Privacy Policy

Amplify Technology Media Limited, trading as UniSong Creator Studio ("UniSong," "we," "us," or "our"), respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at unisongcreator.com — including the services we operate on its subdomains — or use our services, wherever you are in the world.

1. General

UniSong Creator Studio is operated by Amplify Technology Media Limited, a company incorporated in Hong Kong (Business Registration No. 81037349), with its business address at Unit 02, 9/F, The Broadway, 54-62 Lockhart Road, Wan Chai, Hong Kong. For the purposes of applicable data protection laws — including the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) (the "PDPO"), the EU General Data Protection Regulation and its UK equivalent (together, the "GDPR"), the Privacy Act 1988 (Cth) of Australia, and applicable U.S. state privacy laws — Amplify Technology Media Limited is the data user and data controller responsible for personal data collected through this website and our client-facing services.

Our services are delivered together with our branch teams in Hong Kong, Shanghai, Los Angeles, Hangzhou, Sydney, and Ho Chi Minh City. Where a branch team or service partner processes personal data for us, it does so on our behalf and under this policy.

This is a single global policy. Sections 1–10 apply to everyone who interacts with us. Sections 11–14 add region-specific disclosures; if a region-specific section conflicts with a general section, the region-specific section prevails for residents of that region. Where we collect personal data directly from you — for example through a form on our website — we also show a short collection notice at the point of collection that links back to this policy.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide when you:

• Fill out our contact form (name, email, phone number, user type)
• Use our email verifier (the email address submitted for checking and the verification result metadata)
• Work with us as a creator or brand (contact details, company information, campaign requirements, and payment details shared during an engagement)
• Submit collaboration rates through our creator pricing survey (social media handles, rates and currency, and a preferred contact email)
• Communicate with us via email or other channels

This may include your name, email address, phone number, company name, social media profile URLs, and any other information you choose to provide.

For the email verifier, we use the submitted address only to perform the requested check. We keep an operational log with a hashed version of the address, the domain, result status, risk flags, approximate country, and a hashed user-agent value. We do not use addresses submitted to the verifier to create marketing lists or outbound campaign lists.

2.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• Device information (browser type, operating system, device type)
• IP address and approximate geographic location
• Pages visited, time spent, and navigation patterns
• Referring website or source

On pages we operate on subdomains of unisongcreator.com — for example, pages that deliver campaign materials or files to their intended recipients — we additionally process the link you open, any selections you make on the page (such as a language, market, or display preference), and standard server logs. Where you send files through these pages, we process the files you submit solely to deliver them to their intended recipients and to keep the service secure. These pages exist to deliver materials on behalf of our brand clients and do not run the analytics services described in Section 9. For those delivery flows we act as a service provider (processor) for the instructing brand, which remains responsible for the materials it asks us to deliver; this policy still governs the operational data — such as server logs and security records — that we process for our own purposes.

2.3 Creator Profile Data

For creators in our network, we collect and store publicly available social media data including follower counts, engagement metrics, content categories, and audience demographics, together with publicly listed business contact details. This data is used for creator-brand matching and for contacting creators about collaboration opportunities. You can opt out of outreach at any time by replying to the message or contacting us directly; opting out places you on a suppression list so we do not contact you again, and you may also object to this processing or request deletion at any time (see Section 10).

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve our services
• Match creators with brand campaign opportunities
• Respond to your inquiries and communicate with you
• Operate, secure, debug, and monitor abuse of our email verification tool
• Process campaign payments and invoicing and send related information
• Contact creators about collaboration opportunities (business outreach; you can opt out at any time by replying to the message or contacting us)
• Send administrative information and service updates, and — with your consent, or as permitted for business-to-business communications — marketing communications; you can opt out at any time by replying or contacting us, and we honor every opt-out
• Monitor and analyze usage trends to improve user experience
• Comply with legal obligations

4. Legal Bases for Processing

Where the GDPR applies, we rely on the following legal bases:

• Performance of a contract — providing campaign, content-production, and account-growth services, processing related payments, and taking steps at your request before entering into a contract.
• Legitimate interests — responding to business inquiries, creator discovery and creator-brand matching from public profile data, business outreach to publicly listed professional contacts, and securing, debugging, and monitoring abuse of our tools. We balance these interests against your rights and freedoms, and you may object at any time (see Section 10).
• Consent — analytics cookies and marketing emails outside an existing business relationship. You can withdraw consent at any time, without affecting processing that happened before the withdrawal.
• Legal obligation — tax, accounting, and responding to lawful requests.

We do not make decisions producing legal or similarly significant effects about you by solely automated means. Other laws that apply to us — including the PDPO and the Australian Privacy Act — do not require a named legal basis for every processing activity, but we apply the same discipline everywhere: we collect personal data for stated purposes and use it in ways you would reasonably expect or that we have told you about.

