About this notice
This Privacy Notice for STARIX INNOVATIVE SOLUTIONS LIMITED (also referred to as “we,” “us,” or “our”) describes how and why we might access, collect, store, use, and/or share (“process”) your personal information when you use our services.
For most processing described in this Privacy Notice, we act as a data controller (or equivalent role under applicable law). Where we process personal information on behalf of a business customer or brand partner in connection with a specific campaign or engagement, we may act as a processor/service provider (or equivalent role) and will process such information only on documented instructions and for the purposes described.
Some of these services include, but are not limited to:
- Visiting our website at starixapp.com or any website of ours that links to this Privacy Notice.
- Use of Starix.
- Engaging with us in other related ways, including any marketing or events.
Starix is a technology platform that provides data-driven insights, analytics, and trust signals for digital creators, brands, and online platforms. The service collates, aggregates, and analyzes publicly available and user-authorized data from social media platforms and other third-party services to generate trust scores, performance insights, and trend intelligence. Simply put, Starix sorts relevant data in the public domain and uses this data as a tool to generate performance insights and trend intelligence for the benefit of brands and creators alike.
Starix uses automated systems, including algorithms and artificial intelligence, to evaluate engagement patterns, detect anomalies, and support transparency and informed decision-making. Specifically, we use AI to analyze public social media engagement and create “trust scores” for creators. These scores are based on engagement frequency, sentiment analysis, and consistency metrics. These scores may influence brand collaboration opportunities. The platform may include web and mobile applications, APIs, dashboards, and related tools.
1. What information do we collect?
Personal information you disclose to us
We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.
We at Starix do not access personal information from your connected accounts beyond what you voluntarily provide to us or explicitly authorize through the relevant platform’s consent (OAuth) flow.
The personal information we collect may include the following:
- Names
- Phone numbers
- Email addresses
- Job titles
- Usernames
- Passwords
- Contact preferences
- Billing addresses
- Contact or authentication data
- Debit/credit card numbers
- Brand details
- Brand website/URL
- Creator account details
- Account details
Sensitive information. We do not process sensitive information.
Payment data. We may collect data necessary to process your payment if you choose to make purchases, such as your payment instrument number and the security code associated with your payment instrument. All payment data is handled and stored by Paystack. You may find their privacy notice here.
Social media integration data
When you connect your social media accounts (Instagram, Facebook, TikTok, YouTube), we collect public profile information and performance metrics via official platform APIs using OAuth 2.0 authorization.
Some of the information collected via APIs includes:
- Profile information (username, follower counts, bio, profile picture)
- Content metrics (post performance, engagement rates, reach, impressions)
- Audience insights (demographics — aggregated and anonymized)
- Growth trends and posting consistency data
We collect only data you explicitly authorize during the OAuth consent flow. See Section 7A for comprehensive details about social media data collection, usage, and your control options.
Information that we do not process:
- Private messages or direct communications
- Private/draft content
- Passwords or login credentials
- Personal contact lists
- Non-public account information
Information automatically collected
Some information such as your Internet Protocol (IP) address and/or browser and device characteristics is collected automatically when you visit our Services.
2. How do we process your information?
We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.
3. What legal bases do we rely on to process your information?
We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law. If you are in the EU, UK, or Africa, we rely on consent, performance of a contract, legitimate interests (specifically to analyze usage and diagnose problems), and legal obligations.
6. Do we offer artificial intelligence-based products?
Yes. We use artificial intelligence, machine learning, and automated decision-making systems to enable key AI-powered features.
Starix Score calculation
We use algorithms and machine learning to calculate your Starix Score by analyzing:
- Engagement patterns across social media platforms
- Content performance trends over time
- Audience growth and consistency
- Authenticity signals and fraud indicators
Fraud detection
We use AI to detect artificial engagement, purchased followers, and suspicious activity patterns that may indicate inauthentic influence. This helps ensure that followership, account growth, and progress are organic.
Content analysis
We use automated systems to categorize content, identify trends, and match creators with relevant brand opportunities.
Leaderboard rankings
We use algorithms to rank creators fairly based on performance data, normalizing platform differences and creator niche.
