Privacy Policy

Echooo provides an AI-native operating system for influencer marketing that connects brands and agencies (“Brand Customers”) with content creators (“Creator Customers”). We also process data about prospective creators who have not yet signed up with us directly (“Potential Creators”), sourced through our creator data partner as described in Section 3.

For Brand Customers and Creator Customers who sign up directly with us, we act as the data controller. Where we process data on behalf of a Brand Customer about a Potential Creator, or on behalf of a Creator Customer, the Brand Customer or Creator Customer (as applicable) is the data controller, and our relationship with them is governed by a separate data processing agreement.

Depending on the Services we provide and how you interact with us, we may collect, use, store, and transfer the following categories of personal data:

If you sign in to our Services using a third-party account, such as Google, we may receive your name, email address, and profile picture from that provider.

You are not required to provide us with personal data. However, if you do not share certain data with us, we may not be able to provide you with our Services.

Creator data.We source and verify creator profile and social media data through InsightIQ, a third-party creator data and identity platform. InsightIQ provides us with information on creator profiles across Instagram, TikTok, and YouTube, including audience demographics and engagement metrics, to help Brand Customers identify suitable creators for their campaigns. We do not independently scrape or access these platforms’ APIs directly for this purpose.

Outreach.Where our Services facilitate outreach to creators via WhatsApp, messages are sent through Meta’s WhatsApp Business Platform (Cloud API). Your interactions through this channel are also subject to Meta’s own terms and privacy practices.

This Policy does not apply to the privacy practices of third parties we do not own or control, including InsightIQ, Meta, or any other third-party websites, services, or platforms that our Services may link to or integrate with. We encourage you to review the privacy policies of any third-party service you interact with through our Services.

We use personal data for the following purposes:

• Creator discovery.We use creator profile and social media data, including data on Potential Creators sourced via InsightIQ, to help Brand Customers identify and evaluate creators for campaigns. In some jurisdictions, this may be considered a “sale” or “share” of personal data under applicable law — see Section 13.
• Campaign management. Facilitating outreach, negotiation, contracting, content review, and reporting between Brand Customers and Creator Customers.
• Account and customer support. Creating and managing your account, providing customer support, and processing payments.
• Service improvement. Analyzing usage of our Services to fix issues, improve features, and develop new functionality.
• Communications. Sending service-related and, where permitted, promotional communications.
• Fraud detection and prevention. Monitoring use of the Services to detect fraud, abuse, and violations of our Terms of Service.
• Legal compliance. Meeting our legal, tax, and regulatory obligations.

Our Services use autonomous AI agents to support campaign execution, including a Discovery Agent (searching and shortlisting creators), a Partnership Agent (outreach and rate negotiation), a Content Agent (onboarding, briefs, and contract tracking), and an Analytics Agent (performance tracking and sentiment analysis).

These agents operate under human supervision. Brand Customers and our team can review, override, or reject any shortlist, message, negotiated term, or report generated by our AI agents before it takes effect. We do not use these agents to make decisions that produce legal or similarly significant effects on an individual without the opportunity for human review.

Our AI agents may analyze publicly available creator content (such as posts, captions, and video) and audience data to improve search results, recommendations, and creator discovery. This processing is limited to content and performance analysis — it does not involve biometric identification. We do not use personal data processed through our Services to train our own AI models, and we do not permit our service providers to use such data to train or improve their models.

We may send service-related and promotional communications via email, WhatsApp, or in-platform messages. To stop receiving WhatsApp messages, reply “STOP” to the conversation. To unsubscribe from marketing emails, use the unsubscribe link included in the email. You cannot opt out of communications that are required as part of your use of our Services, such as notices about changes to this Policy.

Our Services use cookies and similar technologies to operate core features, remember your preferences, and understand how our Services are used. This includes essential cookies (required for the Services to function), functionality cookies (remembering preferences), and analytics cookies (understanding aggregate usage). You can control or disable cookies through your browser settings; doing so may affect how our Services function.

Echooo operates from Pakistan and the United Arab Emirates and works with Brand Customers and Creator Customers globally. Your personal data may be transferred to, stored, and processed in countries other than your own, including Pakistan and the UAE. Where required by applicable law, we rely on Standard Contractual Clauses, an applicable adequacy decision, or another valid data transfer mechanism to ensure your data receives an adequate level of protection wherever it is processed.

We retain personal data only as long as necessary to provide our Services and fulfill the purposes described in this Policy. When determining specific retention periods, we consider the type of data, the nature of our relationship with you, and any legal or regulatory retention requirements. For example:

• Account data: retained while your account is active, and for a limited period after account closure to resolve disputes and enforce our agreements.
• Invoicing and financial data: retained as required by applicable tax and accounting law.
• Fraud prevention: following account deletion, we may retain a minimal record (such as a hashed email address) for a limited period to prevent repeated sign-ups or misuse of our Services.

You may request deletion of your account at any time by contacting us. Upon deletion, we delete or irreversibly anonymize your personal data across our active systems, revoke access tokens, and cancel any active subscriptions, except where retention is required as described above.

We maintain reasonable technical and organizational safeguards designed to protect the personal data we process. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Our Services are intended for users who are 18 or older, or who are at least 13 years old with verifiable parental or guardian consent. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us using the details in Section 15 so we can investigate and delete the information as appropriate.

Depending on where you live, you may have some or all of the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate or incomplete data.
• Deletion: Request that we delete your personal data, subject to legal retention requirements described in Section 9.
• Objection / restriction: Object to or request that we limit certain processing, including for direct marketing.
• Withdraw consent: Where processing is based on your consent, withdraw it at any time.
• Complaint:If you are in the European Economic Area, you may lodge a complaint with your local data protection authority (see the European Data Protection Board’s member list). If you are in the UK, you may contact the Information Commissioner’s Office. We would appreciate the opportunity to address your concerns directly before you contact a regulator.

To exercise any of these rights, contact us using the details in Section 15. We may need to verify your identity before responding to your request.

Because we source Potential Creator data through InsightIQ to help Brand Customers identify creators, this may be considered a “sale” or “share” of personal data under the California Consumer Privacy Act (CCPA) and similar U.S. state laws, even though no money changes hands. California residents have the right to opt out of this processing and to non-discrimination for exercising their privacy rights. To opt out, contact us using the details in Section 15. We do not knowingly sell or share the personal data of individuals under 16.

We may update this Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. If a change materially affects your rights, we will provide additional notice, such as an email or a prominent notice on our Services.

For questions about this Policy or to exercise a privacy right, contact us at:

Klout Marketing (Private) Limited
Email: muzakir@echooo.ai

Pakistan office: 4115 Delta 4, NASTP, Cantt, Lahore, Pakistan
Dubai office: Creators HQ, Jumeirah Emirates Towers Boulevard, Dubai, UAE