Privacy Policy

Last updated: August 25, 2026

Nephesh Media LLC ("Nephesh Media," "we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website nepheshmedia.com (the "Site"), use our services, enroll in our courses, or submit an application to join our talent roster.

By accessing or using the Site, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Site.

1. Information We Collect

1.1 Personal Information You Provide

We may collect personal information that you voluntarily provide to us when you:

• Fill out our contact form (name, email, message)
• Submit a talent application (name, email, phone number, date of birth, city, state, gender, photos, social media handles, portfolio links)
• Create an account or enroll in our Unleashed UGC course (name, email, payment information)
• Subscribe to our newsletter (email address)
• Contact us via email or social media
• Engage us as a marketing client (name, company name(s), email, phone number, billing and plan information, and project or contract details, which we collect and store in our client management system in order to deliver services to you)

1.2 Information Collected Automatically

When you visit the Site, we may automatically collect certain information, including:

• Usage Data: Pages visited, time spent on pages, referring website, browser type, and device type (mobile, tablet, or desktop)
• Session Data: A randomly generated session identifier stored in your browser's session storage to understand browsing patterns
• Analytics Data: We use Google Analytics and a custom analytics system to understand how visitors use our Site. This includes page views, traffic sources, and device information
• Cookies and Local Storage: We use cookies and browser storage technologies to remember your preferences and track anonymous visit data. See our Cookie Policy (Section 7) for details

1.3 Payment Information

We process payments through third-party payment processors (Stripe and PayPal). We do not store your credit card number, bank account information, or other financial data on our servers. Payment processors handle this information under their own privacy policies.

1.4 Contract and Electronic Signature Data

If you sign a service agreement or other contract with us electronically, we collect and store the contract content, your typed or drawn signature (which may be rendered and saved as an image), your name as entered at signing, and the date and time of signature. This information is used to create and maintain a record of the executed agreement and is retained for as long as necessary to document and enforce that agreement, and as required by law.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve our services, including course access, client portal, and talent roster
• Communication: To respond to your inquiries, send order confirmations, and provide customer support
• Talent Management: To review talent applications, match talent with brand opportunities, and manage our roster
• Marketing: To send newsletters, promotional materials, and updates about our services (only with your consent)
• Analytics: To understand how visitors use our Site so we can improve the user experience
• Legal Compliance: To comply with applicable laws, regulations, and legal processes

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: We use third-party services to operate our business, including:
  • Google Analytics (website analytics)
  • Firebase / Google Cloud (authentication, database, file storage)
  • Formspree (form submission processing)
  • Stripe (payment processing)
  • PayPal (payment processing)
  • Calendly (appointment scheduling)
• Brand Partners: If you are an approved talent on our roster, we may share your public profile information (name, photos, category, social media handles) with potential brand partners for collaboration opportunities
• Legal Requirements: We may disclose your information if required by law, court order, or governmental authority
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction

3.1 Service Providers We Currently Use

We share personal information with the following categories of service providers, who process it only on our instructions and for the purposes described in this Policy:

• Google LLC (Firebase and Google Cloud) — website hosting, user authentication, database and file storage, and serverless functions
• Google Analytics — website analytics and traffic measurement (measurement ID G-R5R3QJ8WWV), loaded only after you accept analytics cookies
• Stripe, Inc. and PayPal Holdings, Inc. — payment processing for course enrollment and client invoices
• Twilio SendGrid and standard SMTP email delivery — transactional and marketing email
• Formspree — processing of contact and application form submissions
• Calendly — scheduling of consultations and calls
• Google Fonts — delivery of typefaces used on the Site

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

4. Data Retention

• Account Data: We retain your account information for as long as your account is active or as needed to provide services
• Talent Applications: We retain talent application data for up to 3 years after the last interaction, or until you request deletion
• Analytics Data: Anonymous analytics data is retained for up to 26 months
• Contact Form Submissions: Retained for up to 2 years
• Course Enrollment Data: Retained for the duration of your enrollment plus 3 years for record-keeping
• Client and Contract Data: Retained for the duration of our engagement plus 7 years afterward, consistent with standard business recordkeeping and tax requirements

5. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: You have the right to request a copy of the personal information we hold about you
• Correction: You have the right to request that we correct inaccurate or incomplete information
• Deletion: You have the right to request that we delete your personal information, subject to certain legal exceptions
• Opt-Out: You may opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails or contacting us directly
• Data Portability: You have the right to request your data in a structured, machine-readable format
• Restrict Processing: You have the right to request that we restrict the processing of your personal information in certain circumstances

To exercise any of these rights, please contact us at info@nepheshmedia.com. We will respond to your request within 30 days.

6. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you
• Right to Delete: You may request that we delete personal information we have collected from you
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
• Do Not Sell: We do not sell your personal information to third parties

To submit a CCPA request, email us at info@nepheshmedia.com with the subject line "CCPA Request."

Under the California Privacy Rights Act (CPRA), you also have:

• Right to Correct: You may request that we correct inaccurate personal information we hold about you
• Right to Limit Use of Sensitive Personal Information: We do not use or disclose sensitive personal information for purposes other than those permitted without the right to limit
• Right to Opt Out of Sharing: We do not share personal information for cross-context behavioral advertising
• Authorized Agents: You may designate an authorized agent to submit a request on your behalf. We may require written proof of authorization and verification of your identity

We will confirm receipt of a verifiable request within 10 business days and respond within 45 calendar days, with one 45-day extension where reasonably necessary. We will not discriminate against you for exercising any of these rights.

7. Cookie Policy

Our Site uses cookies and similar browser storage technologies (collectively, "cookies") to make the Site work, remember your preferences, and understand how visitors use the Site. This section explains what we use and why.

7.1 Essential Cookies

These are necessary for the Site to function properly, including authentication session cookies, security tokens, and your saved cookie consent choice (nm_cookie_consent). Essential cookies do not track you across other websites. You cannot opt out of essential cookies, as the Site will not function correctly without them.

7.2 Analytics Cookies

These are only set if you click "Accept" on our cookie banner. If you click "Decline," these are not set and no analytics data is collected for your visit.

• Google Analytics: We use Google Analytics to collect anonymous usage data. Google Analytics sets cookies (e.g., _ga, _gid) to distinguish users and sessions. Google's Privacy Policy
• Custom Analytics: We use a lightweight custom analytics system that records page views, traffic sources, and device types using Firebase Firestore. This system uses browser sessionStorage (session_id) and localStorage (visited flag) to track anonymous session data

7.3 Managing Cookies

When you first visit our Site, you will see a cookie consent banner allowing you to accept or decline non-essential (analytics) cookies. Your choice is saved in your browser and applied on future visits. You can change your preferences at any time by clearing your browser's cookies and local storage for this Site and revisiting it, which will show the consent banner again. You may also configure your browser settings to block cookies generally, though this may affect Site functionality.

7.4 Third-Party Cookies

Some cookies on our Site are set by third-party service providers we use (such as Google Analytics), not by Nephesh Media directly. We do not control how these third parties use their own cookies, and their use of cookies is governed by their own privacy policies, not this Privacy Policy. We are not responsible or liable for the cookie practices of third-party services.

8. Data Security

We implement reasonable administrative, technical, and physical security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encrypted data transmission (HTTPS/SSL)
• Firebase Authentication for account security
• Access controls limiting data access to authorized personnel
• Regular review of data collection and storage practices

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.

9. Children's Privacy

Our Site and services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at info@nepheshmedia.com and we will promptly delete such information.

10. Third-Party Links

Our Site may contain links to third-party websites, social media platforms, and services. We are not responsible for the privacy practices or content of those third-party sites. We encourage you to review the privacy policies of any third-party site you visit.

11. International Data Transfers

Our services are hosted in the United States. If you access our Site from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

12. Marketing Communications

If you subscribe to our newsletter, download a resource, apply to our talent roster, or become a client, we may send you marketing email about our services, content, and offers.

