Are you a creator? Remove yourself here.

Pallas is operated by Centaurio UG (haftungsbeschränkt), Dr.-Rohmer-Weg 11, 65719 Hofheim am Taunus, Germany, represented by the Managing Director Valentin Weinert. Email support@kairocalories.com. We are the controller for the creator data described here. We are not required to appoint a data protection officer (§ 38 BDSG).

Brands paste a link to their product and a budget. Pallas searches public TikTok and Instagram profiles for creators who post about related topics, reads their recent posts and the comments under them, and ranks the creators who might fit, with an estimated price and the contact path the creator published. Brands then decide themselves whether to write to a creator. Pallas never sends messages to creators.

We do not collect or infer health, religion, political views, sexual orientation or other special categories of data (Art. 9 GDPR). Private accounts are left out.

Only from what you made public yourself: your TikTok and Instagram profiles and posts, read logged out through our data provider ScrapeCreators, and the link-in-bio page or website your profile links to. We do not use platform accounts, private APIs or bought databases.

We process this data to help brands find creators for paid promotions and to show them how you asked to be contacted for business. The legal basis is our legitimate interest and that of our users (Art. 6(1)(f) GDPR). We weighed it against your interests like this:

• ·You published the profile, the posts and the business contact to the whole world, and many creators publish a contact precisely to receive brand deals.
• ·We use it only for that business purpose: a brand offering you paid work.
• ·We read only public data, logged out, and nothing that is private or behind a login.
• ·We keep it for at most 12 months after we last read your profile.
• ·We never send messages, and you can remove yourself in one minute on this page.

The ranking is automated. Code computes the numbers (views, frequency, sponsored share); a language model from OpenAI reads your recent captions and comments and scores how well your content fits a product, writes the one-line reason and checks brand safety. The result only orders a list that a person at the brand looks at. It has no legal effect on you and does not decide anything about you by itself, so Art. 22 GDPR does not apply. You can still ask us to explain a score or to have it looked at by a person.

• ·Pallas users whose search matches you see your card. Free searches show the contact of 3 creators, paid searches show all. A user can download their list as a CSV file; that copy is theirs, and our terms require them to delete it when you ask.
• ·Service providers who process data for us under contract (Art. 28 GDPR): Vercel (hosting and the AI Gateway), Supabase (database, Frankfurt), ScrapeCreators (data provider), OpenAI (language model, reached through the Vercel AI Gateway) and Sentry (error reports, which can contain a handle). Details and addresses are in our privacy policy.

Some of these providers are in the USA. Transfers rely on the EU-US Data Privacy Framework where the provider is certified, and on the EU Standard Contractual Clauses otherwise (Art. 45 and 46(2)(c) GDPR). You can ask us for a copy.

• ·12 months after we last read your profile, then it is deleted automatically, including your cards in users' lists.
• ·When you remove yourself: immediately. We keep only your handle, the platform and the date, so that we never collect you again. That list is used for nothing else.
• ·Our log of your removal request (handle, platform, date, channel): 3 years, to show we handled it.

You can ask for access (Art. 15), correction (Art. 16), deletion (Art. 17), restriction (Art. 18) and a copy in a portable format (Art. 20). You can object to the processing at any time (Art. 21), and we stop without asking for reasons. The form above is the fastest way to delete and object at once. For everything else, email support@kairocalories.com. We answer within one month.

You can also complain to a data protection supervisory authority. Ours is The Hessian Commissioner for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany, datenschutz.hessen.de.

We update this notice when what we collect or who processes it changes. The date at the top shows the last update. The privacy policy for Pallas users is at /privacy.