Privacy Policy

MakeMake AI Ltd ("MakeMake", "we", "us", "our") is a private limited company registered in Ireland. We operate the MakeMake platform at makemakehq.com — a two-sided marketplace connecting Data & AI brands with verified content creators for sponsored campaigns.

MakeMake AI Ltd is the data controller responsible for your personal data under the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Acts 1988–2018.

Contact: For all data protection enquiries, please email support@makemakehq.com.

We collect the following categories of personal data:

• Account data: email address, name, and (if you use Google OAuth) your Google account identifier and profile picture.
• Creator profile data: bio, city, country, professional niche, social platform handles, follower counts, credentials, availability status, and uploaded profile photo.
• Brand data: company name, contact name, website URL, industry, company size, and billing details (processed by Stripe — we do not store card numbers).
• Transaction data: Stripe customer ID, subscription status, and free-access and billing dates.
• Usage data: pages visited, features used, IP address, browser type, and approximate location (derived from IP).
• Communications: messages you send to us via email or any contact form.
• Cookie data: see Section 11 below.

• Directly from you when you register, complete your profile, post a brief, or apply to a campaign.
• Via Google OAuth if you choose to sign in with Google — we receive your name, email address, and profile picture from Google.
• Automatically as you use the platform: our servers log requests, and analytics tools record usage patterns.
• From Stripe when a payment event occurs (e.g. subscription started, payment failed) via webhook.

When you start creator onboarding by entering your LinkedIn profile URL, we verify publicly available professional signals from that profile to compute your MakeMake Verified status and scores.

• What we fetch: publicly available LinkedIn profile data — name, headline, photo, location, experience, certifications, recommendations count, follower and connection counts, and skills.
• Why: profile verification — building the Verified Signals, Professional Score, and Practitioner Score shown on your MakeMake profile. You explicitly consent to this before we release your results.
• Cache retention: lookups that are never claimed as a profile are retained for a maximum of 30 days and then deleted.
• Deletion rights: you may request erasure of this data at any time under GDPR Article 17 by emailing support@makemakehq.com with the subject line "Data Rights Request".

We rely on the following legal bases under GDPR Article 6:

• Contract (Art. 6(1)(b)): processing your account and profile data to provide the MakeMake service you have signed up for.
• Legitimate interest (Art. 6(1)(f)): usage analytics to improve the platform, fraud prevention, and security monitoring. Our interests are balanced against your rights and do not override them.
• Legal obligation (Art. 6(1)(c)): retaining financial records to comply with Irish tax and accounting law.
• Consent (Art. 6(1)(a)): placing non-essential cookies and, where applicable, sending marketing communications. You may withdraw consent at any time.

• To create and manage your account.
• To display your creator profile to brands, or brand briefs to creators, as part of the marketplace.
• To process subscription payments and manage free-access periods.
• To send transactional emails (login codes, application updates, account notifications).
• To analyse platform usage and improve features.
• To detect, investigate, and prevent fraud or abuse.
• To comply with applicable law and respond to lawful requests.

We do not sell your personal data. We share it only with the following sub-processors to operate the platform:

• Base44 (hosting & infrastructure) — our application platform provider. Data is hosted within EU infrastructure. Privacy policy: base44.com.
• Google LLC — OAuth sign-in. If you choose "Sign in with Google", Google receives your authentication request. Privacy policy: policies.google.com/privacy.
• Resend Inc. — transactional email delivery (login codes, notifications). Processes your email address. Privacy policy: resend.com/legal/privacy-policy.
• Stripe Inc. — payment processing. Processes billing information for brand subscriptions. Privacy policy: stripe.com/ie/privacy.

We may also disclose data to competent authorities if required by law or to protect the rights, property, or safety of MakeMake, our users, or others.

Some of our sub-processors (including Google and Stripe) are based in the United States and may process your data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we ensure it is protected by appropriate safeguards — primarily the European Commission's Standard Contractual Clauses (SCCs) — or by relying on an adequacy decision. You may request a copy of the applicable transfer mechanism by contacting support@makemakehq.com.

• Account and profile data: retained for the duration of your account plus 12 months after deletion, to allow reactivation and handle disputes.
• Financial records: retained for 7 years in compliance with Irish tax law (Companies Act 2014 / Taxes Consolidation Act 1997).
• Server and usage logs: retained for 90 days.
• Marketing consent records: retained for 3 years from the date of consent or last interaction.

After these periods, data is securely deleted or anonymised.

Under GDPR, you have the following rights in relation to your personal data:

• Access: obtain a copy of the personal data we hold about you.
• Rectification: ask us to correct inaccurate or incomplete data.
• Erasure ("right to be forgotten"): request deletion of your data where there is no overriding legal reason to retain it.
• Restriction: ask us to pause processing while a dispute is resolved.
• Data portability: receive your data in a structured, machine-readable format (where processing is automated and based on consent or contract).
• Objection: object to processing based on legitimate interests.
• Withdraw consent: where we rely on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of the rights above, email support@makemakehq.com with the subject line "Data Rights Request". We will respond within one calendar month of receiving a valid request. We may need to verify your identity before processing the request.

There is no fee for exercising your rights, unless requests are manifestly unfounded or excessive.

We use cookies and similar tracking technologies for the following purposes:

• Strictly necessary cookies: required for the platform to function (e.g. session management). These do not require consent.
• Analytics cookies (GA4 — Google Analytics 4): we use Google Analytics to understand how users interact with the platform. This involves setting cookies and transferring usage data to Google. We collect this data only with your consent, which you can manage via our cookie banner.

You can withdraw your analytics consent at any time by clearing cookies in your browser or revisiting our cookie settings.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These include:

• HTTPS encryption for all data in transit.
• Access controls limiting data access to authorised personnel only.
• Stripe-managed PCI-DSS compliance for payment card data.
• Regular review of our security practices.

No method of transmission over the internet is 100% secure. If you become aware of any security vulnerability, please contact us immediately at support@makemakehq.com.

MakeMake is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Irish Data Protection Commission (DPC):

• Website: www.dataprotection.ie
• Phone: +353 (0)761 104 800
• Address: 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland

We would, however, appreciate the opportunity to address your concerns before you contact the DPC, so please reach out to us first.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by email or by a prominent notice on the platform. The "Last updated" date at the top of this page will always reflect the current version. Continued use of the platform after changes constitutes your acknowledgement of the updated policy.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data:

• Email: support@makemakehq.com
• General enquiries: support@makemakehq.com
• Company: MakeMake AI Ltd, Cork, Ireland