold about you.
• —Rectification — correction of anything inaccurate.
• —Erasure — deletion, except where we are required to retain financial records.
• —Portability — an export of the data you provided, in a machine-readable format.
• —Objection and restriction — including to any processing based on legitimate interests.
• —Withdrawal of consent — for marketing, and for any published result you consented to.

Write to info@adstars.app. We respond within one month. You also have the right to complain to your data protection authority.

9International transfers

Our providers may process data outside your country. Where they do, transfers are made under the safeguards the applicable law requires, such as standard contractual clauses or an adequacy decision.

10Cookies and analytics

This marketing website sets no advertising cookies and runs no cross-site tracking. It never sells or shares your data with advertising networks.

It does measure which pages people find useful, and only if you agree. Until you accept, nothing is sent, no measurement code runs and no analytics cookie is created; if you reject, or simply never answer, none of it happens at all.

If you do accept, we use Google Analytics. It records the pages you visit on this site and sets cookies that identify your browser across visits so repeat visits are not counted as new people. Google acts as our processor for this and may process the data outside your country under the safeguards described above. We do not send Google your name, your email address or anything you type into a form, and we do not use this data for advertising or share it with advertising networks.

Accepting also switches on two measurements from Vercel, who host this website and act as our processor for both. Speed Insights records how quickly pages actually load for real visitors: the page address, timing measurements, and the broad type of device and connection. Web Analytics counts page views and the site that referred them. Neither sets a cookie, neither creates an identifier that follows you to another site, and neither receives anything you type into a form.

You can change your mind whenever you like. Rejecting stops any further collection immediately; to remove the cookies already set, clear cookies for this site in your browser.

Two small pieces of browser storage are used regardless, and neither ever leaves your device: a flag recording that you dismissed the announcement bar, and a flag recording the analytics answer above so we do not ask you at every page.

The applications use strictly necessary cookies for authentication and session security. They are required for the service to function and are not used for advertising.

11Children

The platform is not intended for anyone under 18, and we do not knowingly collect their data. If you believe a child has given us personal data, write to info@adstars.app and we will delete it.

12Breach notification

If a breach is likely to result in a risk to your rights, we will notify the relevant authority within 72 hours of becoming aware of it, and notify you without undue delay where the risk is high.