Privacy Policy

Effective date: September 17, 2026

Attenzo ("we", "our", "us") operates a two-sided marketplace where companies fund attention campaigns and users earn real money for verified attention and honest feedback. This Privacy Policy explains what personal data we collect, why we collect it, and the choices you have.

1. Who we are

Attenzo is operated by [Company Legal Name] ("Attenzo", "the Platform"). For privacy questions, contact [email protected].

2. Data we collect

Account data: email address, username, first and last name, country, date of birth, phone number (if you add one), avatar and banner images, bio, and interest tags.

Identity data: Google or GitHub identifiers when you sign in with OAuth, and your verified email address.

Financial data: wallet balance, transaction history, payout/bank account details (routing and account number, stored encrypted), referral rewards, and prepaid credit balance. Card details are handled by Stripe and are never stored on our servers.

Activity data: tasks you complete, reviews and ratings you submit, screenshots you upload as proof, moderation flags, warnings, and leaderboard participation.

Technical data: IP address, browser and device type, pages visited, and cookies (see our Cookie Policy).

3. How we use your data

• To operate your account and process earnings, payouts, funding and credits.
• To run moderation, fraud and anti-abuse checks on tasks and reviews.
• To calculate leaderboards and analytics (aggregated where possible).
• To send transactional email, OTP codes, notifications and support replies.
• To meet legal, tax and accounting obligations.

4. Legal bases

We process data on the following bases: performance of our contract with you, your consent (e.g. marketing, where applicable), compliance with law, and our legitimate interests in preventing fraud and keeping the platform safe.

5. Sharing

We share data only with: payment processors (Stripe), email/SMS providers, cloud storage (Cloudflare R2 for media), analytics providers, and where the law requires. We never sell your personal data.

6. Retention

We keep account data while your account is active. Deleted accounts are finalized after a 7-day grace period. Financial records are retained as required by tax and accounting law. Media objects are purged when no longer referenced.

7. Security

Passwords are hashed with Argon2id. Sessions use HTTP-only cookies. Two-factor authentication is available. Money moves through a double-entry ledger with integer-cent accounting. All traffic is encrypted in transit.

8. Your rights

Depending on your region (including GDPR/CCPA where applicable), you may access, correct, export, or delete your data, and object to or restrict processing. Use Settings in the app, or contact [email protected].

9. International transfers

Data may be transferred to and processed in jurisdictions where our service providers operate, with appropriate safeguards in place.

10. Changes

We update this policy from time to time. Material changes are announced in-app and by email. Continued use after changes means you accept the updated policy.