How AI affects you
Automated decisions. Your Starix Score and leaderboard rankings are generated automatically using AI. These scores may significantly affect your opportunities, as brands use scores to evaluate and select creators for campaigns.
Transparency & explanation. When AI makes decisions that affect you (such as fraud flags or score reductions), we will:
- Notify you of the decision
- Explain the key factors that influenced the decision in plain language
- Provide information about the data sources used (e.g., “sudden follower spike detected on Instagram”)
Human review right. If you believe an AI-generated score, ranking, or fraud flag is inaccurate, you have the right to:
- Request human review of the automated decision
- Submit evidence supporting your case
- Receive a response within 14 business days
- Appeal the decision if you disagree
To request human review, contact support@starixapp.com with the subject line “AI Decision Review Request”.
AI data handling. All personal information processed by our AI systems is handled according to this Privacy Policy. We:
- Use only data you’ve provided or authorized us to collect
- Do not train AI models on your private data without consent
- Regularly audit AI models for bias, fairness, and accuracy
- Update algorithms to improve fairness and reduce discriminatory outcomes
Third-party AI services. We may use third-party AI services for natural language processing (content categorization), image analysis (content quality assessment), and fraud detection (pattern recognition). These providers are contractually required to process data only according to our instructions, maintain security and privacy standards equivalent to ours, and not use your data for their own purposes.
8. How long do we keep your information?
We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, generally for a period of 5 years after account deactivation, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).
Data collected from social media platforms (Instagram, TikTok, YouTube, Facebook) is deleted within 90 days after disconnecting the platform, unless it is required for ongoing legal disputes, required for tax/financial compliance (in the case of payment records only), or aggregated and fully anonymized for analytics (no personal identifiers).
9. How do we keep your information safe?
We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process.
10. Do we collect information from minors?
Our Services are not intended for children under 16, and we do not knowingly collect, use, or disclose personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will take reasonable steps to delete such information. If you are 16 or 17 years old, you may use the Services only to the extent permitted by applicable law, and where required by applicable law your parent or legal guardian must consent to your use of the Services and to our processing of your personal information.
11. What are your privacy rights?
Depending on your region, you have rights that allow you greater access to and control over your personal information. These may include the right to request access, rectification, erasure, and data portability.
If a decision that produces legal or similarly significant effects is made solely by automated means (such as an AI-generated trust score), we will inform you, explain the main factors, and offer a simple way to request human review. If you believe an automated trust score is inaccurate, you have the right to request human review of that specific score.
Automated decision-making & AI scores
If decisions that produce legal or similarly significant effects (such as exclusion from brand opportunities based on a low Starix Score or fraud flags) are made solely by automated means, you have the right to be informed, the right to human review, the right to challenge the decision and provide evidence, and the right to an explanation of our decision-making logic in understandable terms.
Submit requests to support@starixapp.com or dpo@starixapp.com. Response time: within 14 business days. Include your account details and the specific decision you’re contesting.
Fraud flag appeals
If your account is flagged for suspected fraud or artificial engagement:
- We will notify you via email with specific reasons
- You can request human review within 30 days
- You can submit evidence (screenshots, analytics, explanations)
- A human reviewer will assess your case within 14 business days
- You will receive a detailed explanation of the final decision
Data Protection Officer (DPO): you may contact our DPO at dpo@starixapp.com for any questions regarding this policy.
12. Controls for Do-Not-Track features
We do not currently respond to DNT browser signals.
13. Do United States residents have specific privacy rights?
If you are a resident of certain US states, you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information.
14. Platform data & intellectual property
User data usage & ownership
All personal information, social media data, and content you provide or authorize us to access remains your property. For processing described in this Privacy Notice, we generally act as a data controller (or equivalent role under applicable law). In limited circumstances (for example, where we process personal information on behalf of a business customer for a specific campaign), we may act as a processor/service provider and will process such personal information only on documented instructions.
How we use your data:
- Provide Starix platform functionality (scores, portfolios, leaderboards)
- Calculate Starix Scores and performance rankings
- Facilitate connections between creators and brands
- Detect fraud and maintain platform integrity
- Improve our algorithms and services
- Generate aggregate, anonymized market insights
- Comply with legal obligations
We do not:
- Sell your personal information to third parties
- Use your data for purposes beyond Starix functionality
- Share your data with advertisers for ad targeting
- Train AI models on your private data without consent
Content & intellectual property rights
Content accessed from your connected social media accounts (Instagram, TikTok, YouTube, Facebook) remains your property and is subject to the terms of those platforms.
By connecting social media accounts, you grant Starix a limited, non-exclusive, worldwide license to display your public social media content in your Starix portfolio; show your content to brands when you apply to challenges; use aggregate, anonymized metrics for platform analytics; and cache content temporarily for performance optimization.
You can disconnect platforms and revoke this license at any time. You maintain all ownership and can use your content elsewhere. We do not claim ownership of your creative work.
Content you create directly within Starix (profile bio, challenge submissions, Circle descriptions) remains your intellectual property. By submitting this content, you grant Starix a license to display and distribute it within the platform for the purpose of facilitating brand partnerships.
All Starix platform technology, algorithms, scoring systems, software, and features are the exclusive intellectual property of STARIX INNOVATIVE SOLUTIONS LIMITED and are protected by intellectual property laws.
You may not:
- Reverse engineer our algorithms or scoring systems
- Scrape or extract data from the platform without authorization
- Reproduce or copy platform features without permission
- Use our intellectual property without explicit license
Data selling prohibition
We do not and will never sell, rent, or trade your personal information to third parties for their marketing or advertising purposes. Any sharing of data occurs only as explicitly described in Section 4 of this Privacy Policy.
15. Do we make updates to this notice?
Yes, we will update this notice as necessary to stay compliant with relevant laws. In the event of an update, we will put notice of these updates on our platform to ensure that users are well informed.
16. How can you contact us about this notice?
If you have questions or comments about this notice, you may email us at contact@starixapp.com.
17. How can you review, update, or delete the data we collect from you?
To request to review, update, or delete your personal information, please fill out and submit a data subject access request to dpo@starixapp.com.
18. Platform-specific terms & compliance
Data deletion instructions (Meta / Instagram / Facebook)
You can request deletion of data we received from Meta platforms (Instagram and Facebook) at any time by using one (or both) of the following methods.
Option 1 (recommended): Disconnect Meta access (self-service). In Starix, go to Account Settings → Connected Accounts. Select Instagram or Facebook and click Disconnect/Remove Access. Optionally also remove Starix from Meta: in Facebook/Instagram, review your connected apps and remove Starix access. Once disconnected, we stop collecting new Meta data immediately and delete Meta-derived data within 90 days, unless retention is required by law (for example, for disputes or compliance).
Option 2: Email deletion request. Send an email to dpo@starixapp.com with the subject line “Meta Data Deletion Request”. Please include your Starix account email address (or Starix username); the platform(s) to delete: Instagram and/or Facebook; and your Instagram username and/or Facebook Page name/ID connected to Starix (as applicable). We will acknowledge your request and may ask for additional information to verify your identity. After verification, we will complete deletion of Meta-derived data without undue delay and in any event within 90 days (unless a longer period is required by law). If you request deletion sooner, we will delete sooner where technically feasible and lawful.
Instagram/Facebook integration data minimization (permissions, data elements, purpose, retention)
When you connect Instagram or Facebook, we request only the minimum permissions/scopes needed to provide Starix functionality. The specific scopes shown to you may vary depending on your account type (e.g., Creator/Business) and available APIs, but we apply the following minimization controls:
- Authentication (OAuth token): used to authenticate your connection and retrieve authorized data; token is stored encrypted and is revoked/invalidated upon disconnect; deleted within 90 days of disconnect (or sooner if technically feasible).
- Basic profile identifiers (e.g., username, display name, profile picture, verification status, account type): used to display your connected account inside Starix and populate your creator portfolio (only if you choose to display it); deleted within 90 days of disconnect.
