Privacy and Data Protection Policy
Last updated: October 17, 2026
This policy explains which personal data Findie processes, why, who we share it with, how long we keep it and how you can exercise your rights. It is the «Política de Tratamiento de Datos» / «Política de Protección de Datos» referred to in our Client Terms and Conditions and Talent Terms and Conditions, and it complements them.
It applies to findie.global, space.findie.global and the emails we send you. It complies with Chilean Laws No. 19,628 and No. 21,719 and, where applicable, the EU General Data Protection Regulation (GDPR). The Spanish version prevails in case of discrepancy.
1. Who is responsible for your data
Findie SpA, Chilean tax ID (RUT) 77.311.341-6, Ebro 2740, Of. 602, Las Condes, Santiago, Chile.
For any privacy matter, write to privacy@findie.global.
2. What data we process
Clients: first and last name, email, phone, country, company, job title, industry, company size, website and LinkedIn; the briefs and projects you create, the proposals you review, your messages in the project chat, your catalog favorites and searches, and payment and billing records.
Creatives and applicants: first and last name, email, phone, nationality or country of origin, date of birth, category, skills, languages, experience level, rates, bio, profile photo, CV, portfolio and links (Behance, Instagram or others), evaluation and interview notes, proposals and work plans, chat messages, and what we need to pay you (bank details are sent by email to our finance team and are not stored on the platform).
All users: password (stored hashed, never in plain text), date, time and IP of terms acceptance, preferred language, referral code, and technical security and error logs.
Website visitors: if you accept it, usage data through Google Analytics (pages visited, where you came from, device and approximate country). See the cookies section.
We don't ask for sensitive data (health, ethnic origin, political opinions, etc.). Please don't include it in your briefs, messages or portfolio.
3. Why we use it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Creating and managing your account and giving you access to the platform | Performance of the contract (Terms and Conditions) |
| Evaluating applications from creatives | Pre-contractual steps taken at your request |
| Intermediating between clients and creatives: briefs, invitations, proposals, selection, project chat and profile recommendations based on your brief | Performance of the contract |
| Handling billing and payments, issuing tax documents and meeting legal obligations | Legal obligation and performance of the contract |
| Sending you emails about your projects, account and application | Performance of the contract |
| Showing creatives' profiles and portfolios in the catalog and using them in Findie's promotional material | Consent given in the Talent Terms (revocable) |
| Sending you Findie news and commercial reminders | Legitimate interest for current clients and users; you can unsubscribe in every email |
| Measuring site usage with Google Analytics | Consent (cookie banner) |
| Security, preventing fraud and platform circumvention, and fixing errors | Legitimate interest |
4. Automated decisions
We suggest profiles to clients based on their brief and activity, but we don't make decisions with legal or similarly significant effects solely by automated means. Applications are accepted and creatives are selected by people.
5. Who we share your data with
We don't sell your data. We only share it in these cases:
- Between clients and creatives: clients see the creative's profile, portfolio and proposal; creatives see the client's brief. Contact details are shared only once the service is confirmed, as the Terms state.
- Providers that process data on our behalf, under contract and only to provide their service:
| Provider | Purpose | Location |
|---|---|---|
| Amazon Web Services | Files and images (S3, CloudFront), email delivery (SES), app hosting (Amplify) | USA |
| Google Cloud / Firebase | Platform servers, real-time chat (Firestore), website hosting | USA |
| MongoDB Atlas | Database | USA |
| Google Analytics / Tag Manager | Site analytics, only if you accept it | USA |
| Brevo | Newsletter emails | EU |
| Sentry | Technical error logging | USA |
| Discord | Internal alerts to the Findie team about platform activity | USA |
| Google Workspace | Team email and calendar, meeting scheduling | USA |
| PayPal and banks | Payments, which happen outside the platform | Depends on payment method |
| WhatsApp (Meta) | Support, only if you contact us there | USA |
- Authorities, when required by law (for example, the Chilean tax service or a court).
- Related companies or a potential acquirer of Findie, who would be bound by this same policy.
6. International transfers
Several of our providers store data outside Chile and the European Union, mainly in the United States. In those cases we rely on the European Commission's Standard Contractual Clauses included in those providers' data processing agreements, or on their certification under the EU-US Data Privacy Framework, and on equivalent safeguards under Chilean Law No. 21,719.
7. How long we keep your data
- Active account: for as long as you keep it.
- After you close your account: we delete or anonymize your data within 30 days, except as listed below. In no case do we keep it beyond the 5-year maximum set in the Talent Terms.
- Payment, billing and tax records: 6 years, as required by Chilean tax law.
- Applicants not accepted: up to 12 months from the decision, to answer questions and evaluate a new application.
- Projects involving other people: we keep the project as a record of the relationship, without the contact details of whoever closed their account.
- Analytics: up to 14 months in Google Analytics.
8. Your rights
You can ask us at any time for:
- Access: to know what data we hold about you and get a copy.
- Rectification: to correct inaccurate or incomplete data. You can edit much of it yourself from your profile.
- Erasure: to delete your data and account, except what we must keep by law.
- Objection: to stop processing your data for a purpose based on legitimate interest, such as newsletter emails.
- Portability: to receive your data in a structured, commonly used format.
- Restriction of processing while a request is being resolved.
- Withdrawing your consent, including the promotional use of your portfolio or analytics cookies, without affecting what was done before.
Write to privacy@findie.global from your account email. We may ask for additional information to confirm your identity. We reply within 30 calendar days; if the request is complex we'll let you know if we need more time, as the law allows. It's free.
If you're not satisfied with our answer, you can complain to the Chilean Personal Data Protection Agency (Agencia de Protección de Datos Personales) or, if you are in the European Union, to your country's data protection authority.
9. Cookies
We use necessary cookies to make the site work and, only if you accept them in the banner, analytics cookies. We don't use marketing cookies today; if we ever do, they will only run with your consent. You can change your choice anytime from «Cookie settings» in the findie.global footer, or by clearing your browser's cookies.
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
| authjs.session-token | Necessary | Keep you signed in | 30 days |
| NEXT_LOCALE | Necessary | Remember your language | 1 year |
| cc_cookie | Necessary | Remember your cookie choice | 6 months |
| fref_token, landing_source, auth_callback_url | Necessary | Remember the referral code, the page you came from and where to return during sign-up | Hours to days |
| _ga, _ga_* | Analytics (Google) | Distinguish visits to measure site usage | 2 years |
We also store some interface preferences in your browser (local storage), such as whether you've seen the welcome tour. YouTube and Vimeo videos in portfolios load in privacy-enhanced mode.
10. Security
We use encrypted connections (HTTPS), hashed passwords, role-based access control, sign-in attempt limits and restricted team access to data. No system is 100% secure: if a breach affects your data, we will notify the authority and you when the law requires it.
11. Minors
Findie is only for people aged 18 or over. If we find data from a minor, we delete it.
12. Changes to this policy
If we change this policy we'll publish the new version here with its date. If the change is significant, we'll let you know by email or on the platform before it applies.