Privacy Policy

SAINT & CITIZEN

Version: 2026-10-05 | Last Updated: October 5, 2026

This Privacy Policy explains how Saint & Citizen collects, uses, shares and protects personal information. It is a notice of our practices and is not a contract. Capitalized terms that are not defined in this policy have the meanings given in our Terms of Use.

NOTICE REGARDING MINORS: THE SERVICES ARE NOT AVAILABLE TO ANYONE UNDER 13. A PERSON WHO IS 13 OR OLDER BUT UNDER THE AGE OF MAJORITY MAY USE THE SERVICES ONLY WITH THE CONSENT OF A PARENT OR LEGAL GUARDIAN. SEE SECTION 10.

CONTENTS

1. ABOUT THIS POLICY

1.1 Who we are. Saint & Citizen Ventures LLC, a Florida limited liability company doing business as Saint & Citizen (“Saint & Citizen,” “we,” “us” or “our”), is responsible for the personal information described in this policy. Where United Kingdom or European Union data protection law applies, we are the controller of that information unless we tell you otherwise.

1.2 What this policy covers. This policy applies to personal information we handle through the following (together, the “Services”):

(a) our private hub at saints.team and any related or successor domain, including every client link, creator link, portal, workspace, page, form and file-sharing tool we give you access to;

(b) our public intake and inquiry forms;

(c) emails, notifications and messages we send or receive in connection with them; and

(d) any mobile or desktop application, integration or other feature or channel we offer now or in the future that links to this policy.

1.3 Who it applies to. This policy applies to everyone who uses the Services or whose information we hold in connection with them, including clients, brands, sponsors, partners, creators and talent, managers, agents and other representatives, parents and legal guardians, freelancers, collaborators, vendors and people who contact us. It does not cover information about our own employees in that capacity, which is covered by separate notices.

1.4 Other agreements. If you have an Underlying Agreement with us that contains privacy or confidentiality terms, those terms apply together with this policy.

2. INFORMATION WE COLLECT

The categories below describe the kinds of personal information we collect. Not every category applies to every person.

2.1 Information you give us.

(a) Identity and contact information, such as your name, email address, phone number, job title or role, organization, professional or stage name and time zone.

(b) Access information, such as the passcodes, passwords and other credentials used to access the Services. Passwords are stored by our sign-in provider in a protected (hashed) form. Passcodes for client and creator links are stored so that authorized members of our team can resend them to you.

(c) Your Content, meaning anything you upload, send, link to or submit, such as documents, images, video and audio, brand assets, creative work, pitches, location details, agreements, releases, invoices and other business records, together with their file names, descriptions and notes. Your Content may contain personal information about you or about other people.

(d) Communications, such as your answers to our requests, notes, comments, feedback, ratings, approvals, messages and emails with us.

(e) Brand and project information, such as brand colors, typefaces, guidelines, project preferences and decisions.

(f) Inquiry information, meaning what you provide when you contact us or complete an intake form, such as your name, email, organization, the type of inquiry, your message, and the scale, timeline or budget of what you have in mind.

(g) Commercial and financial information, such as the scope, value and terms of a project, sponsorship or engagement, and invoices, purchase orders, tax forms and similar documents, which may contain tax identification numbers. Bank account and payment details for paying you are collected through a third-party payroll provider acting for us and from the invoices you submit to us.

(h) Creator and talent information, such as headshots and photographs, biography, answers for announcements, show and program details, your status in the program, availability and schedule, travel and location requirements for filming, guest and artist suggestions, and the details of your management or agency. The content we make together also records your appearance, voice and performance, much of which is published as your agreement allows.

(i) Minor and Parent information, where we have approved a Minor’s access, such as the Minor’s name and age or date of birth, and the Parent’s name, relationship to the Minor, contact details and consent record (see Section 10).