- Aggregate counts and performance metrics (e.g., follower/page-like counts; reach/impressions; likes/comments/shares/saves; engagement rates): used to calculate Starix Scores, generate analytics, and rank leaderboards; deleted within 90 days of disconnect, except metrics may be retained only in aggregated, fully anonymized form for analytics.
- Content identifiers/metadata for public posts (e.g., post IDs/URLs, timestamps, captions, hashtags) where available via API: used to identify and display best-performing public content in your portfolio (if you choose to display it) and to compute trends; deleted within 90 days of disconnect; we do not store private messages or private content.
- Insights (creator/business accounts only) in aggregated form (e.g., audience demographic breakdowns as provided by Meta): used to present high-level audience insights to you and to provide summarized portfolio insights to brands only where you choose to display; deleted within 90 days of disconnect; we do not disclose raw audience-level data to brands.
Meta limited use commitments (Instagram/Facebook)
With respect to data received from Meta platforms (Instagram/Facebook): (a) we use such data only to provide Starix features requested by you (including score calculation, portfolio display, fraud detection, and analytics); (b) we do not sell, rent, license, or otherwise commercialize Meta data; (c) we do not use Meta data for advertising targeting, retargeting, or to build advertising audiences; (d) we do not provide brands or other third parties with raw Meta API data or raw API responses; and (e) you control what Meta-derived metrics/content appear in your public portfolio through your profile settings, and you can disconnect at any time.
Meta platforms (Instagram, Facebook)
Our use of Meta’s APIs is subject to:
- Meta Platform Terms: facebook.com/terms.php
- Meta Platform Policy: developers.facebook.com/docs/development/release/policies
- Instagram API Terms of Use: developers.facebook.com/terms
We comply with Meta’s requirements including limited use of Instagram/Facebook data (only to provide Starix functionality requested by you, such as scores, portfolios, fraud detection, and analytics); data deletion within 90 days of user account deletion or platform disconnect; no selling, renting, trading, or licensing of Instagram/Facebook data to third parties; and compliance with Instagram’s Brand Guidelines.
Meta is not responsible for Starix’s data practices. Our relationship with Meta is limited to API access. Your use of Instagram and Facebook is governed by Meta’s terms, not Starix’s.
TikTok
Our use of TikTok’s API is subject to TikTok API Terms of Service, TikTok Developer Policies, and TikTok Community Guidelines. We comply with TikTok’s requirements including limited use of TikTok data per API terms, respect for user privacy and data protection, and no use of TikTok data for purposes prohibited by TikTok policies. TikTok is not responsible for Starix’s data practices. Your use of TikTok is governed by TikTok’s terms, not Starix’s.
YouTube (Google)
Our use of YouTube’s API is subject to:
- YouTube API Services Terms: developers.google.com/youtube/terms/api-services-terms-of-service
- Google API Services User Data Policy: developers.google.com/terms/api-services-user-data-policy
- YouTube Terms of Service
We comply with Google’s requirements including limited use of YouTube data (only for explicit Starix functionality); no storage of YouTube video content or audio; compliance with YouTube’s attribution requirements; and user control over YouTube data access. Google is not responsible for Starix’s data practices. Your use of YouTube is governed by Google’s terms, not Starix’s.
You can revoke Starix’s access to your YouTube data at any time via the Google security settings page: security.google.com/settings/security/permissions.
API terms conflicts
If any terms of this Privacy Policy conflict with the requirements of social media platform APIs, the platform’s terms take precedence for data from that specific platform.
Platform changes
Social media platforms may change their APIs, terms, or data access policies. If such changes affect our ability to provide Starix services or require changes to our data practices, we will update this Privacy Policy, notify affected users via email, provide at least 30 days’ notice before implementing changes, and offer alternative options where possible (e.g., alternative platforms or manual data entry).
Compliance addendum
This Addendum supplements the STARIX Privacy Policy to ensure full compliance with GDPR (EU/UK), CCPA/CPRA (California, US), and Nigeria’s NDPA 2023.
Annex A: GDPR (EU/UK) compliance
- Subject Access Requests (SARs): STARIX will respond to all data subject requests (access, rectification, erasure, portability) within 30 days.
