Privacy Policy

Klout ("we", "us", or "our") is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA") and other applicable South African data protection legislation. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our UGC creator marketplace platform.

Our designated Information Officer is responsible for overseeing our compliance with POPIA. You may contact them at:

We collect the following categories of personal information:

• Account Information: Email address, password (encrypted), full name, phone number, profile image
• Creator Profile: Bio, niche, location, social media links, portfolio content, hourly rates
• Brand Profile: Company name, description, industry, contact information
• Financial Information: Subscription plan history, escrow and payment records (processed in ZAR)
• Content: Portfolio uploads, order deliverables, messages between users
• Technical Data: IP address, browser type, device information, session cookies
• Payment Data: Transaction records processed through TradeSafe (tradesafe.co.za). We do not store credit card or bank details directly.

We process your personal information for the following purposes and on the following legal bases:

• Contract Performance: To provide marketplace services, process bookings, and facilitate payments between brands and creators
• Legitimate Interest: To improve our platform, prevent fraud, and ensure platform security
• Consent: To send marketing communications and for non-essential cookie usage
• Legal Obligation: To comply with South African tax and financial record-keeping requirements

We may share your personal information with:

• Other Platform Users: Creator profiles (name, niche, rates, portfolio) are visible to brands; brand names are visible to creators
• Service Providers: Supabase (database hosting, authentication, file storage), Vercel (hosting), TradeSafe (payment processing)
• Legal Authorities: When required by law, court order, or regulatory authority

We do not sell your personal information to third parties.

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of passwords, secure database hosting, role-based access controls, and regular security assessments. While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet is 100% secure.

In the event of a data breach that compromises the confidentiality, integrity, or availability of your personal information, we will:

• Internal notification: Our Information Officer will be notified immediately upon discovery of any breach
• Regulator notification: The Information Regulator will be notified as soon as reasonably possible, and no later than 72 hours after discovery
• Data subject notification: Affected individuals will be notified promptly if the breach is likely to result in high risk to their rights and freedoms
• Documentation: All breaches will be documented including nature, data affected, and remedial actions taken

We retain your personal information for the following periods:

• Account data: Retained while your account is active, then deleted within 30 days of account deletion
• Financial records: Retained for 5 years as required by SARS and South African tax law
• Order and transaction data: Retained for 3 years for dispute resolution and legal purposes
• Cookie consent records: Retained for the duration of your cookie consent preferences
• Security logs: Retained for 12 months for fraud prevention and security monitoring

You have the following rights in respect of your personal information:

• Right to Access: Request confirmation of whether we hold personal information about you and request a copy
• Right to Correction: Request that we correct or update any inaccurate personal information
• Right to Deletion: Request that we delete your personal information, subject to legal retention requirements
• Right to Object: Object to the processing of your personal information for direct marketing purposes
• Right to Complain: Lodge a complaint with the Information Regulator if you believe we have violated your rights

Your personal information may be transferred to and processed in countries outside of South Africa where our service providers operate (e.g., Supabase infrastructure, TradeSafe payment processing). We ensure that such transfers comply with POPIA requirements and that appropriate safeguards are in place.

We use cookies and similar technologies to maintain your session, authenticate your account, and ensure platform security. Essential cookies are necessary for the platform to function. For non-essential cookies, we obtain your consent through our cookie consent banner. See our Cookie Policy for details.

Our platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the effective date. Your continued use of the platform after such changes constitutes your acceptance of the updated policy.