Privacy Policy

The Trade Talk is operated by Last Land Information Technologies LLP (LLPIN ACN-4682). This notice applies to the website, mobile applications, marketplace, communications, contract, payment, KYC, analytics, and support features offered under The Trade Talk.

A named privacy or grievance officer and a complete registered-office postal address have not yet been approved for publication. Until formal designation, send privacy requests to privacy@thetradetalk.com and legal notices to legal@thetradetalk.com.

• Account and authentication data, including name, email, phone, username, identity-provider identifiers, sessions, and security events.
• Age, country, guardian request and consent evidence for eligibility checks.
• Creator profiles, public rates, portfolio items, social handles, connected-account tokens, and provider metrics.
• Organization, membership, authorized-representative, business, tax, KYC, and payout-readiness documents.
• Campaigns, projects, orders, contracts, OTP signing evidence, deliverables, approvals, disputes, payments, fees, payouts, invoices, and tax-related records.
• Messages, attachments, call metadata, support requests, feedback, privacy requests, and moderation evidence.
• Device, browser, IP, diagnostics, audit, feature usage, cookie, and analytics data.
• AI prompts, contract or order context sent for an requested AI feature, provider responses, and safety or quality metadata.

• Create and secure accounts; enforce age, guardian, role, subscription, and authorization controls.
• Operate discovery, campaigns, contracts, communications, payment collection, milestone payouts, KYC, analytics, and support.
• Verify identities, organizations, connected social accounts, published deliverables, signatures, and payment events.
• Prevent fraud and abuse, investigate reports, enforce platform rules, comply with lawful obligations, and preserve evidence.
• Provide user-requested AI assistance and improve reliability using operational diagnostics. We do not promise that third-party AI output is accurate or legal advice.

Creator usernames, public profile fields, service rates, portfolio material, public campaign fields, and provider-derived audience metrics may be visible without an account where the creator or campaign is configured as public. Private profile fields, KYC files, payment details, private messages, and contract evidence are not public.

Businesses and creators in the same order or project receive the information needed to contract, communicate, verify delivery, resolve disputes, and process payment. Organization owners and authorized team members can access organization workspaces according to their roles.

Depending on the features you choose, data may be processed by providers such as WorkOS (identity), Convex (application data and files), Vercel (web delivery and AI routing), Razorpay or RazorpayX (payments and payouts), Resend (email), Twilio (SMS), LiveKit (calls), OpenAI or Anthropic (requested AI features), Google services, Meta/Instagram, YouTube, X, and connected webhook or storage providers.

A final subprocessor register, processing-location inventory, transfer assessment, provider retention configuration, and DPA approval record is not yet published. Do not submit sensitive data to an optional integration unless its in-product notice identifies the processing you are requesting.

YouTube is an optional creator integration. After a creator selects Connect YouTube and grants Google consent, The Trade Talk requests read-only access to identify the creator’s authorized channel and retrieve channel metadata and statistics, recent videos and their statistics, and comments. It also requests read-only YouTube Analytics access for private reports such as views, watch time, audience retention, subscriber changes, engagement, traffic sources, audience demographics, device types, countries, and top videos. The Trade Talk does not request permission to upload, edit, delete, like, or comment on YouTube content.

The authorized data is used to show the connecting creator channel, content, audience, traffic, and performance views in Studio and to support creator-selected collaboration deliverables and campaign reporting. Access and refresh credentials and synchronized results are stored in Convex while the connection remains active. Synchronized YouTube data is refreshed during the active connection and is not sold, used for advertising, or used to determine creditworthiness.

The Trade Talk shares Google user data only with infrastructure processors acting on its behalf when necessary to provide or secure these user-facing features, or when required by law. The Trade Talk’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

A creator can disconnect YouTube in Studio at any time. The disconnect flow revokes The Trade Talk’s Google OAuth credential and schedules immediate deletion of the stored connection, channel statistics, videos, comments, community records, and analytics. Disconnecting does not delete or modify content on YouTube. A creator may also revoke access from Google Account security settings or submit a privacy request.

Use of the integration is also subject to the YouTube Terms of Service. Review the Google Privacy Policy, the Google API Services User Data Policy, or manage access in Google Account third-party connections.

The Trade Talk stores KYC case metadata and uploaded proof files in access-controlled Convex storage for review by authorized superusers. We do not ask you to upload passwords, one-time codes, or full card credentials. Razorpay handles provider payment details; The Trade Talk stores payment identifiers, verification results, ledger entries, fees, and payout status needed to operate and reconcile the service.

When you request AI review or generation, relevant prompt, contract, order, or workflow context may be sent through the Vercel AI SDK to an enabled OpenAI or Anthropic model. Provider training, retention, and DPA settings require final operational approval before sensitive production use.

Live calls process audio and call metadata through LiveKit. Before joining, each participant chooses whether to permit recording and transcription for that call. Both features stay off unless both participants affirmatively agree. Recording additionally requires restricted storage and an operator-approved retention period; transcription is stored with the call. No blanket retention period is represented as approved.

The service does not permit users under 13. Business account representatives must be at least 18. Creators aged 13–17 may proceed only after a separate parent or legal guardian request is confirmed and before KYC begins. Guardians may request access, correction, withdrawal, or deletion through the privacy request channel.

The guardian mechanism still requires jurisdiction-specific legal validation. See the FTC COPPA guidance and the official India DPDP Rules page.

A fixed retention schedule by data class has not been approved. We therefore do not represent that every record is automatically deleted after a specific period. Data is kept while needed for the feature, account, security, dispute, payment, tax, KYC, contract-evidence, or legal purpose, and may be restricted, de-identified, or retained where an applicable obligation or legal hold requires it.

An account deletion request begins a 90-day cancellation window. Final erasure remains subject to approved retention rules and provider cleanup. The destructive purge job is not represented as operational until those rules, retries, audits, and legal exceptions are approved and tested.

Signed-in users can create and track a request in Privacy Requests. Others may email privacy@thetradetalk.com. No response deadline is stated because none has been formally approved.

• Access or obtain information associated with your account.
• Correct inaccurate account, profile, organization, or KYC information.
• Request deletion, subject to identity verification and applicable retention exceptions.
• Withdraw consent where processing relies on consent; withdrawal does not undo prior lawful processing.
• Disconnect integrations and request token or provider-data cleanup where supported.
• Submit a grievance or guardian request and track its reference in account settings.

We use authentication, tenant authorization, role checks, access-controlled files, payment-signature verification, audit records, and contract evidence controls. No claim is made that the service has passed an independent penetration test, recurring third-party audit, or formal certification.

If we confirm an incident affecting personal data, we will investigate, contain, preserve evidence, and provide notices required by applicable law and available contact information. A public incident response SLA has not been approved.

Authentication and preference storage may be necessary for the service. Analytics or marketing storage must not be described as consented unless the applicable consent control is active. Data may be processed outside your state or country by configured providers; final transfer and location assessments are pending.

Material policy changes will receive a new version and may require renewed acceptance. Continued use alone is not treated as consent where applicable law requires an affirmative choice.

Privacy requests: privacy@thetradetalk.com. Legal notices: legal@thetradetalk.com. General support: support@thetradetalk.com. Operator: Last Land Information Technologies LLP, LLPIN ACN-4682. Privacy/grievance officer: not yet designated for publication.