Privacy Policy

1. Who We Are

Leaky ("we", "us", "our") operates the waitlist at leaky.buzz. We are a platform that connects creators with fans for paid social engagement.

For any privacy-related questions, contact us at: privacy@leaky.buzz

2. What Data We Collect

When you join the waitlist, we collect:

• Full name — to personalise communications
• Email address — to notify you before launch and send your early access confirmation
• Instagram handle — to verify eligibility (2K+ followers required)
• TikTok handle (optional) — to understand your audience reach
• Follower count range — to segment the waitlist by creator tier
• Creator category — to personalise your early access experience

We also automatically collect your IP address for security purposes (rate limiting and abuse prevention). This is not stored long-term and is not linked to your profile.

3. Why We Collect It (Legal Basis)

We process your data for the following purposes:

• Waitlist management — to register your interest and reserve your spot. Legal basis: Legitimate interests / Pre-contractual steps.
• Launch notifications — to email you 48 hours before we open, as you requested when signing up. Legal basis: Consent (your sign-up constitutes consent to receive these communications).
• Security — to prevent spam and abuse of the sign-up form. Legal basis: Legitimate interests.

4. How We Store Your Data

Waitlist submissions are stored securely in our database (Resend Audience). Data is processed within the European Union / United States in compliance with applicable data protection laws.

We retain waitlist data for a maximum of 12 months after collection, or until you request deletion, whichever comes first.

5. Who We Share Your Data With

We do not sell your data. We share it only with:

• Resend (resend.com) — our email service provider, used to send your confirmation email and launch notification. Resend acts as a data processor under our instructions.
• Vercel (vercel.com) — our hosting provider. Vercel may process request metadata (IP, headers) as part of hosting infrastructure.

Both providers are GDPR-compliant and operate under appropriate data processing agreements.

6. Cookies

We use a single functional cookie/localStorage key (leaky_cookie_consent) to remember that you have acknowledged this notice. No tracking cookies, advertising cookies, or analytics cookies are used on this site.

7. Your Rights (GDPR)

If you are located in the EEA, UK, or Switzerland, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data ("right to be forgotten")
• Restriction — ask us to restrict processing of your data
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — unsubscribe at any time via the unsubscribe link in any email we send

To exercise any of these rights, email privacy@leaky.buzz. We will respond within 30 days.

8. Data Security

We take reasonable technical and organisational measures to protect your data, including HTTPS encryption in transit, rate limiting, and bot detection on all submission forms. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Children

This service is not directed at children under 16. We do not knowingly collect data from anyone under 16. If you believe we have inadvertently collected data from a minor, contact us immediately at privacy@leaky.buzz.

10. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date. If changes are material, we will notify waitlist members by email.

11. Contact

Questions, concerns, or requests related to this policy: privacy@leaky.buzz