- Records of Processing Activities (ROPA): STARIX maintains detailed records of all processing activities, including categories of data, purposes, recipients, and retention periods.
- Data Protection Impact Assessments (DPIAs): STARIX conducts DPIAs for high-risk processing, including AI-driven trust scoring, to evaluate risks and ensure fairness.
- Automated decision-making: where trust scores may produce significant effects, STARIX provides clear explanations of the logic involved and ensures a simple mechanism for requesting human review.
- Data Protection Officer (DPO): STARIX has appointed a DPO, reachable at dpo@starixapp.com.
Annex B: CCPA/CPRA (California, US) compliance
- Do Not Sell or Share My Personal Information: STARIX does not sell personal data. However, a “Do Not Sell or Share My Personal Information” request may be submitted by California residents to exercise opt-out rights by emailing dpo@starixapp.com.
- Consumer requests: California residents may request access, correction, deletion, or portability of their personal data. STARIX will respond within 45 days of receiving a verifiable request.
- Verification process: STARIX requires identity verification before fulfilling consumer requests to protect privacy.
- Sensitive personal information: STARIX does not use sensitive personal information for purposes beyond those permitted under CPRA.
Annex C: Nigeria NDPA 2023 compliance
- Registration with NDPC: STARIX is registered with the Nigeria Data Protection Commission (NDPC) as required for controllers processing data of more than 2,000 individuals annually.
- Annual Data Protection Compliance Audit (DPCA): STARIX conducts annual audits to ensure ongoing compliance with NDPA 2023 and submits reports to the NDPC.
- Lawful basis: STARIX processes personal data under lawful bases including consent, contract, legitimate interest, and legal obligation, consistent with NDPA requirements.
- Minors’ data: STARIX does not knowingly collect data from individuals under 16 years of age. Where parental consent is required for users aged 16 or 17 under applicable law, STARIX ensures compliance before processing.
- Data subject rights: Nigerian residents may exercise rights of access, rectification, erasure, portability, and restriction of processing. Requests will be handled within 30 days.
Annex D: Security & accountability
- Security measures: STARIX employs encryption, access controls, and regular security audits to safeguard personal data.
- Third-party processors: STARIX ensures that third-party processors (e.g., Paystack) comply with equivalent data protection standards.
- Policy updates: STARIX commits to regular reviews and updates of this Addendum to reflect evolving legal requirements.
If you have questions or comments about this notice, you may email us at contact@starixapp.com.
7. How do we handle your social logins?
If you choose to register or log in to our Services using a social media account, we may have access to certain information about you. We will use the information we receive only for the purposes that are described in this Privacy Notice.
7A. Social media integrations & data collection
Starix integrates with multiple social media platforms to provide comprehensive creator performance analytics. When you connect your social media accounts to Starix, we access and process publicly available data and data you explicitly authorize us to access through official platform APIs.
Supported platforms:
All social media connections use OAuth 2.0 authorization, which means you are redirected to the social media platform’s official authorization page; you explicitly grant Starix permission to access specific data scopes; the platform provides us with a secure access token (never your password); we use this token to retrieve only the data you authorized; and you can revoke access at any time through your Starix settings or directly through the platform’s app authorization settings.
General principles (all platforms):
7A.2 Instagram integration (Meta Graph API)
What Instagram data we collect — profile information:
Content & performance metrics:
Insights data (for Creator/Business accounts):
We do not collect:
How we use Instagram data:
We comply with Meta’s Platform Terms and Instagram API Terms, including: (a) using Instagram data only to provide and improve Starix functionality requested by you (for example, Starix Score calculation, portfolio display, and fraud detection); (b) not selling, renting, licensing, or otherwise commercializing Instagram data; (c) not using Instagram data for advertising targeting or to build advertising profiles; (d) not providing brands or other third parties with raw Instagram API data (we show only the metrics and content you choose to display in your public portfolio and summarized outputs such as scores/aggregates); and (e) honoring your ability to disconnect and control what is displayed.
