Privacy notice
Who is responsible
Total Disruptive, S.L., NIF B56932940, C/ Manuel de Falla 29, Sat. 1, 08034 Barcelona, Spain. Contact admin@chalsai.com for privacy questions and requests.
Information used by the service
- Account: the WorkOS user identifier and any email or organization information supplied during sign-in. WorkOS manages the credentials; we do not store your password.
- Campaign plans: the brand handle, company description, audience, country, brief, angles, tasks, links, timing, budget, creator selections, proposed offers and changes you choose to save.
- Creator catalog: public professional profile identifiers, names, photos, bios, location/country, posting language, links, audience counts and aggregate public post metrics. Internal research may include professional contact details published by the creator. These contacts and internal notes are not returned by the connector. No lists of followers or people interacting with posts are collected by this connector.
- Creator applications: when you apply on the creators page, your X handle and profile link, email, the content types and topics you choose, your consent and, if you add it, a screenshot of your X audience statistics. We also keep the review status (pending, approved or not approved), its date and any internal note. Brands never see your email.
- Optional payments: Stripe customer, session, subscription, invoice, charge and refund identifiers, currency, amounts, and recorded statuses. Card details are entered on Stripe and do not reach our server.
- Security and operation: timestamps, request method, path, tool name, status, latency and error information. Hosting providers may process IP addresses and other connection metadata.
The connector receives tool parameters and widget actions, not access to the assistant’s chat history, memory or uploaded files. Text you deliberately include in a saved brief becomes part of that campaign. Do not submit sensitive personal data or confidential information you are not authorized to share.
Purposes and legal bases
Account and campaign data are used to provide the service you request and administer optional paid services (performance of a contract or steps at your request). Security, diagnostics and professional creator research are based on our legitimate interests in operating a reliable service and matching relevant public professional profiles. Required accounting records are retained to comply with legal obligations. We do not use this data to train AI models, sell personal data or sell placement in search results. No automated decision creates a creator agreement or commits a user to a payment.
Creator applications are used to review whether your profile fits the brands on the platform and to contact you by email about paid offers, based on the consent you give in the form. You can withdraw it at any time by emailing us. A person on our team reviews every application; approval only adds you to the network and never commits you to an offer.
Providers and recipients
Google Cloud hosts the service and stores the creator catalog and operational records in europe-west1. WorkOS provides sign-in and Stripe processes optional payments. If you use Google sign-in, Google processes that sign-in. Opening creator photos or an external X link can contact the corresponding third-party service. Public X data is researched without using your X or LinkedIn session; the current enrichment process uses the public FxTwitter service.
The home and creators pages are also published at chalsai.com/chalschannel/ through Netlify, which delivers them and processes connection data such as IP addresses.
Creator applications are stored in Google Cloud (Firestore and BigQuery, europe-west1) and each one is notified by email, through Google Workspace, to our team at admin@chalsai.com, with the screenshot attached when you add one.
When you explicitly continue with a collaboration on our website, the team may share the brand brief, format, proposed timing and offer with the selected creator to coordinate it. Merely saving a campaign does not contact the creator. WorkOS, Stripe and other providers may process data outside the EEA under their applicable data-protection arrangements; contact us for information on the relevant safeguards. Your assistant provider processes your chat under its own policy.
Storage and retention
Account and campaign records are kept while needed to provide your saved workspace and resolve related requests. Ask us to close the account and erase records that are no longer required. Transaction and dispute records are kept for the applicable accounting and legal periods. Public creator records remain until no longer relevant, corrected or removed following an objection or removal request; removal from the directory is handled the same day. Creator applications, their screenshots and the review history are kept while your application is under review or you are part of the network; ask us to remove them and we delete them the same day, together with our email notice. The hosting project’s default operational log bucket retains logs for seven days. One-use account links expire after five minutes and account sessions after one hour; expiration prevents access but does not by itself erase every stored audit record.
Cookies and tracking
These public pages, including the home and creators pages, use no analytics, advertising cookies or third-party embeds; fonts, images and video are served from our own domain. The account page uses a strictly necessary HttpOnly, Secure, SameSite cookie lasting up to one hour, plus a CSRF check. WorkOS and Stripe hosted pages have their own cookies and notices. There is no analytics SDK in this connector.
Your rights
Email us to request access, correction, erasure, restriction, portability or to object, as applicable. Creators can request correction or removal without opening an account or paying, and withdraw from the network at any time. We assess requests under applicable data protection law. You may complain to your supervisory authority; in Spain, the AEPD. Disconnecting the connector stops its access from your assistant; to erase saved records, also contact us.
Scope and changes
This notice covers the Chals Channel connector, website and creator applications. It does not replace the notices for earlier Chals Channel services. If the service changes, we update this notice and its date.