Privacy policy

1. Data controller

PhemeFame (“the platform”) processes the personal data necessary to provide its social media growth services. You can contact us at support@phemefame.com with any questions about your data.

2. Data we collect

Account data: name, email address, and password (protected with irreversible hashing, never in plain text or recoverable form).

Service usage data: the public links to the profiles or posts you provide when purchasing a service, your order history, invoices issued and, if growth tracking is enabled, public profile metrics (followers, interactions) captured periodically.

Session data: your session is kept with secure technical mechanisms that prevent access from third-party code. We do not use third-party advertising.

Cookies: we only use technical cookies necessary for session, security, and preferences, and — only if you accept in the cookie banner — Google Analytics for aggregated, anonymous usage metrics. You can change your decision at any time via the “Cookies” link in the footer.

Payment data: charges happen entirely inside the gateway you choose. We never see or store your cards, bank accounts, or payment credentials; we only keep the order reference and its status (paid, pending, or failed).

Balance data: if you use the PhemeFame balance, we record your wallet's deposits, charges, and refunds. They are processed to comply with tax and accounting obligations and retained for 6 years.

3. Purpose

To provide the services you purchase, manage your account and orders, issue invoices, send verification and account recovery codes, and handle your support requests.

We do not send commercial advertising without your prior consent and we do not share your data with third parties for advertising purposes.

4. Retention and deletion

We keep your data while your account is active. You can delete your account from your dashboard (Security tab → Delete account): we remove your favorites, metrics, and sessions, anonymize your orders, and deactivate the account. Invoices are retained anonymously for the period required by tax law.

5. Your rights

You can access, rectify, export, and erase your data, and restrict or object to its processing, from your dashboard or by writing to support@phemefame.com. Email verification and password recovery use single-use codes with expiration and attempt limits. You may also lodge a complaint with the Spanish Data Protection Agency (aepd.es).

6. International transfers

To provide the service we share with third parties only what is strictly necessary: your public link with whoever fulfils the order and your payment data with the gateway you choose. We never share your password, your sessions, or your data for advertising purposes. If any processing takes place outside the European Economic Area, we apply appropriate safeguards.

7. Security

We apply technical and organizational measures appropriate to the risk, in accordance with Article 32 of the GDPR: pseudonymization and encryption of personal data, confidentiality, ongoing integrity and availability, and regularly verified processes to assess the effectiveness of those measures.

Internal security implementation details are not published in order to avoid aiding targeted attacks. If you are a security researcher and have found a vulnerability, write to support@phemefame.com and we will address it diligently.

8. Changes

If this policy changes, we will publish the updated version on this page. Substantial changes will be announced with reasonable notice.