Privacy Policy

01Children’s Privacy

The Platform is intended for use only by individuals who are at least eighteen (18) years old. We do not knowingly collect personal information from anyone under eighteen (18) years of age. If we learn that we have collected personal information from someone under eighteen (18), we will take reasonable steps to delete it. If you believe a minor has provided us with personal information, contact us at support@starlightiq.com.

02Categories of Information

We may collect the following categories of information about you:

• Account Information. Your name, email address, phone number, professional role, and other information you provide to register or maintain your account.
• Commercial Information (Uploaded Content). The Platform lets you upload, store, and manage third-party commercial contracts and related information about your brand and talent relationships (“Uploaded Content”), including counterparty names, contract terms, deliverables, deadlines, and payment information. Sections 10 (Artificial Intelligence) and 11 (Uploaded Content) describe additional protections and your opt-out choices for this category.
• Payment Information. Billing name and address and payment card or bank details, collected and processed by our payment processor on our behalf. We do not store full payment card numbers on our own servers.
• Usage and Device Information. Information about how you use the Platform (features used, pages visited, time spent), and technical information such as IP address, browser type, operating system, and device identifiers, collected automatically, including through cookies, session replay tools, and similar technologies described in Section 5 and our Cookie Policy.
• Location Information. Approximate location inferred from your IP address or device settings.
• Correspondence. Content of communications you send us, and information other users or third parties send us about your activity on the Platform.
• Agency and Client Information. If you use the Platform through an Agency Account (Section 7), information about the clients or team members whose deals you manage, provided by the Agency Account Holder.
• Other Information You Provide. Biographical, employment, or professional information (such as employment history, social media metrics, or industry connections) you choose to add to your profile.

We collect this information directly from you, automatically through your use of the Platform, and, where applicable, from service providers such as our payment processor, or from an Agency Account Holder who manages your information on the Platform.

03Purposes of Processing

We use personal information to:

• Provide the Platform. Operate core features such as organizing, summarizing, and tracking your commercial relationships, including through Auto-Populated Data as described in our Terms of Use.
• Manage Your Account and Payments. Process subscription payments, maintain your account, and enforce our Terms of Use, including billing and collections.
• Communicate With You. Send account, service, and security notices by email and, if you opt in, by SMS, and, where you have not opted out, product updates and marketing.
• Improve and Develop the Platform. Conduct research, testing, and analytics, and develop and improve our features, including, unless you opt out as described in Section 10, using your Uploaded Content in de-identified form to train and improve our AI models.
• Ensure Security and Legal Compliance. Detect and prevent fraud and abuse, enforce our Terms of Use, resolve disputes, and comply with applicable law.

04Categories of Recipients

We do not sell your identifiable personal information to third parties for their own marketing purposes. We may disclose personal information as follows:

• Service Providers. Vendors who perform services on our behalf, such as payment processing, cloud hosting, customer support, analytics, SMS delivery, and artificial intelligence infrastructure providers. These vendors are contractually restricted to using personal information only to provide services to us, consistent with applicable state service-provider and processor requirements.
• Aggregated or De-Identified Data. We may disclose aggregated or de-identified information that does not identify you (for example, industry trend statistics) without restriction. If we begin disclosing or selling such data in a manner that constitutes a “sale” or “share” under applicable state law, we will update this Policy and provide the opt-out and Do Not Sell/Share mechanism described in Section 12 before doing so.
• Legal and Safety Reasons. Law enforcement, regulators, or other parties where we believe disclosure is required by law, legal process, or necessary to protect the rights, property, or safety of StarlightIQ, our users, or others.
• Business Transfers. A successor in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.
• With Your Direction. Any other party, where you direct or consent to the disclosure.

05Cookies, Session Replay, and Similar Technologies

We and our service providers use cookies, pixels, and similar technologies to operate the Platform, remember your preferences, measure performance, and, where you consent, support marketing. Our Cookie Policy describes the categories of cookies we use, the consent banner and preference controls available to you, and how to manage or withdraw consent, including how we honor opt-out preference signals such as Global Privacy Control where required by law.

We also use error monitoring technology to detect, diagnose, and fix errors, crashes, and performance problems. When something goes wrong, it collects technical information about the problem, such as the error message, the page or feature involved, browser, operating system, and device type, IP address, timestamps, and an internal account identifier. Error monitoring is necessary to keep the Platform working and secure, so it runs regardless of your cookie choices; we do not use this data for advertising or sell it.

We and our service providers may also use session replay technology, which records how you interact with the Platform (for example, clicks, scrolling, page views, and the content displayed on screen) to help us diagnose problems, secure the Platform, and improve usability. We take reasonable steps designed to mask or exclude sensitive information from session replay, such as uploaded contract documents, deal and payment details, passwords, and form inputs, but masking may not be complete in every case. We use session replay only if you accept the analytics setting in our cookie preferences, and you can turn it off at any time through the “Cookie Preferences” link in the Platform footer.

06SMS and Mobile Messaging

If you opt in to receive SMS/text messages from us (for example, deadline or renewal reminders), we collect and use your mobile phone number to send those messages. Consent to receive SMS messages is never required to purchase or use a subscription. You may opt out at any time by replying STOP to any message, and we will not share your mobile number or SMS opt-in status with third parties for their own marketing purposes.

07Agency and Business Accounts

If you access the Platform through an account administered by an agency, manager, or other business (an “Agency Account”), that Agency Account Holder controls the information it uploads about you, and we process it on the Agency Account Holder’s behalf and instructions, in our role as a service provider or processor under applicable privacy law. If you have questions about how your information is used within an Agency Account, please contact the Agency Account Holder directly; you may also contact us, and we will direct your request consistent with our obligations as a service provider. On request, we make available a standard data processing addendum to Agency Account Holders describing our respective roles, the categories of data processed, and applicable security and confidentiality commitments.