2.2 Information we collect automatically.

(a) Usage and activity information, such as who has access to a given client or creator space, when you open a link or sign in, the pages and features you use, what you upload, download or access, which person uploaded, sent, approved, downloaded or accessed something where the Services record it, and the date and time of each activity.

(b) Device and connection information, such as your IP address, browser type and version, device type, operating system, the web address you visited, and similar technical identifiers of your device and browser (sometimes called device fingerprinting), which we use for the security purposes in Section 8.

(c) Security information, such as failed sign-in or passcode attempts, lockouts, and information used to detect, investigate and prevent unauthorized access, fraud and abuse.

(d) Referral information, meaning the website that referred you to an intake form and any campaign tags in the link.

(e) Cookies and similar technologies, as described in Section 6.

We keep these records to keep accounts and content secure and to know who did what within the Services, and not to monitor you beyond that purpose.

2.3 Information we receive from others.

(a) People you work with, such as a colleague, client, manager, agent, representative or Parent who gives us your contact details, adds you to a project, or uploads content that includes information about you.

(b) Our own business records, including contacts, correspondence, meetings and notes about our dealings with you or your organization.

(c) Public sources, such as your or your organization’s website or social media, public company information and publicly available logos.

(d) Service providers and integrations, such as our sign-in and email providers and any third-party service you choose to connect.

2.4 Sensitive information. We ask you not to send us sensitive personal information unless we ask for it for a stated purpose and tell you where to send it. This includes payment card numbers, passwords for other services, Social Security numbers and other government identification numbers, scans of identity documents, health information, and information about racial or ethnic origin, religious or political beliefs, sexual orientation, biometrics or criminal history. We do not need health information, including for health-themed programs. The exception is the tax details that tax forms and invoices require. Bank details should be provided only through our payroll provider or on an invoice you submit to us. The sensitive information we do hold (access credentials, tax identification numbers and financial account details) is used only to provide and secure the Services and to pay or be paid, and not to infer characteristics about you. If you send us other sensitive information anyway, we will handle it under this policy and applicable law.

3. HOW WE USE INFORMATION

3.1 Purposes. We use personal information to:

(a) provide the Services, including to create and manage your access, deliver and receive files, show project progress, schedules and materials, and record approvals and decisions;

(b) run our projects and business relationships, including to plan, produce, deliver and manage projects, campaigns, programs, sponsorships and engagements, coordinate with the people involved, and keep business records;

(c) communicate with you, including to send access links and passcodes, requests, reminders, notifications, updates and replies;

(d) keep the Services secure, including to authenticate users, prevent unauthorized access, detect and investigate fraud, abuse and security incidents, and enforce our Terms of Use;

(e) improve and develop the Services, including to understand how they are used, fix problems and build new features;

(f) make and promote our programs, including to produce, publish and promote the shows, series, events and communities our creators front, as their agreements allow;

(g) use automated and AI-assisted tools, as described in Section 4;

(h) comply with law and protect rights, including to meet legal, tax, accounting and regulatory obligations, respond to lawful requests, and establish, exercise or defend legal claims;

(i) carry out corporate transactions, as described in Section 5.3(h); and

(j) fulfill any other purpose we describe to you when we collect the information, or to which you consent.

3.2 Aggregated and de-identified information. We may create aggregated or de-identified information that does not identify you and use it for any lawful purpose. We keep that information in de-identified form and do not attempt to re-identify it.

3.3 Marketing. We do not currently send marketing emails through the Services. Messages about your access, projects and requests are service messages. If we send marketing communications in the future, we will do so in line with applicable law, and you will be able to opt out at any time.

4. AUTOMATED TOOLS AND ARTIFICIAL INTELLIGENCE

4.1 How we use them. We use automated tools and artificial intelligence services provided by third parties to help our team work more efficiently, for example to summarize recent activity and to answer our team’s questions about projects and relationships.