• Every marketing email includes an unsubscribe link, and we honor opt-out requests promptly
• You may also opt out at any time by emailing info@nepheshmedia.com with the subject line "Unsubscribe"
• Opting out of marketing email does not stop transactional messages — receipts, course access, contract documents, security notices, and replies to your enquiries
• We do not sell or rent our email list

13. Legal Bases for Processing (EEA and UK)

If you are located in the European Economic Area or the United Kingdom, we process personal information only where we have a lawful basis to do so:

• Contract: to provide services you have requested, including course access, client engagements, and talent roster participation
• Legitimate interests: to operate, secure, and improve the Site, to understand how it is used, and to communicate with people who have engaged with our business — balanced against your rights and interests
• Consent: for analytics cookies, marketing email where consent is required, and any use of your image or likeness in our marketing. You may withdraw consent at any time
• Legal obligation: to meet tax, accounting, and other legal requirements

14. Your Regional Privacy Rights

14.1 European Economic Area and United Kingdom

You have the right to access, correct, delete, restrict, or object to our processing of your personal information; the right to data portability; the right to withdraw consent; and the right to lodge a complaint with your local supervisory authority. Nephesh Media LLC is the controller of the personal information described in this Policy.

14.2 Other United States Privacy Laws

Residents of states with comprehensive privacy laws — including Florida, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and Montana — may have rights to confirm whether we process their personal data, to access and obtain a copy of it, to correct inaccuracies, to request deletion, and to opt out of targeted advertising, the sale of personal data, or profiling with legal effects. We do not sell personal data, engage in targeted advertising, or conduct profiling that produces legal or similarly significant effects.

Under the Florida Digital Bill of Rights, Florida residents may exercise these rights by contacting us at the address below. If we decline a request, you may appeal that decision by replying to our response, and we will inform you of the outcome within 60 days.

14.3 Japan

If you are located in Japan, you may request disclosure, correction, suspension of use, or deletion of your retained personal data under the Act on the Protection of Personal Information.

14.4 How to Exercise Your Rights

Email info@nepheshmedia.com with the subject line "Privacy Request" and tell us which right you wish to exercise. We will verify your identity before acting, respond within the period required by the law that applies to you, and will not charge a fee except where a request is manifestly unfounded or excessive.

15. Do Not Track and Global Privacy Control

Our Site does not respond to "Do Not Track" browser signals, as no common standard for them has been adopted. We do honor the Global Privacy Control (GPC) signal where your browser transmits it, and we treat it as a valid opt-out of any sale or sharing of personal information.

16. Images, Likeness, and Sensitive Information

Because we work in marketing and content production, we may process photographs, video, audio, and other material that includes your image, voice, or likeness — for example when you apply to our talent roster, appear in content we produce for a client, or take part in a shoot.

• We use images and likeness only as permitted by a signed agreement, release, or your explicit consent
• We do not use facial recognition, and we do not collect or process biometric identifiers
• We do not generate AI likenesses of a real, identifiable person without that person's written permission
• You may withdraw consent for future use of your likeness at any time by emailing us. Withdrawal does not apply to material already published or licensed to a client, which we may be unable to recall

We do not intentionally collect sensitive personal information such as government identification numbers, precise geolocation, health data, racial or ethnic origin, religious beliefs, or financial account credentials. Where a client engagement requires any such information, it is handled under a separate written agreement.

17. Artificial Intelligence and Automated Processing

We use artificial intelligence tools in parts of our work, including the creation of AI-generated models and marketing content. In connection with that:

• We do not use client materials, talent applications, course submissions, or personal information to train publicly available AI models
• Where we build a custom AI model for a client, it is created from material the client has the right to provide, and it is used only for that client's stated purposes
• We advocate for clear disclosure when AI-generated imagery of a person is published, and we do not present AI-generated content as a photograph of a real event or a real endorsement
• We do not make decisions producing legal or similarly significant effects about you through solely automated means

18. Data Breach Notification

If we become aware of a security incident that compromises your personal information, we will notify affected individuals and any regulator required to be informed, without undue delay and within the timeframes required by applicable law. Our notice will describe what happened, the categories of information involved, the steps we are taking, and what you can do in response.

19. Accessibility

We aim to make this Policy and our Site usable by everyone. If you need this Policy in an alternative format, or encounter an accessibility barrier anywhere on the Site, contact us at info@nepheshmedia.com and we will work to provide the information you need.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of the Site after any changes constitutes your acceptance of the updated Privacy Policy.

21. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Nephesh Media LLC
• Email: info@nepheshmedia.com
• Website: www.nepheshmedia.com
• Location: Miami, Florida, United States