5. Disclosure of Information

We do not sell your personal data, and we do not share it for cross-context behavioral advertising. We disclose personal data only in the following circumstances:

• Between brands and creators. When facilitating a campaign, we share relevant profile information between the brand and creator parties involved. Only information necessary for the campaign is shared.
• Branch teams. We share information with our branch teams where needed to deliver a service, under this policy and on our behalf.
• Service providers. We share information with third-party service providers who assist us in operating our website, conducting our business, or serving you (e.g., email services, analytics, scheduling, infrastructure, and email verification providers). These providers are contractually obligated to protect your information and to use it only for the services they perform for us.
• Legal requirements. We may disclose information if required by law, regulation, legal process, or governmental request.
• Business transfers. In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to the commitments in this policy.

6. International Data Transfers

We operate internationally. Your personal data may be transferred to and processed in Hong Kong, Australia, mainland China, Vietnam, the United States, and other locations where our branch teams or service providers operate. Wherever your data is processed, this policy and the safeguards described below apply to it.

Where the GDPR applies, transfers outside the EEA and UK rely on appropriate safeguards — primarily the European Commission's Standard Contractual Clauses (and the UK equivalents), including those incorporated into the data-processing terms of our major service providers (Google, Microsoft, Cloudflare, Vercel, and Web3Forms), together with supplementary measures where needed.

For personal information exported from mainland China, we follow the PIPL cross-border transfer requirements, including separate consent where required and the PIPL standard-contract mechanism. Where personal data collected in Hong Kong is transferred outside Hong Kong, we use contractual and organizational safeguards designed to give it a similar level of protection, consistent with guidance from the Privacy Commissioner for Personal Data. Disclosures of personal information overseas from Australia are made in line with Australian Privacy Principle 8 (see Section 13). Contact legal@unisongcreator.com for more information about the safeguards applied to a specific transfer.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law. Contact form submissions are retained for as long as needed to handle the inquiry and any follow-up, typically no longer than 24 months. Creator profile data is retained for as long as the creator remains in our network; opt-out requests are kept on a minimal suppression list so we do not contact you again. You may request deletion of your data at any time.

Email verifier operational logs are retained for up to 90 days unless a longer period is needed for security investigation, abuse prevention, or legal compliance. These logs do not store the submitted email address in plain text by default.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Data is encrypted in transit using TLS, and our hosting and storage providers encrypt data at rest. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

If a data breach affecting your personal data occurs, we will assess it promptly and notify you and the relevant regulator where required by applicable law — including the GDPR's 72-hour supervisory-authority notification and the Australian Notifiable Data Breaches scheme.

9. Cookies and Tracking Technologies

We use three categories of cookies and similar technologies: strictly-necessary storage that remembers your consent choice and protects public tools from abuse, functional local-storage preferences saved only when you use a feature that needs them, and analytics cookies or similar technologies set by Google Analytics 4 (measurement ID G-152SDN52K3) and Microsoft Clarity (project ID x4wrnb6ajf). Google Analytics is initialized under Google Consent Mode v2 with tracking-adjacent storage defaulted to denied until you accept through our consent banner; while consent is denied, only cookieless, non-identifying measurement pings are sent. Microsoft Clarity loads only after you grant analytics consent through the same banner. We do not use advertising, retargeting, or behavioral-profiling cookies.

You can change your analytics choice at any time by clicking "Cookie Preferences" in the site footer, or by clearing the unisong-consent-v2 entry from your browser's local storage. We also honor the Global Privacy Control (Sec-GPC) browser signal as a rejection of analytics. For the full inventory of cookies we set, lifetimes, third-party services, and browser-level controls, see our dedicated Cookie Policy.

10. Your Privacy Rights

Depending on where you live, you may have some or all of the following rights:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data
• Object to or restrict the processing of your data
• Request data portability
• Withdraw consent at any time (where processing is based on consent)
• Opt out of direct marketing at any time

To exercise any of these rights, email legal@unisongcreator.com or write to the correspondence address in Section 17. We may need to verify your identity before acting on a request, and we will ask only for information proportionate to that purpose. We respond within the time required by applicable law (see the regional sections below), and we do not charge a fee except where the law expressly permits one. We will not discriminate against you for exercising your rights.

Sections 11–14 list the regulator you can complain to in each region. If you live elsewhere, you can contact your local data protection authority — for example, individuals in mainland China may contact the Cyberspace Administration of China (CAC). We would appreciate the chance to address your concern first.

11. European Economic Area and United Kingdom

This section applies if you are in the European Economic Area or the United Kingdom. Amplify Technology Media Limited is the controller of your personal data. The legal bases we rely on are set out in Section 4, and the safeguards for transfers outside the EEA and UK are set out in Section 6. We respond to requests under Section 10 within one month, extendable by two further months for complex requests (we will tell you if we need an extension).

