Privacy policy
Wibbii is a marketplace where brands book creators and Wibbii manages the payment. This page says what data we handle, why, and what you can do about it — in plain language, because that is how we write everything. Questions: privacy@wibbii.com.
What we collect
Account data: your name, email, password (stored only as a salted hash), account type and postal address if you add one. Profile data creators choose to publish: bio, city, niches, packages and prices, portrait. Order data: offers, agreements, messages, delivered files, and the full payment trail — this is the written protection every booking gets. Technical data: the logs any server keeps (IP, timestamps) for security and debugging.
Connected Instagram and TikTok accounts
Creator profiles exist only for connected accounts — nothing is scraped or claimed. When you connect Instagram (via Meta’s API) or TikTok (via TikTok’s Login Kit), you authorize us to read your public handle and account metrics: follower count, median views, engagement, and aggregated audience demographics (country, age bands, gender split) where the platform grants them. We refresh these in the background and store them in your profile. Metrics a platform does not grant stay empty — we never estimate or invent them. We never see your platform password, we never post on your behalf, and we never read your messages there. Disconnecting (here or from the platform’s own settings) stops all access; if a creator’s last account disconnects, the profile unpublishes automatically.
Sign in with Google
If you use Google sign-in we receive your name, email and Google account id — nothing else — to create or link your Wibbii account.
Payments
Card and bank details go directly to our payment provider (Stripe). We store only provider references and display data such as the card brand and last four digits — never full numbers. The money trail itself (escrow, releases, payouts, fees, referral shares) is kept as a permanent ledger, because both sides of every booking depend on it.
What we use data for
Running the marketplace: matching, bookings, escrow, payouts, disputes, referrals. Sending the email the service needs — verification, password resets, order notifications. Keeping the platform safe: fraud prevention, enforcement of our terms, and the audit trail of our own operators’ actions. We do not sell personal data, we do not run third-party advertising trackers, and we use no analytics cookies.
Cookies
Two, both functional: a session cookie that keeps you logged in, and — only if you arrive through a creator’s invite link — a referral cookie for 30 days so the inviter gets credit. That is the whole list.
Who we share with
Processors that run the service: Stripe (payments), Supabase (database and file storage), Vercel (hosting), Resend (email delivery), and the platform APIs you explicitly connect (Meta, TikTok, Google). Each receives only what its job requires. Public parts of the marketplace — a published creator profile, its measured metrics, its representing agency — are visible to anyone, because transparency is the product.
Data deletion
Connected platform data: disconnect the account under Settings → Connections (or revoke Wibbii from Instagram/TikTok/Google’s own settings — we honor their deauthorization signals automatically) and we stop all access; stored metrics for that connection are deleted with it. Your whole account: email privacy@wibbii.com from your account address and we delete your account and personal data within 30 days. Records we must keep — completed order agreements, the payment ledger, payment records — are retained as law and accounting require, then deleted.
Your rights
You can access, correct, export, or delete your data, and object to or restrict processing — email privacy@wibbii.com. We answer within 30 days. You can also complain to your data protection authority; ours is IMY (Sweden), where Wibbii is established.
Practical facts
Data is stored within the EU. Wibbii is for professional use by people 18 or older. If this policy changes materially we note it here with a new effective date and, for significant changes, email account holders. See also our terms of service.