Privacy Policy

We collect the following categories of personal data:

• Account data — name, email address, phone number, and authentication credentials when you create an account.
• Profile data — bio, profile photo, portfolio links, skills, location, languages, and any other information you choose to add to your public or private profile.
• Usage data — pages visited, features used, interactions with briefs and proposals, device type, browser, IP address, and referring URL.
• Payment data — billing information, transaction history, and payout details processed through our payment partners. We do not store full credit card numbers on our servers.
• Uploaded content — files, images, videos, project deliverables, and messages you share through the platform.
• Verification data — identity documents submitted during KYC verification, processed and stored securely.

We use your personal data to:

• Provide, maintain, and improve the SHO Connect platform.
• Match creators with brands based on skills, location, and project requirements.
• Process payments and escrow transactions in Indonesian Rupiah (IDR).
• Generate AI-assisted briefs, recommendations, and content suggestions to enhance your experience.
• Send transactional communications such as project updates, payment confirmations, and security alerts.
• Verify user identity to maintain platform trust and safety.
• Detect and prevent fraud, abuse, and violations of our terms.
• Conduct analytics to understand platform usage and improve our services.

We do not sell your personal data. We share information only with the following categories of service providers, solely to operate the platform:

• Authentication and database infrastructure — to securely store your account data and manage sign-in.
• Cloud storage providers — to host uploaded files, images, and video content.
• Payment processors — to facilitate escrow payments and creator payouts.
• AI service providers — to power brief generation, content recommendations, and voice features. Prompts and outputs may be processed by third-party AI infrastructure but are not used to train third-party models.
• Email delivery services — to send transactional and notification emails.
• Error monitoring services — to detect and resolve technical issues.

We may also disclose data when required by law, regulation, or legal process, or to protect the rights, safety, or property of SHO Connect, our users, or the public.

We use cookies and similar technologies to understand how you interact with SHO Connect. Our analytics tools collect anonymised usage data such as page views, feature interactions, and session duration.

When you first visit the platform, you will be shown a cookie consent banner. You can accept or decline non-essential cookies at any time. Declining analytics cookies will not affect your ability to use the platform.

Essential cookies (e.g. authentication session tokens) are required for the platform to function and cannot be disabled.

Your data is stored in secure cloud infrastructure with encryption at rest and in transit. We implement industry-standard security measures including:

• TLS encryption for all data in transit.
• Encrypted database storage with row-level security policies.
• Secure, signed URLs for file access with automatic expiration.
• Regular security reviews and monitoring for unauthorised access.

While we take all reasonable precautions, no system is completely secure. If you become aware of a security vulnerability, please contact us immediately at privacy@sho.media.

Under Indonesia’s Personal Data Protection Law (UU PDP) and applicable regulations, you have the right to:

• Access— request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Deletion — request deletion of your personal data, subject to legal retention requirements.
• Portability — request your data in a structured, machine-readable format.
• Withdraw consent — withdraw consent for data processing at any time, where consent is the legal basis.
• Object— object to processing of your data for specific purposes.

To exercise any of these rights, email privacy@sho.media. We will respond within 30 days.

Protecting creator contact information is a core principle of SHO Connect:

• Personal contact details (email, phone number, social accounts) are never exposed publicly on creator profiles.
• All communication between brands and creators happens through the SHO Connect messaging system.
• Brands may only contact creators through the platform until both parties mutually agree to share direct contact information.
• Creator earnings, payout details, and financial information are strictly private and visible only to the individual creator.

We retain your personal data for as long as your account is active or as needed to provide our services. Specifically:

• Account data is retained until you delete your account.
• Transaction records are retained for 5 years after the transaction date to comply with Indonesian tax and financial regulations.
• Uploaded content is deleted within 90 days of account closure, unless required for dispute resolution.
• Usage logs are anonymised or deleted after 12 months.

When you request account deletion, we will remove or anonymise your personal data within 30 days, except where retention is required by law.

SHO Connect is a business-to-business platform and is not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected data from a child, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact privacy@sho.media.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by email or through a prominent notice on the platform at least 14 days before the changes take effect.

The “Last updated” date at the top of this page indicates when the policy was most recently revised.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us at: