Privacy Policy

1. Who we are

Repped is an online directory that connects crypto content creators with projects. We are operated as an independent platform. If you have questions about this policy, contact us via X.

2. What data we collect

For creators (via X login): When you sign in with X, we receive your public X profile data: your username (handle), display name, profile picture, bio, and follower count. We also store a reference to your Supabase authentication ID. We do not receive your password or access to post on your behalf.

For creators (via application form): Your X handle, email address, bio, and any information you voluntarily provide in your application.

For projects (via inquiry form): Your project name, your X handle, your email address, and the message you send to a creator.

Payment data: Payments are processed by Stripe. We do not store your credit card or banking details. Stripe's privacy policy applies to payment data.

3. How we use your data

• To display your public creator profile in the directory
• To forward inquiries from projects to creators
• To notify you when your application is approved (email)
• To detect and prevent abuse and scams
• To process payments via Stripe

We do not sell your data to third parties. We do not use your data for advertising.

4. What is shown publicly

For listed creators, the following information is shown publicly on your profile: your X handle, display name, profile picture, bio, niches, services, follower count, and Ethos score.

Your email address is never shown publicly. Project contact details are only revealed to a creator after they accept an inquiry.

5. Cookies and local storage

We use cookies strictly necessary for authentication (provided by Supabase). These cookies keep you logged in and are required for the platform to function. We do not use advertising or tracking cookies.

6. Data retention

We retain your data for as long as your account or profile is active. If you request removal from the directory, we will delete your public profile within 24 hours. Authentication records may be retained for a short period for security purposes.

7. Your rights (GDPR)

If you are located in the European Economic Area, you have the right to access, correct, or delete the personal data we hold about you. You also have the right to object to processing and to data portability.

To exercise any of these rights, contact us via X. We will respond within 30 days.

8. Third-party services

• Supabase — database and authentication
• Stripe — payment processing
• Ethos Network — public reputation scores via their API
• X (Twitter) — OAuth login and public profile data

Each of these services has their own privacy policy. We only share data with them to the extent necessary to operate the platform.

9. Changes to this policy

We may update this policy from time to time. If we make significant changes, we will note the updated date at the top of this page. Continued use of the platform after changes means you accept the updated policy.