Privacy policy

Who we are

Gatekeeper is a service that lets creators share watermarked deliverables with sponsors, collect a signature, hold payment in escrow and release the clean files. This policy explains what we collect and why. Questions or requests: support@kentehq.com.

What we collect

• Creators: name, email address, a password hash (never the password), payout details (the bank or mobile money provider, the last four digits of the account number, and a payout recipient code that we store encrypted), your plan and subscription status, and the files, deal terms and comments you add.
• Sponsors (who never create an account): name and email address given by the creator, the name typed when signing, the IP address and time of signing, comments, and download events with IP address.
• Technical data: a session cookie that keeps creators signed in, server logs that omit email addresses and keep at most the last four digits of any phone number, and error reports if error monitoring is switched on.
• We do not use advertising or analytics trackers, and our emails contain no tracking pixels.

Why we use it

• To run the service: sign-in, review links, signatures, escrow, release, downloads.
• To send the emails each step needs (verification, password reset, review requests, payment and release notices).
• To bill subscriptions and to pay creators out.
• To prevent fraud and abuse, and to keep a record that a deal was signed and paid.

Who processes it for us

We share data only with the providers needed to run the service:

• Paystack: collects sponsor payments and pays creators out. It receives the sponsor's email, the amount and the creator's payout account details.
• Dodo Payments: merchant of record for creator subscriptions. It receives the creator's name and email and handles card details and taxes itself; we never see card numbers.
• Cloudflare R2: stores uploaded files and watermarked previews.
• Resend: delivers our emails.
• Our hosting provider (a virtual private server running our database and application).
• Sentry, only if the owner switches on error monitoring: receives error reports with personal data switched off.

We do not sell personal data.

How long we keep it

• Account data and files: until you delete your account.
• Watermarked previews and original files: deleted when you delete the file, the draft or your account.
• Records of completed payments (amount, dates, transfer references, signing record): kept in anonymised form after account deletion for as long as accounting and tax rules require, which we expect to be around seven years.
• Review links stop working when the creator rotates them or the deal is deleted.
• Email verification and reset links expire after 24 hours and one hour.

Your choices and deletion

Creators can edit their profile, change their email and password, sign out of all sessions and delete their account from Settings. Deleting removes your files and unreleased deals, cancels your subscription, and anonymises your account. It is refused while a deal is waiting on payment or payout, so nobody is left out of pocket. Sponsors can ask the creator, or us at support@kentehq.com, to remove their details. You can also ask us for a copy of your data or to correct it.

Security

Connections use HTTPS. Original files sit in a private bucket and are reachable only through short-lived links after escrow is funded. Passwords are hashed, third-party identifiers are encrypted at rest, and sign-in endpoints are rate limited. No system is perfectly secure; if we learn of a breach affecting you we will tell you.

Changes

If we change this policy in a way that matters, we will email creators and update the date above. The service is available at https://creator.kentehq.com.