Privacy policy

Last updated: 2 October 2026

Who we are

Endorse is an influencer marketing agency in Kuwait City and part of Maqam Holdings. This policy covers our website, itsendorse.com, and Endorse Hub, the work platform our team uses on the web (hub.itsendorse.com) and in the Endorse Hub app for iPhone and Mac.

Questions or requests: contact@itsendorse.com.

This website

The website does not use tracking cookies, ads or analytics tools. The contact form opens your own email app, so we only receive what you choose to send us. Our server keeps standard technical logs, such as IP address and browser type, for a short time to keep the site secure.

Endorse Hub: our team

Endorse Hub is for Endorse staff only. There is no public sign-up: an admin creates each account. For each team member we keep:

• Name, work email and role.
• A password, stored only in scrambled (hashed) form.
• Each signed-in phone or Mac: its name, its language and, if you allow notifications, the token Apple gives us to send them.
• The work you do: tasks, updates, messages, reviews and uploaded files.

Endorse Hub: creators and clients

To run campaigns, the hub holds information about creators and clients: names, public social media profiles and numbers, contact details they share with us, contracts, and the content and results of campaigns. Bank details are stored encrypted and are visible only to the finance and admin roles. Clients and creators see only their own campaign pages through private links.

How we use it

We use this information only to run campaigns, to let the team sign in and work together, and to send work notifications. We do not sell personal data, and we do not use it for advertising.

Who helps us

A few service providers process data for us, and only for these tasks:

• Our servers, managed by Prismic Media (a Maqam Holdings company), host the website and the hub.
• Apple delivers push notifications and the TestFlight test versions of the app.
• Anthropic (Claude) reads screenshots and search requests when a team member uses an AI feature. It receives only that screenshot or request.
• ScrapeCreators supplies public numbers from social media profiles.

Keeping and deleting data

Team members can delete their account at any time: in the app, open More and tap Delete my account; on the website, open My account. This removes your name, email, password and signed-in devices. Work records, such as tasks and campaign history, stay for the company's records without your name.

Creators, clients and anyone else can ask us to see, correct or delete their data by writing to contact@itsendorse.com. Some records, such as signed contracts and payment records, may be kept as long as the law requires.

Security

All traffic uses HTTPS. Passwords are hashed, bank details are encrypted, and each phone has its own login that you or an admin can sign out from the website. We keep daily backups on our server and an encrypted copy on a second server.

Changes

If we change this policy, we update this page and the date at the top.