Your story stays yours.
This notice explains what RentMyHype processes, why it is needed and the choices available to you.
Effective 20 September 2026 · Version 1.0
Controller
The controller is Albert Vila Mora, Carrer Vilanova de Sau 22, 08519 Folgueroles, Barcelona, Spain. A monitored privacy email must be published before accounts are opened beyond controlled launch acceptance; until then, signed-in users can use the account closure workflow and the contact page identifies the available public channel.
Data we process
We process account and authentication data; profile and social usernames you provide; public opportunity, creator and approximate city information; private drafts, messages, proposals and agreements; sponsor brands and artwork; recordings or models you choose to capture; delivery evidence; security and audit events; and sandbox commerce records.
Purposes and legal bases
We use this information to create and secure your account, publish the content you request, connect creators with sponsors, perform agreed workflows, prevent abuse, respond to rights and disputes, and meet legal obligations. Depending on the activity, the basis is performance of a contract or steps you request before one, consent for optional analytics or location, legitimate interests in security and service integrity, or a legal obligation.
Public information
Your display name, creator description, selected social profiles, approximate public city and active published opportunities may be visible without signing in. Exact device location, login email, private media, drafts, messages, bids, orders and payment records are not part of the public profile. Closing an opportunity removes it from active discovery.
Providers
RentMyHype uses Supabase for authentication, database and private storage; Vercel for hosting; Brevo for email; Mapbox for maps; Datafast for consented analytics and limited bot measurement; and Stripe sandbox for payment testing. TypeSafe guidance is optional and remains disabled until its data handling is accepted. Providers process only the information needed for their function under their applicable terms.
Retention and security
Account and content data are kept while needed to provide the service. Closure requests are reviewed manually. Commercial agreements, invoices, disputes, safety records and delivery evidence may be retained for applicable accounting, legal or defence periods. Unreferenced reserved uploads are scheduled for cleanup. Access controls, private buckets, signed URLs and row-level database policies limit access.
Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, objection and portability, and withdraw consent without affecting earlier lawful processing. You may also complain to the Spanish Data Protection Agency or your local supervisory authority. Identity verification may be required to protect the account.
International processing and updates
Some providers may process data outside Spain or the EEA under their contractual safeguards. Before public onboarding, the final provider regions, transfer mechanisms, retention schedule and rights contact must be verified. Changes to this notice will show a new version and effective date.