Privacy Policy

1. Introduction

This Privacy Policy describes Mycelium’s practices for personal data collected through the Services. It should be read together with any campaign-specific terms, creator terms, or brand terms that apply to your use of the platform.

2. Information We Collect

2.1 Information You Provide Directly

• Account and registration details (name, email address, company, job title)
• Billing and payment information
• Communications you send us (support requests, emails, forms)
• Content you upload or submit through the platform (campaign briefs, creator lists, reports)

2.2 Information Collected Automatically

• Log data (IP address, browser type, device identifiers, pages viewed, timestamps)
• Cookies and similar tracking technologies (see Section 7)
• Usage data related to how you interact with our platform

2.3 Information from Connected Third-Party Accounts

When creators or clients connect social or e-commerce accounts to our platform (e.g., Instagram/Meta, TikTok, Shopify, YouTube), we may collect, with your authorization:

• Public profile information (username, follower count, bio, profile picture)
• Content performance and engagement metrics
• Audience demographic and authenticity data derived from analysis of public account data
• Sales and attribution data (e.g., discount code usage) where applicable

We only request the minimum scopes necessary for the relevant integration, and access is granted via each platform’s official OAuth authorization flow. You may revoke this access at any time through the third-party platform’s own settings.

2.4 Information from Marketing and CRM Integrations

Where we act on behalf of clients, we may process contact and engagement data through connected marketing platforms (such as email or campaign management systems) strictly for the purposes instructed by the client.

3. How We Use Information

We use collected information to:

• Provide, operate, and improve the Services
• Facilitate creator discovery, vetting, and campaign matching
• Analyze audience authenticity and content performance
• Attribute sales and measure campaign effectiveness
• Communicate with you about your account or our Services
• Process payments and manage billing
• Comply with legal obligations
• Detect, prevent, and address fraud, abuse, or security issues
• Conduct internal analytics and improve our prompt-mapping and related methodologies

We do not sell personal data to third parties.

4. Legal Basis for Processing

Where applicable law requires a legal basis (e.g., under Singapore’s Personal Data Protection Act (“PDPA”) or the EU/UK GDPR), we rely on one or more of the following:

• Your consent
• Performance of a contract with you
• Compliance with a legal obligation
• Our legitimate interests, such as operating and securing our Services, provided these interests are not overridden by your rights

5. How We Share Information

We may share information with:

• Service providers who perform functions on our behalf (hosting, analytics, payment processing, customer support)
• Clients, where information relates to creators being evaluated or engaged for a campaign
• Platform partners, as necessary to operate integrations you authorize (e.g., Meta/Instagram, Shopify)
• Professional advisors, such as legal or financial consultants
• Regulators or authorities, where required by law or to protect our rights, safety, or property
• A successor entity, in connection with a merger, acquisition, or sale of assets

We require third parties who process data on our behalf to protect it consistently with this Policy.

6. International Data Transfers

Mycelium operates across Southeast Asia and may work with clients and creators internationally. Where personal data is transferred outside Singapore or another jurisdiction with its own data protection framework, we take reasonable steps to ensure the data continues to receive an appropriate standard of protection, consistent with the PDPA’s transfer limitation obligation and, where applicable, other regional data protection laws.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to operate our website and platform, remember preferences, and analyze usage. You can control cookies through your browser settings; disabling cookies may affect the functionality of our Services.

8. Data Retention

We retain personal data only as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary depending on the type of data and the nature of our relationship with you.

9. Data Security

We implement reasonable technical and organizational measures designed to protect information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your Rights

Depending on your jurisdiction, you may have rights to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent where processing is based on consent
• Object to or restrict certain processing
• Request a copy of your data in a portable format

To exercise these rights, contact us using the details in Section 13. We may need to verify your identity before fulfilling a request.

11. Children’s Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected such data, we will take steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised version with an updated “Last Updated” date. Material changes may be communicated through the Services or by other means.

13. Contact Us

If you have questions or requests regarding this Privacy Policy or our data practices, please contact us at:

• Mycelium Digital Pte. Ltd. (202531652K)
• 60 Paya Lebar Road, #07-54 Paya Lebar Square, Singapore 409051
• Email: privacy@mycelium.sg