Privacy Policy

Last updated: September 26, 2026

1. Data controller

The controller of the personal data collected through this site is Serial S.r.l., registered office at Via Gualtiero Serafino 20, Rome (Italy). Tax code and VAT number: 18246331005. Compound Agency is a brand of Serial S.r.l.

2. Data we collect and purposes

Through the application form in the “Apply” section of the site we collect the data you voluntarily provide to apply as a partner: full name, email address, links to your profiles, platforms you use, niche, audience size, what you sell today and at what price, approximate monthly revenue (optional field) and the language of the page you apply from. We also record the date and time of submission.

The form is part of the site: we collect the data directly, without any third-party form service, and store it in our database hosted on Supabase.

This data is processed exclusively to:

• review your application and check whether the conditions for a partnership exist;
• let our team know a new application has arrived, with an internal email sent through Brevo;
• reply to you by email.

Navigation data. As with any website, when you visit the pages or submit the form, the systems of our hosting provider (Vercel) automatically record some technical data about the request: IP address, browser and device type, requested page, date and time. This data ends up in the service's technical logs and we use it only to run and protect the site (troubleshooting errors, preventing abuse and attacks), never to profile you.

We do not use profiling cookies or analytics tools.

3. Legal basis

The processing of application data is based on Article 6(1)(b) GDPR: pre-contractual measures taken at the request of the data subject, who voluntarily chooses to apply for a possible collaboration with Compound Agency.

Navigation data is processed on the basis of our legitimate interest in keeping the site secure and working properly (Article 6(1)(f) GDPR).

The “I have read the privacy policy” box in the form confirms that you have read this policy; it is not consent to marketing. We do not use application data for newsletters or promotional communications.

4. Data processors

We rely on the following providers, appointed as data processors under Article 28 GDPR:

• Supabase Inc. — database where applications are stored (EU infrastructure);
• Vercel Inc. — hosting of the site and web application, including technical request logs;
• Brevo (Sendinblue SAS — France, EU) — internal emails that notify our team of new applications.

5. Transfers outside the EU

Should any of the providers listed in section 4 transfer data outside the European Economic Area, the transfer takes place in accordance with the GDPR, through Standard Contractual Clauses (SCC) approved by the European Commission and/or other adequate safeguards provided by the vendor.

6. Retention

Data collected through the application form is kept for 24 months from submission, unless a collaboration starts: in that case the data is kept for the duration of the collaboration and in accordance with applicable legal obligations.

Navigation data stays in the hosting provider's logs for the short period set by the provider and is then deleted automatically.

7. Your rights

Under Articles 15-22 GDPR you may at any time request: access to your data, rectification, erasure, restriction of processing, data portability and objection to processing. To exercise these rights you can contact us through the channels listed on the site.

You may also lodge a complaint with the Italian Data Protection Authority, Garante per la Protezione dei Dati Personali (www.garanteprivacy.it).

8. Security

We adopt appropriate technical and organisational measures to protect the data we process, including encrypted connections (HTTPS/TLS), limited access to data, and the choice of GDPR-compliant providers.

9. Changes

We reserve the right to update this Privacy Policy. Changes will be published on this page along with the last-updated date.