1. Our Commitment to Privacy
Vara ("we," "us," "our") was founded on a principle of absolute discretion and trust. This Privacy Policy outlines our practices regarding the collection, use, and protection of personal information for our potential and current partners ("you," "your"). Our commitment is to handle your information with the utmost care, transparency, and security. This policy applies to information collected through our website, vara.so, and all related services.
To evaluate potential partnerships and provide our services, we collect the following types of information:
- Information You Voluntarily Provide: When you complete our application form or communicate with us directly, we collect the information you choose to share, which may include:
- Contact Details: Name and email address.
- Professional Information: Links to social media profiles, creator pages, and details about your current success (e.g., subscriber count, revenue tier).
- Personal Information: English proficiency, content creation preferences, availability, hobbies, and other interests relevant to brand development.
- Information Collected Automatically: As you interact with our website, our hosting platform (Webflow) may automatically collect technical data to ensure site functionality and for analytical purposes. This may include:
- Log and Usage Data: IP address, browser type, operating system, and pages visited.
- Cookies and Similar Technologies: We may use cookies to enhance your browsing experience. You can control the use of cookies at the individual browser level.
Your information is used exclusively for legitimate business purposes to provide our elite management services. These purposes are:
- Application Review: To meticulously evaluate your profile for a potential partnership.
- Communication: To respond to your application, schedule consultations, and manage our ongoing partnership communications.
- Service Delivery: For active partners, to execute our management duties, including account strategy, content management, marketing, and financial reporting.
- Service Improvement: To analyze trends and understand the needs of creators to continually refine our service offerings.
4. Data Sharing and Disclosure
Discretion is the cornerstone of our operation.
- We do not sell, rent, or trade your personal information with any third-party marketers.
- We only share information with trusted third-party services (sub-processors) who assist us in operating our agency, under strict confidentiality agreements. These services fall into the following categories:
- Website Hosting Providers: To manage our web presence and your initial application.
- Project Management Platforms: To manage internal tasks and workflows for active partners.
- Secure Cloud Backup Providers: To maintain encrypted, offsite backups of our operational data for disaster recovery.
- We will only disclose your information where legally required to do so by a court order or other governmental request.
5. Data Security and Storage
Protecting your brand and data is our highest priority. We employ a multi-layered security approach:
- Self-Hosted Primary Infrastructure: Your primary data, including all submitted content and communications, is stored on our private, secure, self-hosted server infrastructure, minimizing exposure to third-party cloud vulnerabilities.
- End-to-End Encrypted Backups: All offsite backups stored with our cloud backup provider are end-to-end encrypted on our end before being uploaded. This means the backup provider has zero knowledge of the contents of your files.
- Principle of Least Privilege: Access to your personal and professional information is strictly limited to essential personnel on a "need-to-know" basis to perform their duties.
6. Data Retention
We practice responsible data hygiene and retain your information only as long as necessary.
- Application Data: For applicants who do not become partners, we will retain your application data for a period of one (1) year for analytical and record-keeping purposes, after which it will be securely deleted.
- Partner Data: For active and former partners, we will retain your data for the duration of our partnership and for a period thereafter as required by legal and contractual obligations.
7. Your Data Rights (GDPR & CCPA/CPRA)
You have significant rights and control over your personal information. In accordance with regulations like the GDPR and the California Consumer Privacy Act (CCPA/CPRA), you have the right to:
- Know and Access: Request a copy of the specific personal information we hold about you.
- Correct (Rectification): Request that we correct inaccurate or incomplete information.
- Delete (Erasure): Request the deletion of your personal information from our records, subject to certain legal exceptions.
- Restrict Processing: Request that we limit the way we use your personal information.
- Not Be Discriminated Against: We will not discriminate against you for exercising any of your privacy rights.
To exercise any of these rights, please contact us using the information below.
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:
hello@vara.so
9. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. Latest revision of this policy is 28AUG25.