08Data Retention

We retain personal information for as long as your account is active or as needed to provide the Platform, and thereafter for as long as reasonably necessary to fulfill the purposes described in this Policy, comply with legal, accounting, or reporting obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we securely delete or de-identify it, consistent with applicable law.

09Data Security

We use administrative, technical, and physical safeguards designed to protect personal information consistent with industry standards, and we limit access to personal information to personnel and service providers with a legitimate business need. No system is completely secure, and we cannot guarantee the absolute security of information transmitted to or stored on the Platform. Where required by applicable state data-breach notification laws, we will notify affected individuals (and, where required, regulators) of a security incident without unreasonable delay. Section 18 describes specific security measures.

10Artificial Intelligence

We use artificial intelligence, including third-party AI service providers, to power certain Platform features, such as extracting and organizing information from your Uploaded Content and answering your questions through StarlightIQ AI.

• AI training. Unless you opt out, we may use Platform data, including your Uploaded Content in de-identified form, to train, fine-tune, and improve StarlightIQ’s own AI models and features.
• How to opt out. You can opt out for an individual contract at the time of upload, and you can set your default at any time in your account settings. An opt-out applies to future use and does not require us to delete or retrain models or features developed before you opted out.
• Third-party AI providers. Where we send information to a third-party AI provider, we require that provider not to use your information to train its own general-purpose models, except where you have separately consented.
• Your features are not affected. Opting out does not affect your ability to use AI-assisted features, which may still process your data on a per-request basis to deliver the feature to you.

11Uploaded Content

You are solely responsible for ensuring you have the right to upload any content to the Platform, and that doing so, and our collection and use of it consistent with this Policy, does not violate any law or any contractual, intellectual property, or other legal right of a third party. If our use of your specific Uploaded Content for aggregated-data disclosure, or for AI training as described in Section 10, would violate such a right (for example, a confidentiality clause in a contract you upload), you must opt out of that use at the time of upload or in your account settings, using the in-product controls we provide. Where you opt out, we will segregate that content from any data used for aggregated-data disclosure or AI training. Consistent with our Terms of Use, we are not liable for your provision of Uploaded Content or our use of it in accordance with your election under this Policy.

12Your Privacy Rights

Depending on your state of residence, you may have rights to: (a) know and access the personal information we hold about you; (b) correct inaccurate information; (c) delete your personal information; (d) obtain a portable copy of your information; (e) opt out of the sale or sharing of personal information, or of targeted advertising; (f) limit the use of sensitive personal information; and (g) not be discriminated against for exercising these rights. This is a general summary; the specific rights available to you depend on the law of your state (for example, California, Colorado, Connecticut, Virginia, and other states with comprehensive privacy laws each have their own thresholds and requirements) and may expand as more states adopt privacy legislation.

• How to Exercise Your Rights. Email support@starlightiq.com with your request. We may need to verify your identity before responding, and we will respond within the time required by applicable law. You may designate an authorized agent to submit a request on your behalf, subject to verification.
• Do Not Sell or Share My Personal Information. We do not currently sell or share personal information as those terms are defined under state privacy law. If that changes, we will provide a clear “Do Not Sell or Share My Personal Information” mechanism on the Platform, honor opt-out preference signals such as Global Privacy Control, and update this Policy before doing so.
• Appeals. If we decline a request, you may appeal by replying to our decision email; if we deny your appeal, some states allow you to contact your state Attorney General.

13United States Only

The Platform is offered only to users in the United States, and personal information is processed and stored in the United States. We do not direct the Platform to, or knowingly collect personal information from, individuals located outside the United States. If you access the Platform from outside the United States, you do so at your own initiative and you consent to the transfer, processing, and storage of your information in the United States. If we make the Platform available outside the United States in the future, we will update this Policy before doing so.

14Consent Records

We keep records of your consent to this Policy, our Terms of Use, and any specific consents or opt-outs you provide (such as AI-training opt-outs, SMS, or Uploaded Content elections), including the date, version, and associated account. We retain these records to demonstrate compliance and may use them as evidence in a dispute.

15Contact Us

If you have questions about this Policy or wish to exercise your privacy rights, contact us at StarlightIQ, LLC, Nashville, Tennessee, support@starlightiq.com.

16Connected Social Platforms

When you connect a social account, we store an access token (and, where applicable, a refresh token) and the data that platform returns within the scopes you approve, such as your profile information, follower counts, and post-level metrics. We use this data only to provide the features you see in StarlightIQ. Our use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements, and our use of YouTube data is also governed by the YouTube API Services Terms of Service and the Google Privacy Policy. We also comply with the Meta Platform Terms and Developer Policies and the TikTok Developer Terms of Service. You can disconnect a platform at any time in your settings, and you can revoke Google access at myaccount.google.com/permissions. Raw post records from connected platforms are refreshed or deleted within thirty (30) days, and derived metrics may be retained for as long as your account is active and as needed for the purposes in Section 8.

17How to Delete Your Data

You can delete your account in your settings, or email support@starlightiq.com with the subject “Delete my data.” You can also request deletion of data from Instagram or Facebook through our Data Deletion page. We normally complete deletion within thirty (30) days. Backups containing your data are overwritten on a rolling basis and purged within ninety (90) days. We may retain information where required by law or as described in Section 8.

18Security Measures

In addition to Section 9, traffic to the Platform is encrypted in transit, data is encrypted at rest, and access to production systems is limited to authorized personnel using multi-factor authentication.