Your use of Instagram is subject to Meta’s Privacy Policy: facebook.com/privacy/policy.
7A.3 Facebook integration (Meta Graph API)
What Facebook data we collect — profile information:
Page performance (for Page admins):
We do not collect:
How we use Facebook data: to calculate Starix Score for Facebook Page managers; display Page performance in creator portfolios; rank Page performance on leaderboards; and verify Page ownership and authenticity. Facebook integration is primarily for creators who manage Facebook Pages (not personal profiles). Personal profile data is not used for Starix Score calculation.
Your use of Facebook is subject to Meta’s Privacy Policy: facebook.com/privacy/policy.
7A.4 TikTok integration (TikTok API)
What TikTok data we collect — profile information:
Content & performance metrics:
We do not collect:
How we use TikTok data: to calculate your Starix Score based on video performance; display best-performing TikTok videos in your portfolio; rank you on challenge leaderboards; analyze engagement patterns for authenticity; show brands your content virality and engagement quality; and track performance trends over time.
We comply with TikTok’s API Terms of Service and Developer Policies, including data usage and storage limitations, user privacy and consent requirements, rate limiting and API restrictions, and prohibited use cases. Your use of TikTok is subject to TikTok’s Privacy Policy: tiktok.com/legal/privacy-policy.
7A.5 YouTube integration (YouTube Data API)
What YouTube data we collect — channel information:
Content & performance metrics:
We do not collect:
How we use YouTube data: to calculate your Starix Score based on video performance; display channel metrics and best videos in your portfolio; rank you on leaderboards; verify channel authenticity; show brands your audience reach and engagement; and track subscriber growth and content consistency.
We comply with YouTube’s API Services Terms and Google API Services User Data Policy, including limited use requirements (data used only for Starix functionality), data retention limitations, user privacy and consent requirements, and prohibition on storing video content. Your use of YouTube is subject to Google’s Privacy Policy: policies.google.com/privacy.
7A.6 How we calculate Starix Score using social media data
Your Starix Score is calculated by analyzing multiple performance dimensions across your connected social media accounts:
We use automated algorithms and artificial intelligence to normalize metrics across different platforms, weight recent performance more heavily than historical data, detect and flag suspicious engagement patterns, compare your performance to similar creators in your niche, and generate a composite score (0–100 scale).
7A.7 Fraud detection & authenticity analysis
We analyze social media data to detect artificial engagement (bots, engagement pods, purchased likes), suspicious follower growth patterns, inconsistent engagement rates, and content authenticity issues, using pattern analysis, historical trend analysis, cross-platform consistency checks, and engagement rate benchmarking. Authentic engagement increases your score; detected artificial engagement decreases your score; repeated fraud patterns may result in account suspension. If you believe your authenticity score is incorrect, you can request human review by contacting support@starixapp.com.
7A.8 Your control over social media data
You can connect or disconnect any social media platform at any time through your Starix Account Settings → Connected Accounts. We refresh your social media data every 24 hours for active users; you can manually trigger a refresh from your profile settings; historical data (last 90 days) is used for trend analysis.
When you disconnect a platform:
You can request a copy of all social media data we’ve collected about you, correction of inaccurate data, or immediate deletion of all your social media data (which results in score recalculation). Submit requests to dpo@starixapp.com.
7A.9 Security of social media data
Social media data is protected using the same security measures described in Section 9: AES-256 encryption at rest, TLS 1.3 in transit; access controls so only authorized Starix systems can access data; OAuth tokens encrypted and never exposed; regular security assessments and penetration testing; and data minimization so we collect only necessary data and delete it when no longer needed.
7A.10 Third-party access to social media data
We do not share your social media data with third parties except:
We never sell your social media data to data brokers; share your data with advertisers for targeting (including by uploading, matching, or using platform-derived data to build advertising audiences); or provide raw data to brands (only portfolio/score summaries).
7A.11 Updates to social media integrations
If we add new social media platforms or change how we use data, we will update this Privacy Policy and notify you via email. You will be asked to explicitly authorize any new data collection. You can choose not to connect new platforms without affecting existing integrations.