Who handles your information?
XO The Agency is responsible for the personal information described here. Our business contact address is Strada Primăriei, Oradea, Romania. For privacy questions or requests, email xotheagency@gmail.com.
What we collect
When you apply, we collect your name, email, phone number, country, creator experience and the profile details you provide. These can include your Instagram handle, creator page link, platform, revenue and subscriber ranges, niche, requested services, available creation time, AI preferences and message. We also receive your language, application page and any campaign tags in its address, such as the ad or link that brought you here.
You confirm that you are at least 18 and agree to contact about your application. We do not ask for a password, identity document or explicit photos. Please do not include intimate or sensitive personal details in your message. The website and its security providers also process technical data, such as your IP address, browser and request information, to deliver and protect the service.
Why we use it
We use application information to assess a potential collaboration and respond to your request, including steps you ask us to take before entering a contract. We use technical information to pursue our legitimate interests in keeping the website secure, preventing spam and understanding which campaigns bring applications. Where we rely on consent, you can withdraw it by contacting us. Applying does not sign you up to a marketing mailing list.
Required fields help us review your application and contact you. If you prefer not to use the form, you can email us. A team member reviews applications; we do not make decisions with legal or similarly significant effects solely through automated processing.
Who can access it
Applications are stored in a private Google Sheet accessible to authorized team members. We use Vercel to host the website and process form requests, Google to store applications and run the integration, and Cloudflare Turnstile to protect the form from automated abuse. Our Telegram team group receives a notification with the application language and a link to the private sheet; the notification does not include your name, contact details or message. We do not sell application information.
These providers may process information outside your country, including outside the European Economic Area. Where required, international transfers must use an applicable adequacy decision or appropriate safeguards, such as standard contractual clauses. Contact us for information about the safeguards relevant to your data.
How long we keep it
We keep application information for as long as needed to review your request, discuss a possible collaboration and handle necessary follow-up. We delete information when it is no longer needed, unless a legal obligation or the establishment, exercise or defence of a legal claim requires retention. If we begin working together, further contractual and privacy information will apply to that relationship. You can contact us to request deletion.
Cookies and website security
This version of the website does not load advertising pixels or optional analytics cookies. Campaign tags submitted with an application help identify its source. Cloudflare Turnstile processes browser and device signals for security. If optional tracking is introduced, we will explain it and request consent where required.
Your choices and rights
Depending on the law that applies, you can request access, correction, deletion, restriction or a portable copy of your information, object to processing, or withdraw consent without affecting the lawfulness of earlier processing. Send requests to xotheagency@gmail.com; we may ask for information needed to verify your identity. You can also complain to your local data protection authority, including Romania’s ANSPDCP. We will update this notice if our practices change.