Data with a purpose.
Not a mystery.

This page explains the baseline data flows in the current Monelyra application.

1. Controller

, , Portugal is the operator responsible for platform data. Privacy contact: not configured.

2. Data processed

Monelyra stores account identity and contact data, brand and creator profiles, audience and rate information, campaign briefs, linked social account identifiers, encrypted OAuth grants, imported or self-reported social metrics, applications, messages, deliverables, approvals, payment references, payout details, policy acceptances, cookie choices, notifications and security activity logs.

3. Purposes

Data is used to operate accounts, match and manage campaigns, document agreements and approvals, record payments, prevent abuse, support users and comply with legal obligations.

4. Legal bases

Depending on the context, processing may be necessary to perform a contract, take requested pre-contract steps, comply with law, protect legitimate interests in platform security and dispute prevention, or act on consent.

5. Recipients and processors

Hosting provider; transactional email provider; payment provider when configured; professional legal and accounting advisers where necessary.

Campaign participants receive only information needed for the collaboration. The operator must complete this list with the actual provider names, locations and safeguards before launch.

6. Retention

Account and campaign records are retained while the account is active and afterwards only for contractual, tax, dispute, fraud-prevention and legal requirements. The operator must define exact production periods for each record category.

7. Rights

Depending on applicable law, people may request access, correction, deletion, restriction, portability or objection, withdraw consent at any time and complain to their data protection authority. Requests are answered without undue delay and normally within one month after identity verification.

8. Security

The application uses password hashing, prepared database statements, CSRF protection, role-based access checks, upload validation, rate limiting and session controls. No internet service can promise absolute security.

9. International transfers and cookies

Non-essential analytics and marketing technologies remain off until a visitor chooses them. See the Cookie Policy for categories, duration and third-party access.

10. Contact and electronic requests

Send requests to the operator or use the electronic form below.

This baseline policy must be completed with the actual hosting, analytics, email and payment providers and reviewed for the operator’s jurisdiction before production launch.

Referral attribution data

When a creator uses a Founding Creator invitation, Monelyra records the direct referrer, invitation code, attribution time, activation state and any reward entries linked to paid assignments. This data is used to administer the program, prevent duplicate or fraudulent attribution, document payments and meet accounting or legal obligations. It is not used to create additional referral levels.