Privacy Policy

Chirp is an influencer-marketing operations platform operated by PT Maleo Kreatif. This policy explains what personal information we handle, why, and what choices you have.

Chirp handles two different kinds of personal information, and our role differs for each. For people who hold a Chirp account, we decide how their information is used. For information about creators that an agency stores in its workspace, the agency decides how it is used and we process it on their instructions. If you are a creator and want your information changed or removed, contact the agency you are working with — we will help them act on your request.

Information about account holders

• Name, email address, and profile details.
• Authentication data, depending on how you sign in — Google, Lark, email one-time codes, password, passkeys, or two-factor codes.
• Workspace membership and role, so we know what you are allowed to see and change.
• Activity records — actions taken in a workspace, kept so teams can see who changed what.

Information agencies store about creators

Agencies use Chirp to manage relationships with creators. Depending on how an agency uses the platform, that can include:

• Name, handle, biography, niche, gender, location, and languages.
• Contact details for the creator or their manager, including phone numbers and email addresses.
• Social media accounts, follower counts, engagement metrics, and publicly available post data.
• Rates, negotiated fees, deal history, and campaign participation.
• Bank account details, where an agency pays a creator through the platform.
• Uploaded documents — contracts, NDAs and SPKs, invoices, briefs, transfer receipts, and Indonesian identity documents (KTP and NPWP).
• Message history where an agency communicates with a creator through Chirp.

Identity documents, transfer receipts, and other sensitive files are stored in private storage and served only through an access-controlled route — they are never publicly reachable by URL.

How information is used

• To operate the platform and the features an agency chooses to use.
• To find and enrich creator profiles through third-party data providers, when an agency requests it.
• To generate summaries and drafts using AI — for example, a short creator description or an extracted campaign brief. AI output is generated from information already held in the workspace and is reviewed by a person before it is used.
• To send and receive messages through WhatsApp and Instagram, where connected.
• To send service email such as sign-in codes, invitations, and notifications.
• To keep the platform secure and diagnose problems.

Service providers

We use the following providers to run Chirp. Each receives only what it needs for its function:

• Vercel — application hosting and file storage.
• Neon — database hosting.
• Anthropic — AI features.
• influencers.club and Apify — creator discovery and profile data.
• Meta — WhatsApp Business and Instagram messaging, where connected.
• Lark — notifications and data import, where connected.
• Resend — transactional email.
• Google — sign-in, where used.

We do not sell personal information, and we do not share it for advertising.

Where information is stored

Our database is hosted in Singapore. Some processing — including AI features — takes place outside Indonesia, which means information may be transferred across borders. We use providers that offer appropriate protections for that transfer.

How long information is kept

Account information is kept while the account is active. Information an agency stores about creators is kept until the agency deletes it or closes its workspace. Some records are kept longer where the law requires it — financial records, for example. When a workspace is deleted, associated data is removed from our systems.

Your rights

Depending on where you live, you may have the right to access your information, correct it, delete it, object to how it is used, or withdraw consent. To exercise any of these, contact us at hi@maleo.agency. If your information is held in an agency’s workspace, we will pass your request to that agency and support them in responding.

Security

Data is encrypted in transit. Sensitive documents are held in private storage behind authenticated access. Each workspace is isolated, and access within a workspace is controlled by role. No system is perfectly secure, but we take these measures seriously and review them as the platform changes.

Children

Chirp is a business tool and is not intended for anyone under 18. We do not knowingly collect information from children.

Changes

We may update this policy as the platform changes. The date at the top reflects the most recent version, and we will tell account holders about significant changes.

Contact

Questions about this policy or how your information is handled: hi@maleo.agency.