Privacy Policy

Last updated: March 2026

1. Introduction

This Privacy Policy explains how SQRZ collects, uses, stores, and protects personal data when you access or use the SQRZ platform, websites, applications, and related services (the "Platform").

SQRZ operates a professional platform and growth infrastructure for creative and technical professionals, including profile hosting, booking management, payment workflows, and managed advertising services.

This Privacy Policy applies to all users of the Platform and should be read together with our Terms of Service.

SQRZ is committed to compliance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and relevant U.S. privacy laws.

2. Contracting Entity & Data Controller

The data controller responsible for processing your personal data depends on your location:

  • European Union users: SQRZ GmbH (Germany) acts as the data controller.
  • United States and Rest of World users: SQRZ Enterprises, Inc. (New York, USA) acts as the data controller.

SQRZ GmbH
Forstgasse 62, 67454 Haßloch, Germany

SQRZ Enterprises, Inc.
1250 Broadway, 10001 New York, USA

Data protection contact: info@sqrz.com

3. Categories of Personal Data We Collect

We collect different categories of personal data depending on how you interact with the Platform.

3.1 Account & Profile Information

  • Name
  • Email address
  • Professional details
  • Biography and service descriptions
  • Uploaded media and portfolio content
  • Social media links
  • Custom domain information

3.2 Booking & Communication Data

  • Booking requests
  • Project scope information
  • Messages within booking channels
  • Uploaded documentation
  • Team member invitations
  • Booking status and workflow metadata

3.3 Payment & Financial Data

  • Payment status
  • Stripe transaction references
  • Booking allocation metadata
  • Commission or platform fee records

SQRZ does not store full payment card details. Payment processing is handled by licensed third-party providers such as Stripe.

3.4 Advertising & Tracking Data

Depending on consent and subscription level, we may collect:

  • Website interactions
  • Page views
  • Conversion events
  • Device and browser information
  • IP address (where applicable)
  • Campaign engagement data
  • UTM attribution parameters

We distinguish between SQRZ Core Pixel Infrastructure, Grow Campaign Pixel Clusters, and User-installed tracking tools. Tracking technologies are subject to user consent via our analytics gate where required.

3.5 Lead & CRM Data

  • Email addresses submitted via profile lead forms
  • Attribution data (e.g., campaign source)
  • HubSpot tracking identifiers
  • Engagement segmentation data

3.6 Job Board & Referral Data

  • Referral link engagement
  • Job listing interactions
  • Basic engagement metrics

3.7 Embedded Third-Party Content

Profiles may contain embedded third-party services such as YouTube, Spotify, Bandsintown, or similar platforms. These third-party providers may independently collect personal data according to their own privacy policies. SQRZ does not control their data practices.

4. How We Use Personal Data

We process personal data for the following purposes:

4.1 Platform Operation

  • Account creation and management
  • Profile hosting
  • Booking workflow facilitation
  • Communication between users
  • Technical support

4.2 Advertising & Growth Services

  • Campaign execution
  • Audience segmentation
  • Performance optimization
  • Industry or geography-based cluster analysis
  • Attribution measurement

4.3 Payment Processing

  • Facilitating payments via Stripe or other licensed providers
  • Managing booking wallet structures
  • Recording transaction status

4.4 Analytics & Platform Improvement

  • Usage analysis
  • Feature optimization
  • Security monitoring
  • Performance insights

4.5 Marketing & Communication

  • Platform updates
  • Service notifications
  • Program invitations
  • Referral-related communication

Users may opt out of marketing communications where legally required.

5. Legal Basis for Processing (GDPR)

For EU users, we rely on the following legal bases:

Contract performance (Art. 6(1)(b)) — For account management, bookings, and payment workflows.

Legitimate interest (Art. 6(1)(f)) — For platform improvement, fraud prevention, and business operations.

Consent (Art. 6(1)(a)) — For tracking technologies and marketing communications where required.

Legal obligation (Art. 6(1)(c)) — For tax and accounting compliance. Tracking technologies requiring consent are only activated after user approval via the analytics gate.

6. Pixel Clusters & Segmented Advertising Infrastructure

For Grow campaigns, SQRZ may operate segmented tracking environments ("pixel clusters") based on vertical, geography, or program tier. These clusters:

  • Are purpose-bound
  • Are used solely for campaign optimization
  • Are not sold to third parties
  • Are not mixed across unrelated industries

Segmentation improves advertising efficiency and demand measurement. Users may install their own tracking technologies where permitted by their subscription plan.

7. Cookies & Tracking Technologies

SQRZ uses cookies and similar technologies to:

  • Operate the Platform
  • Analyze usage
  • Execute advertising campaigns

Tracking requiring consent is controlled through our analytics gate. Users may withdraw consent at any time. Further details are provided in our separate Cookie Policy.

8. Data Sharing & Third-Party Processors

We may share data with service providers acting as processors, including:

  • Stripe (payment processing)
  • Meta Platforms
  • Google
  • LinkedIn
  • HubSpot
  • Supabase
  • Hosting providers (e.g., Vercel)
  • Cloud infrastructure providers

We do not sell personal data. Processors act under contractual agreements and appropriate safeguards.

9. International Data Transfers

Personal data may be transferred to and processed in the United States. Where required, we implement appropriate safeguards, including:

  • Standard Contractual Clauses (SCCs)
  • Contractual data protection agreements

10. Data Retention

We retain personal data:

  • Account data: until account deletion
  • Booking data: as required for legal compliance
  • Campaign data: for optimization and reporting purposes
  • Analytics data: for a limited operational period

We may retain limited data for fraud prevention or legal obligations.

11. User Rights (GDPR)

EU users have the right to:

  • Access personal data
  • Rectify inaccurate data
  • Request erasure
  • Restrict processing
  • Request portability
  • Object to processing
  • Withdraw consent at any time

Requests can be submitted to: info@sqrz.com

12. Security Measures

We implement appropriate technical and organizational measures, including:

  • Encrypted connections
  • Restricted administrative access
  • Secure payment processing
  • Role-based access controls

No system can guarantee absolute security.

13. Controller & Processor Roles

Depending on configuration:

  • For SQRZ Core and Grow campaigns, SQRZ acts as data controller.
  • For user-installed tracking tools, the user acts as independent data controller.
  • In certain cases, joint controllership may apply.
  • Aggregated and anonymized campaign performance data may be retained for platform improvement.
  • Details may be governed by separate Data Processing Addenda.

14. Children's Privacy

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated appropriately.

16. Contact Information

For data protection inquiries: info@sqrz.com

SQRZ GmbH
Forstgasse 62, 67454 Haßloch, Germany

SQRZ Enterprises, Inc.
1250 Broadway, 10001 New York, USA