4.2 What they process. Information processed by these tools may include your name, title and organization, the name you gave on an inquiry, the names of projects, companies and files, short activity summaries (which can include project ratings and short notes written by our team), and notes our team writes for the tool. As of the date of this policy, these tools are used by our team only, and the contents of files you upload are not sent to them. We keep copies of our team’s recent questions and the tools’ answers, which may mention you.

4.3 Our providers. Our AI providers process this information on our behalf under their business terms. They may keep requests and responses for a period (for example, to provide the service and to monitor for abuse), and they state that they do not use business data to train their models by default.

4.4 No solely automated decisions. We do not use these tools to make decisions that produce legal or similarly significant effects about you without human involvement. If we introduce AI features that process Your Content or are visible to you, we will update this policy.

5. HOW WE SHARE INFORMATION

5.1 No sale of personal information. We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use it for targeted advertising. We disclose personal information only as described in this Section 5.

5.2 People you work with. The Services are collaborative. Information and content you provide may be visible to:

(a) other people with access to the same link, account, page or project (for example, everyone on a client link sees the content on it, and a creator’s manager or representative sees that creator’s page);

(b) our team, the freelancers, crews and vendors working on your project, and any creators, talent and representatives on its team list, some of whom may be given access to project files, including files you upload, in our shared file storage (for example, our Google Drive), where they may be able to edit, download or keep copies; and

(c) your organization (for example, brand-level materials may be shared across all of your organization’s projects).

Copies that these people have already downloaded or synced may remain with them after their access ends.

5.3 Other recipients. We also disclose personal information to:

(a) service providers that host, store, secure, deliver and support the Services (for example, hosting, database, file storage, sign-in, email delivery, AI, push notification and payroll providers), which process personal information for us under their terms with us. Our principal providers are listed in the Appendix. When you upload a file, your browser may send it directly to our file storage provider, which then also receives your IP address;

(b) third parties your browser connects to, because some pages load content directly from them (for example, typefaces from Google Fonts or embedded videos). These providers receive your IP address and browser information and handle it under their own privacy policies;

(c) clients, partners and counterparties, where needed to carry out a project or engagement (for example, sharing a creator’s work with a client or sponsor, or a brand’s materials with a creator), in line with the relevant agreements;

(d) the public, because we publish creators’ and talent’s names, images, voices, performances, biographies and announcements in our program content, on our channels and in promotion, as the relevant agreement or your permission allows. For a Minor, we do this only with the Parent’s written permission;

(e) affiliates, meaning companies under common ownership or control with us, for the purposes in this policy;

(f) professional advisers, such as our lawyers, accountants, auditors and insurers;

(g) authorities and others for legal and safety reasons, when we believe disclosure is necessary to comply with law, regulation, legal process or a lawful government request, to enforce our agreements, to report a child safety concern, or to protect the rights, property or safety of Saint & Citizen, our users or others;

(h) parties to a corporate transaction, in connection with a merger, acquisition, financing, reorganization, sale of assets or bankruptcy, in which case personal information may be transferred to the successor or acquirer; and

(i) anyone else with your consent or at your direction.

6. COOKIES AND SIMILAR TECHNOLOGIES

6.1 Strictly necessary only. We use cookies and browser storage that are strictly necessary to operate the Services, for example to keep you signed in to a link or account, to protect against misuse, and to remember display preferences such as light or dark mode. These typically last for your session or a limited period.

6.2 No advertising or analytics trackers. We do not currently use advertising cookies or third-party analytics trackers. Some pages load content from third parties, as described in Section 5.3(b). If we introduce analytics, advertising or other non-essential cookies, we will update this policy and, where the law requires, ask for your consent first.

6.3 Browser signals. Because we do not track you across other websites, we do not respond to “Do Not Track” signals. Where the law requires, we honor recognized opt-out preference signals such as Global Privacy Control.

7. HOW LONG WE KEEP INFORMATION

7.1 Retention. We keep personal information for as long as needed for the purposes in this policy, including to provide the Services and maintain your access, to carry out and document projects, engagements and business relationships, to comply with legal, tax, accounting and regulatory requirements, to resolve disputes and establish or defend legal claims, and to maintain the security and integrity of the Services. The criteria we use are the nature of the information, whether our relationship is ongoing, whether a project or agreement is active or may give rise to claims, and any legal retention period.

