Data controller

Marvi Society is the data controller for personal data processed through the Marvi Society iOS and Android apps, website (marvisociety.com), and related services.

Contact: support@marvisociety.com

Personal data we collect

• Account data: email address, name, Apple or Google identifiers when you use those sign-in methods, authentication tokens.
• Creator profile: Instagram/TikTok handles, city, audience metrics, niches, languages, membership status, collaboration history.
• Venue profile (if applicable): venue name, area, campaign details, owner contact information.
• Location data: approximate device location when you use map or nearby features (only while the app is in use and permission is granted).
• Collaboration data: bookings, check-in codes, proof links, optional proof screenshots, timestamps, strike records.
• Communications: support messages, safety reports, deletion requests.
• Technical data: app version, device type, IP address in server logs (via hosting providers).

Data we do not collect

• We do not sell your personal data.
• We do not use third-party advertising trackers in the iOS or Android apps.
• We do not collect precise background location.
• We do not require access to your contacts or microphone for core features.

How we use your data

• Create and secure your account.
• Review membership applications and maintain marketplace quality.
• Match creators with venue campaigns and manage bookings.
• Verify attendance (check-in) and proof of deliverables.
• Send operational notifications and optional local reminders.
• Enforce Community Guidelines, issue strikes, and resolve disputes.
• Comply with legal obligations and respond to lawful requests.

Legal basis

We process data based on contract performance (providing the Service), legitimate interests (fraud prevention, safety, product improvement), and consent where required (e.g. location permission, optional notifications).

For users in Turkey, we comply with KVKK (Law No. 6698). For users in the EU/EEA, we comply with GDPR.

Sharing and processors

We share data only as needed to operate the Service:

• Supabase — authentication, database, file storage (proof uploads).
• Apple — Sign in with Apple authentication.
• Vercel — website hosting.

Retention

• Account and profile data: retained while your account is active.
• Proof submissions: up to 24 months for dispute resolution, then deleted or anonymized.
• Server logs: typically up to 90 days.
• Deletion requests: retained only as long as needed to complete verification and audit the request.

Your rights

Depending on your jurisdiction, you may request access, correction, portability, restriction, objection, or deletion of your personal data.

Delete your account in the iOS or Android app (Profile), at https://marvisociety.com/delete-account, or email support@marvisociety.com.

Age requirement

Marvi Society is for users aged 18 and over. We do not knowingly collect data from anyone under 18.

Security

We use industry-standard measures including encrypted transport (HTTPS/TLS), access controls, row-level security in our database, and least-privilege administrative access.

Changes to this policy

We may update this policy. Material changes will be posted on this page with an updated date. Continued use after changes constitutes acceptance.