In addition to the rights in Section 10, you have the right to object at any time to processing based on our legitimate interests — including creator profile data used for outreach — and to any use of your data for direct marketing. You also have the right to lodge a complaint with the data protection supervisory authority in your country or, if you are in the UK, with the Information Commissioner's Office (ico.org.uk).

12. California and Other U.S. States

This section applies to residents of California and of other U.S. states with comprehensive privacy laws (such as Virginia, Colorado, Connecticut, and Texas), to the extent those laws apply to us.

In the preceding 12 months we collected the categories of personal information described in Section 2: identifiers (name, email address, phone number), professional information (company, role, social media handles), commercial information (campaign requirements and collaboration rates), financial information (payment details shared during an engagement), internet or other electronic network activity (pages visited and interactions with our site), and approximate geolocation derived from IP address. We collect them from you directly, from your devices, and from public sources; we use them for the purposes in Section 3; and we disclose them to the categories of recipients in Section 5.

We do not sell personal information, and we do not share it for cross-context behavioral advertising — and we have not done either in the preceding 12 months. We have no actual knowledge of selling or sharing the personal information of consumers under 16 years of age. We do not use or disclose sensitive personal information for purposes that would trigger the right to limit under the CPRA.

You have the right to know and access the personal information we hold about you, to correct it, to delete it, and not to receive discriminatory treatment for exercising these rights. Submit requests to legal@unisongcreator.com; you may also use an authorized agent. We will verify your request as applicable law requires and respond within 45 days, extendable by a further 45 days with notice. If we decline a request, you may appeal by replying to our response or emailing legal@unisongcreator.com; if your appeal is unsuccessful, you can raise the matter with the California Privacy Protection Agency (cppa.ca.gov) or the Attorney General of your state.

Our website treats the Global Privacy Control (GPC) browser signal as a valid opt-out preference signal: analytics consent is automatically denied for browsers that send GPC, and the signal overrides any previously stored consent choice.

13. Australia

This section describes how we handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We collect personal information only when it is reasonably necessary for our business functions, and we notify you at or before the point of collection (APP 5) through this policy and the short collection notices on our forms — or, where we collect personal information from public sources (Section 2.3), as soon as practicable afterwards. If we use your personal information for direct marketing, you can opt out at any time and we will honor the request (APP 7). Overseas disclosures are described in Section 6 and are made in line with APP 8: we take reasonable steps to ensure overseas recipients handle your personal information consistently with the APPs.

You can request access to, or correction of, your personal information under APPs 12 and 13 by contacting legal@unisongcreator.com; there is no charge for making a request, and we respond within a reasonable period (usually 30 days). We comply with the Notifiable Data Breaches scheme: if a data breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC). If you are not satisfied with our response to a privacy concern, you can complain to the OAIC (oaic.gov.au).

14. Hong Kong

This section applies to personal data we handle in or from Hong Kong under the PDPO. Amplify Technology Media Limited is the data user responsible for that personal data, and we follow the six Data Protection Principles: personal data is collected lawfully and fairly for stated purposes (DPP 1); kept accurate and for no longer than necessary (DPP 2 — see Section 7); used only for the purposes for which it was collected, or directly related purposes, unless you consent to a new use (DPP 3); protected by appropriate security safeguards (DPP 4 — see Section 8); handled under openly available policies and practices (DPP 5 — this document); and open to access and correction by you (DPP 6).

We will not use your personal data in direct marketing unless we have provided the information required by Part 6A of the PDPO and received your consent or an indication that you do not object. You can withdraw that consent at any time, free of charge, by contacting legal@unisongcreator.com or using the opt-out included in any marketing message.

You may make a data access request or data correction request under the PDPO by writing to legal@unisongcreator.com or to the correspondence address in Section 17. We respond to data access requests within 40 days as the PDPO requires. We may charge a reasonable fee for processing a data access request, as the PDPO permits; we will tell you the fee, if any, before proceeding. If you have concerns about our handling of your personal data, you can complain to the Office of the Privacy Commissioner for Personal Data (PCPD, pcpd.org.hk) — we would appreciate the chance to resolve the issue first.

15. Children's Privacy

Our services are not directed to individuals under the age of 18, and our creator network is limited to adults: we require creators to be at least 18, and profiles identified as belonging to minors are excluded from our creator database and outreach. We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a minor, please contact us and we will promptly delete it.

16. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on our website at least 30 days before they take effect. Where a change affects processing that relies on your consent — such as analytics — we will ask for your consent again, through the consent banner or an equivalent prompt, before the new processing begins.

17. Contact Us

For privacy enquiries, requests under this policy, or to exercise your rights:

Privacy enquiries:
legal@unisongcreator.com

Privacy correspondence address:
Amplify Technology Media Limited
Unit 02, 9/F, The Broadway
54-62 Lockhart Road, Wan Chai
Hong Kong