7.2 What you should know.

(a) Many records are kept as part of our business records after an engagement ends, and some have no fixed end date. These include activity histories (which can name the people involved), approvals, relationship and deal histories, records of who had access and when, and security records.

(b) When something is removed from the Services, it is often archived or hidden from view and not erased, and some records can be erased only by a deliberate manual step on request.

(c) Copies may remain in backups, in trash folders (files removed from our file storage stay in its trash for about 30 days) and in our providers’ logs.

(d) Files you download, copies held by the people you share them with, and copies downloaded or synced by Project Participants while they had access are outside our control.

7.3 Deletion requests. If you ask us to delete information, we will do so where the law requires, including by taking the manual steps described above, subject to the exceptions in Section 11.2.

8. HOW WE PROTECT INFORMATION

8.1 Our measures. We use administrative, technical and organizational measures designed to protect personal information, including private links with individual passcodes, sign-in rate limits and lockouts, role-based access controls, private file storage with time-limited download links, and encryption in transit. Authorized members of our team can see and resend passcodes so that they can support you. We also keep the activity, access and device records described in Section 2.2.

8.2 No guarantee. No system is completely secure, and we cannot guarantee the security of information transmitted to or stored in the Services. If we learn of a security incident affecting your personal information, we will notify you and regulators as the law requires.

8.3 Your part. Keep your access private, sign out when you finish (always on shared devices), share information only with people entitled to it, and tell us promptly at marvens@saintandcitizen.com if you believe your access has been compromised. If you upload or send us information about other people, you are responsible for having the right to share it with us for the purposes in this policy. Our Terms of Use contain more detail.

9. INTERNATIONAL TRANSFERS

We are based in the United States (Florida), and we and our service providers process information in the United States, the United Kingdom and the European Union. If you are located outside the United States, your information will be transferred to, stored and processed in countries whose data protection laws may differ from your own. Where United Kingdom or European Union law requires a safeguard for these transfers, we rely on a mechanism recognized by that law, such as the standard contractual clauses approved by the European Commission (with the United Kingdom addendum) or an adequacy decision. You may ask us for more information about these safeguards using the contact details in Section 14.

10. CHILDREN AND MINORS

10.1 No children under 13. The Services are not directed to children under 13, and no one under 13 may use them. We do not knowingly collect personal information from children under 13. If we learn that we have, we will end that access and delete the information as required by law. If you believe a child under 13 has given us personal information, contact us at marvens@saintandcitizen.com.

10.2 Minors aged 13 and older. A Minor may use the Services only if we have approved the Minor’s access in writing and the Minor’s Parent has accepted our Terms of Use and consented to our handling of the Minor’s personal information, as described in Section 5 of the Terms of Use.

10.3 What we collect about a Minor. We collect only what we need for the project, program or engagement for which the Minor was given access. This may include the Minor’s name, age or date of birth, contact details, Your Content, activity records and, for a Minor who is a Creator or other talent, the creator and talent information in Section 2.1(h). We also keep the Parent’s details and consent record. We ask everyone involved in a project not to request or share a Minor’s personal information beyond what the project needs.

10.4 How we use and share it. We use and disclose a Minor’s personal information only to carry out that project, program or engagement, to keep the Services secure, and to comply with law. We do not sell a Minor’s personal information or use it for marketing or targeted advertising, and we do not publish a Minor’s name, image, likeness or voice without the Parent’s written permission.

10.5 Parent’s rights. A Parent may at any time ask us to (a) show the Parent what personal information we hold about the Minor, (b) correct or delete it, or (c) withdraw the Parent’s consent and end the Minor’s access, by contacting us at marvens@saintandcitizen.com. We may verify the Parent’s identity and authority before acting. Withdrawing consent ends the Minor’s access to the Services. It does not affect any Underlying Agreement, anything done before the withdrawal, any rights already granted under an Underlying Agreement or release, or information we are required or permitted by law to keep.

