Privacy notice
Updated: 30/09/2026
1. Controller and contact
VISIBILITY S.L.U., NIF B76194323, Calle Domingo J. Navarro n.1, 2a planta - Oficina 5, 35002 Las Palmas de Gran Canaria, Spain. Information and rights: hello@visibility.company. This notice covers figoo.it and its marketplace for brands and creators.
2. Accounts and service
Ordinary access uses Sign in with ChatGPT: we receive an identifier, email and name when available, never your ChatGPT password. We store role, status, language, account details and the accepted terms version. A creator’s birth date is used to check they are 18; the current process does not store that date in the profile. We process profiles, campaigns, applications and messages, shortlists, collaborations, deliveries, revisions, approvals, favourites and internal notifications to provide the requested service (GDPR Article 6(1)(b)). Required fields are needed for the relevant functions. This beta does not process payments, cards, IBANs, balances or payouts; compensation is agreed outside Figoo.
3. Visibility and sharing
Creator profile names, city, country, biography, languages, categories, skills, indicative rates, social links, images and portfolios are public. Brand profiles and published campaigns are also public and may be indexed by search engines. Login email and birth date are not published in profiles. Applications are available to the creator and receiving brand; collaboration deliveries and files to authorised participants and administrators. Uploaded avatars, logos, covers and portfolios are public resources: do not upload confidential documents there. Administrators access data for management, support and moderation. Brands and creators may independently control data used in their collaborations and must meet their own obligations; this notice does not replace their agreements.
4. Invitations, security and contact
Invitation codes are optional and can be removed before registration. If used, we record the relationship and the inviter can see the invited account’s name, type and registration status. This provides the requested feature, without monetary rewards or new persistent invitation-tracking cookies. Infrastructure receives IP, requested resources, browser details and timestamps. Operational and administrative events and login attempts are processed for our legitimate interest in security and service management (Article 6(1)(f)). Administrative passwords and session tokens are checked through hashes. Emails are handled to answer requests and manage pre-contractual or contractual relationships; privacy requests are handled to meet legal duties (Article 6(1)(c)). Registration does not automatically subscribe you to a newsletter.
5. Cookies and external images
Technical tools support authentication and your chosen language. Example images from images.unsplash.com load only with consent (Article 6(1)(a)); the provider receives IP and connection metadata. If you decline, placeholders appear and the marketplace remains usable. There are no integrated Analytics tools, advertising pixels, Google Fonts or embedded social feeds. Social links open services with their own notices. iChef, operated by VISIBILITY, remembers your choice for six months and records random browser and event identifiers, site, choice, version and date to document preferences (Article 6(1)(c)). The application receipt does not add your name, email or IP; infrastructure still receives connection data. Change or withdraw consent through cookie preferences without affecting earlier lawful processing.
6. Providers and international transfers
OpenAI Sites and Cloudflare infrastructure provide hosting, authentication, database and file storage; Unsplash Inc. provides optional images. Authorised staff and necessary providers access relevant data according to their roles. Processing may occur outside the EEA, including the United States. OpenAI’s contractual documentation provides for adequacy decisions or standard contractual clauses for relevant transfers; Unsplash describes its transfers and safeguards in its notice. Ask hello@visibility.company for details and copies of applicable safeguards. Documentation: https://openai.com/policies/chatgpt-sites-data-processing-addendum/ and https://unsplash.com/privacy.
7. Retention
Accounts, profiles and operational data are kept throughout the service and for documented subsequent support needs, applicable obligations and protection of rights. Collaboration files and history follow the relationship and related evidential needs. Suspending an account does not automatically erase data or files. The beta has no general automatic deletion schedule for accounts, iChef receipts or history: request deletion or restriction through our privacy contact, subject to retention obligations. Expiry of a browser choice does not erase server receipts. Administrative sessions last up to 8 hours; expired sessions and abuse counters are cleaned up during later administrative sign-ins. Counters use 15-minute windows. See the Cookie Policy for local preferences. Downloaded or indexed copies may require action with their recipients.
8. Rights and complaints
Subject to GDPR conditions, you may request access, rectification, erasure, restriction and portability where applicable, and object to legitimate-interest processing for reasons relating to your situation. Write to hello@visibility.company; we may request proportionate information to verify your request. You may complain to the AEPD (https://www.aepd.es) or the competent authority where you live, work or believe an infringement occurred. Figoo does not make solely automated decisions with legal or similarly significant effects: authorised users make selections and approvals. Creator registration is for adults. We will update this notice when processing changes.
Your preferences
Cookie preferencesIf the panel is unavailable, external images remain blocked. Reload the page or contact us.