Public Data Notice

Echo IO, Inc., a Delaware corporation, operates Echo (echoio.ai), a marketing-intelligence and operations platform used by brands, agencies, and creator platforms. To help our customers understand their market and find creator partners, we process publicly available information about creators, brands, and the people publicly associated with them.

This notice is provided under Article 14 of the GDPR and similar transparency laws. Contact: legal@echoio.ai.

• Public profile information — names, handles, profile URLs, bios, profile images, verification status, general location (such as city or country), and content categories across public social platforms.
• Public performance statistics — follower counts, views, likes, comments, engagement rates, and their change over time.
• Public content and advertising — public posts, videos, captions, transcripts of public content, and ads published in platforms' public ad libraries.
• Publicly evident relationships — collaborations, sponsorships, and business affiliations apparent from public content and announcements.
• Business contact information — such as a business email address, where made public or provided by licensed data partners, used only so customers can propose legitimate business partnerships.

We do not seek out private or sensitive information (such as health, religion, or sexual orientation), we do not process data from private accounts or private messages, and we do not use this data to surveil or profile individuals' private lives.

• Public surfaces of social platforms (such as Instagram, TikTok, YouTube, X, LinkedIn, Facebook, Twitch, and others), including their public ad libraries.
• Licensed data providers that compile public creator and social data (such as creator-data and social-statistics services).
• The public web (public websites and articles).

We process this information to provide business customers with marketing analytics: understanding market and content trends, benchmarking brands against competitors, and identifying creators who may be a good fit for brand partnerships — including generating shortlists, fit scores, and outreach suggestions that our customers review.

Our legal basis is legitimate interests (Article 6(1)(f) GDPR): our and our customers' interests in analyzing public market activity and identifying potential business partners. We limit processing to information that is publicly available in a business or creator context, where individuals can reasonably expect brands to evaluate public professional activity; we apply the safeguards in this notice; and we honor objections (see "Your Rights & How to Opt Out").

Insights derived from this data are shown to our business customers inside Echo. The service providers that host and support our platform (listed at echoio.ai/sub-processors) process it on our behalf under contract.

We do not sell this information or provide it to data brokers.

We keep public profile and statistics data while it remains relevant for market analysis and refresh it against current public sources; data associated with platforms that impose shorter retention windows is deleted within those windows. Data subject to a verified erasure request is deleted and suppressed as described below.

You may request access to the data we hold about you, correction, deletion, or restriction, and you may object to this processing entirely. Email legal@echoio.ai with links to your public profiles so we can locate your records. On a verified erasure or objection request we will:

• Delete your records from our systems without undue delay (and, where a response is legally required, within the applicable statutory period).
• Retain the minimal identifiers needed to suppress your information from further processing, so we do not re-collect it.
• Confirm to you when this is complete.

If you are in the EEA or UK, you also have the right to lodge a complaint with your data-protection authority.

We may update this notice as our practices evolve; updates are posted here with a new effective date. See also our Privacy Policy at echoio.ai/privacy-policy.