10.6 Removing a Minor’s content. A Minor or Parent may ask us to remove content the Minor has posted to the Services. Removal does not guarantee complete erasure, since copies may remain in backups or with Project Participants who already received the content.

10.7 Reaching the age of majority. Once a Minor reaches the age of majority, that individual may exercise the rights in this policy directly.

11. YOUR RIGHTS AND CHOICES

11.1 Your rights. Depending on where you live, you may have the right to:

(a) know and access the personal information we hold about you and receive a copy;

(b) correct inaccurate information;

(c) delete your information;

(d) port your information to another service;

(e) object to or restrict certain processing;

(f) withdraw consent where we rely on consent;

(g) opt out of the sale of personal information, its sharing for cross-context behavioral advertising, targeted advertising, and profiling that produces legal or similarly significant effects (we do none of these); and

(h) not be discriminated or retaliated against for exercising your rights.

11.2 How to make a request. Email marvens@saintandcitizen.com. We will verify your request using information we already hold and may need to ask for more. You may use an authorized agent where the law allows, and we may ask for proof of the agent’s authority. We will respond within the time the law requires. Some rights have exceptions, for example where we must keep information to comply with law or to establish or defend legal claims, or where deletion would affect other people’s rights. We will tell you if an exception applies. Where the law gives you the right to appeal our decision, you may do so by replying to our response.

11.3 United States. Residents of certain states may have the rights listed above under their state’s law, to the extent those laws apply to us and to our relationship with you. In the preceding 12 months, we collected the categories of personal information described in Section 2 (identifiers, commercial information, internet or network activity, professional information, audio and visual content, and inferences drawn from business records) from the sources in Section 2, for the purposes in Sections 3 and 4, and disclosed them for business purposes to the recipients in Section 5. This includes sensitive personal information in the form of access credentials, tax identification numbers and financial account details, which we use only as stated in Section 2.4. We keep each category for the period described in Section 7. We have not sold personal information or shared it for cross-context behavioral advertising, and we do not knowingly sell or share the personal information of anyone under 16. We do not disclose personal information to third parties for their own direct marketing purposes.

11.4 United Kingdom and European Economic Area. Where United Kingdom or European Union data protection law applies, our legal bases for processing are:

(a) contract, to provide the Services and carry out our agreements with you or your organization;

(b) legitimate interests, to run our business and projects, maintain business relationships and records, keep the Services secure, improve them and use automated tools, where these interests are not overridden by your rights;

(c) legal obligation, to comply with law; and

(d) consent, where we ask for it, which you may withdraw at any time.

You also have the right to lodge a complaint with your local supervisory authority (in the United Kingdom, the Information Commissioner’s Office).

12. THIRD-PARTY SERVICES AND LINKS

The Services may link to, embed or integrate with third-party websites and services (for example, video, fonts, calendars and social media). Their handling of your information is governed by their own privacy policies, and we are not responsible for them.

13. CHANGES TO THIS POLICY

We may update this policy from time to time, including to reflect new features and services. We will post the updated version with a new version number and “Last Updated” date. If we make material changes, we will notify you, for example by email, by a notice in the Services, or by asking you to review the updated policy when you next sign in. Changes take effect when posted unless we say otherwise. If a new feature involves a materially different use of personal information, we will update this policy first and, where the law requires, ask for your consent or, for a Minor, the Parent’s consent.

14. CONTACT US

Saint & Citizen Ventures LLC

2125 Biscayne Blvd, FL 3-2016, Miami, FL 33137

Privacy questions and requests: marvens@saintandcitizen.com

APPENDIX: PRINCIPAL SERVICE PROVIDERS

This list is current as of October 5, 2026. It is provided for transparency and may change as the Services evolve.