Privacy Policy.
How we collect, store and use the information you share with ZZZ Agency. Written in plain language. No fine print.
Last updated: 9 May 2026On this page
1. Who we are
ZZZ Agency ("ZZZ", "we", "us") is an independent creator-management studio with its registered office in Albuquerque, New Mexico, USA. This Privacy Policy applies to information we collect through zzzagency.com, our messaging channels (WhatsApp, Telegram, Instagram, email), and any service we provide to creators and applicants worldwide.
Reach us at hello@zzzagency.com with any privacy question. We respond within 30 days, usually within 24 hours.
2. What information we collect
We collect only what we need to evaluate fit and run the relationship.
From visitors and prospects
- Name, email, phone or messaging handle (when you contact us)
- Information you share about your brand, current revenue range and goals
- IP address, browser type, device type, country (technical access logs)
- Referrer URL and pages viewed (basic analytics)
From creators we work with
- Identity verification documents (only after a signed agreement)
- Platform handles, account access tokens and dashboards (under written authorisation)
- Banking/payment details for revenue-share settlement
- Content assets, scripts and editorial calendars produced jointly
From job applicants
- Name, contact details, CV / portfolio, cover message
- Trial-task submissions and interview notes
3. How we use your information
- To respond to your enquiry and assess fit
- To deliver the services you've signed up for (strategy, content, chat ops, marketing, analytics)
- To process revenue-share settlements and meet our accounting obligations
- To improve the website and the operation (aggregated, non-identifying analytics)
- To send you our newsletter or transactional updates (only if you opted in)
We do not sell your data. We do not use it for ad re-targeting, lead-list resale or third-party profiling.
4. Legal basis (GDPR & US privacy laws)
ZZZ is registered in New Mexico, USA, and complies with applicable US federal and state privacy laws (including the California Consumer Privacy Act / CPRA where it applies to California residents). Because we serve creators worldwide, we also voluntarily comply with the EU's General Data Protection Regulation (GDPR) for visitors in the EU, EEA, UK or Switzerland.
If GDPR applies to you, the lawful bases we rely on are:
- Consent — when you submit a form, opt into the newsletter, or message us directly
- Contract — when we process data to deliver services to a creator under a signed agreement
- Legal obligation — for accounting, tax, AML and KYC compliance
- Legitimate interest — for basic site security, fraud prevention and aggregated analytics, balanced against your privacy
If you are a California resident, you also have the CCPA/CPRA rights described in section 7 below.
5. Who we share data with
We share your data only with the limited number of vendors we need to operate the service, all under written data-processing agreements. The categories of processors we rely on are:
- Email, messaging and CRM tooling (for handling enquiries and the relationship with creators)
- Payment and accounting providers (for invoicing and revenue-share settlement)
- Cloud hosting, storage and CDN providers (for serving the website and storing assets)
- Internal productivity tools (for project management, documentation and team communication)
- Identity verification and KYC providers (only when required by law for creator onboarding)
A current list of the specific vendors we use, with their countries and the exact data each one processes, is available on request — write to hello@zzzagency.com and we'll send it within 5 business days.
We never share your information with shoutout creators, ad networks, lead-generation platforms, or any other commercial third party.
6. How long we keep data
- Enquiry messages: 24 months from last contact, then deleted
- Job applications: 12 months unless you ask us to delete sooner
- Creator agreement data: for the duration of the relationship plus 7 years (legal/accounting obligation)
- Newsletter list: until you unsubscribe
7. Your rights
If GDPR or an equivalent regulation applies to you, you have the right to:
- Access the personal data we hold about you
- Request correction or deletion
- Restrict or object to certain processing
- Receive a portable copy of your data
- Withdraw consent at any time
- Lodge a complaint with your local data-protection authority
To exercise any of these, write to hello@zzzagency.com. We action requests within 30 days.
8. Cookies and analytics
We use a minimal cookie footprint:
- Strictly necessary — session cookies for security and form state
- Privacy-friendly analytics — aggregated page views and traffic sources, without cross-site tracking
We do not use Facebook Pixel, Google Ads remarketing, or any third-party advertising trackers. You can clear cookies any time from your browser settings.
9. International transfers
Some of our processors are located outside the EEA (notably the US). When that's the case, transfers are protected by Standard Contractual Clauses (SCCs) and additional safeguards equivalent to GDPR.
10. Security
We protect data with encryption in transit (TLS 1.2+), encryption at rest where supported by the processor, role-based access control, two-factor authentication for all team accounts, and regular security reviews. No system is 100% secure — if a breach affects you, we'll notify you within 72 hours of becoming aware.
11. Children & age
ZZZ Agency does not knowingly process data from anyone under 18. Our services are exclusively for verified adult creators. If you believe a minor's data has reached us, write to us and we'll delete it immediately.
12. Changes to this policy
We update this policy when our practices change. Material changes are flagged on the homepage for at least 14 days before they take effect. The "Last updated" date at the top always reflects the current version.
13. Contact us
Questions, complaints or rights requests: hello@zzzagency.com · WhatsApp +40 773 631 676.
If you'd rather speak to a regulator, you can lodge a complaint with your country's data-protection authority. We'd appreciate a chance to fix things first.