Privacy policy

Who is responsible for your information

Chirlo is responsible for the personal information it processes to administer accounts, manage billing, protect the service and operate its own website and services. For these purposes, Chirlo acts as the data controller.

A creator decides what their page publishes and how they use information submitted through their forms. Contact that creator about their newsletter, messages, exports or other uses of your submissions. Chirlo hosts the forms and stores submissions for the creator. A creator’s own privacy notice may also apply.

Information Chirlo handles

Depending on how you use the service, this includes:

• Account information: your name, email address, username, profile image, sign-in information, account history and browser details.
• Creator content: your page settings, links, routing rules, campaign labels, uploaded images, form settings and other content you choose to publish. Published content is accessible to visitors.
• Billing information: your subscription, plan, purchase history, billing status and checkout details. Checkout is handled by a payment provider; Chirlo does not store full payment card details.
• Page activity: page views, link clicks, the time of a visit, approximate country, device and browser information, the website you arrived from, campaign information and the destination opened. Links and campaign descriptions can include information supplied by the creator or the person sharing the link.
• Repeat visits: when you accept optional analytics cookies, Chirlo can recognize repeat visits and group activity during a visit. These cookies do not tell Chirlo your name.
• Service and security information: sign-in activity, service problems and information needed to prevent abuse. Service providers process IP addresses to deliver the website. Chirlo’s analytics do not retain visitor IP addresses, complete browser details, precise locations or the complete addresses of websites you arrived from.

Why information is used

Account and page information is used to sign you in, host and edit pages, route links, deliver requested emails, provide creator reports and administer subscriptions. Security information helps prevent fraud, abuse and unauthorized access. Billing records may also be needed to meet accounting and legal obligations.

For account holders, processing needed to provide the requested service is based on performance of the service agreement. Applicable legal obligations may require certain billing records. Protecting the service involves legitimate interests in security and reliability, subject to applicable law and your rights.

Optional visitor and session cookies are based on your consent. Reading this policy, creating an account or continuing to browse does not count as accepting those cookies. Chirlo separately records page views and link clicks to provide creator reports; rejecting optional cookies does not stop that activity recording.

Country and device categories can choose a link destination according to a creator’s routing rules. This routing is not used to make decisions with legal or similarly significant effects about you.

Forms on creator pages

A signup form collects the email address you submit. A contact form can also collect your name and message. Chirlo stores the submission for the creator, who can view, export or delete it. If the creator enables email notifications, the submission is sent to them through the email provider.

Submitting a form is optional and does not accept analytics cookies. A creator is responsible for explaining the purpose of their form, any marketing permission they need, and how to unsubscribe from messages they send. Ask the creator to remove your submission or stop their communications. Do not submit sensitive personal information in a form unless you have an appropriate reason and understand the creator’s intended use.

Reports about creator pages

When you report a page, Chirlo receives the creator username, your reason, the explanation and content links you provide, and your required name and email address. This information is used to review concerns, address abuse and follow up on reports. Contact details are not used for marketing.

Reports are kept privately by Chirlo. Reporter contact details are not shown to the creator through their account. Disclosure may be necessary to handle a legal claim or comply with the law. Reporting also uses an external security-check provider, which may process connection and browser information to help prevent automated submissions. This check is separate from optional analytics cookies.

Reports have no automatic expiry. They may be retained after a creator page is removed so that the concern can still be reviewed. Include only information relevant to the concern and do not submit passwords, payment details or graphic material.

Who receives information

Creators receive submissions to their forms and activity reports about their pages. Chirlo uses service providers for website hosting, information storage, email delivery, security and payments. These providers receive information needed to provide their services. Information may also be disclosed when required by law or necessary to address abuse or legal claims.

Chirlo does not use its analytics cookies for advertising. A creator’s media players and linked websites are separate services. They may receive information about your connection and browser when their content loads or you follow a link, and their own privacy notices apply. Chirlo’s cookie choices do not control their processing.

Processing locations

Information may be processed in countries where Chirlo and its service providers operate. These locations may be outside your country, including outside the European Economic Area or the United Kingdom.

How long information is kept

Account information and creator content remain while the account and content are stored. Form submissions remain until removed by the creator or through the relevant deletion process. Sign-in, security and billing information is kept for service operation, protection and accounting purposes. Retention varies by the kind of information and the service handling it.

Detailed page activity has no automatic expiry and remains until the creator page is removed. Removing a creator page also requests removal of its activity history. A plan’s reporting period limits the history visible in the dashboard; it does not delete older activity.

Withdrawing cookie consent removes the optional analytics cookies and the repeat-visit information associated with those cookies from stored activity. Page-view and link-click records remain. This does not delete all previously collected information. If you have already cleared those cookies, Chirlo may no longer be able to find the previous activity associated with them.

Cookie expiry is separate from how long Chirlo keeps information. See the cookie notice for how long cookies and saved preferences remain on your device.

Your choices and privacy rights

Use Cookie preferences in the footer of the Chirlo website or of a creator page to accept or reject optional analytics cookies and change your choice later. Pages, links and forms remain usable when those cookies are rejected. You can also clear storage through your browser settings.

Depending on the law that applies, you may request access, correction, deletion, restriction or a portable copy of your personal information, and object to certain uses. You can withdraw consent for future consent-based processing. These rights have conditions and exceptions; a request may require information sufficient to identify the relevant records.

For EU or UK rights requests, the usual response period is one month, with a permitted extension for complex requests. You may complain to your local data protection authority, including the Italian Garante if relevant. Visitors elsewhere may have additional rights under applicable local law.

Changes to this notice

The date above identifies this policy’s latest revision. Chirlo updates this policy when its providers, tracking, storage or processing purposes change. Where a change requires new consent or another notification, Chirlo will request that consent or provide the notification separately.