Privacy Policy

This Privacy Policy explains how MAD Compagnie, an Estonian company, collects, uses, shares, and protects personal data when you use Request.

1. Controller and Contact

MAD Compagnie is the controller for personal data processed through Request, except where a third-party provider acts as an independent controller under its own terms. Privacy requests can be sent to support@request.cx.

2. Data We Collect

• account data, such as email address, username, authentication identifiers, and profile details;
• creator onboarding and payout data processed through payment providers;
• request, payment, delivery, tracking, refund, and support information;
• content and files that users submit, upload, deliver, or download;
• technical data, such as IP address, device/browser information, logs, cookies, and security events;
• communications, including support messages, notification preferences, and email events.

3. How We Use Data

• to provide accounts, creator profiles, requests, payments, delivery, refunds, and support;
• to verify identity, prevent fraud, enforce rules, and keep the platform secure;
• to send transactional emails, product notices, and service updates;
• to comply with legal, tax, accounting, payment, consumer, and regulatory obligations;
• to monitor, debug, analyze, and improve Request.

4. Legal Bases

Where GDPR or similar laws apply, we process personal data to perform a contract with you, comply with legal obligations, protect legitimate interests such as security and fraud prevention, protect vital interests where necessary, and rely on consent where required.

5. Service Providers and Transfers

We use trusted providers to operate Request, including payment processors, hosting, database, storage, authentication, email, analytics, monitoring, and support providers. These may include Stripe, Supabase, Vercel, Railway, Resend, Sentry, and Google services, depending on the feature used. Data may be processed outside your country. Where required, we use appropriate safeguards for international transfers.

6. Cookies and Similar Technologies

Request uses cookies, local storage, and similar technologies for authentication, security, preferences, checkout, diagnostics, fraud prevention, and service performance. Some technologies are necessary for the service to work. Where required by law, optional cookies or analytics will be subject to consent.

7. Retention

We keep personal data only as long as reasonably necessary for the purposes described in this Policy, including account operation, payment records, dispute handling, fraud prevention, legal compliance, tax/accounting obligations, backups, and security logs.

8. Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict, export, or object to processing of your personal data, and to withdraw consent where processing is based on consent. You may also have the right to complain to a data protection authority. Send requests to support@request.cx.

9. Children

Request is not intended for users under 18. We do not knowingly collect personal data from children. If you believe a minor has used Request, contact us so we can review and take appropriate action.

10. Security

We use technical and organizational measures designed to protect personal data. No online service is perfectly secure, and you are responsible for keeping your account credentials confidential.

Last Updated: May 14, 2026