Privacy Policy

When you create an account: your name, email address and password. The password is stored only as a cryptographic hash — we cannot read it, and nobody at Luvenex can tell you what it is.

On your public profile: whatever you choose to publish — handle, photo, bio, city, niches, languages, portfolio, reels and linked social accounts. This is public by design: it is how brands find you.

When you do business: the campaigns, gigs, offers, bookings, messages and reviews you take part in, and the files you upload as work.

When you withdraw money: your identity document (CNIC front and back) and bank details. We are required to verify who is withdrawing before we send money.

When you pay by bank transfer: the receipt you upload, so we can match the transfer to your account.

Automatically: basic technical information such as your IP address, needed to keep accounts secure and to apply rate limits.

We never see or store your full card number. If you pay by card, that happens on the payment provider’s own system and we receive only confirmation that a payment succeeded, with its amount and reference.

We do not buy personal data from anyone, and we do not sell yours. We do not use your messages or your uploaded work to train anything.

To run the service you asked for: showing your profile to brands, letting you apply for work, holding and releasing payments, and letting the two sides of a booking talk to each other. To meet legal obligations around identity verification before paying money out. And to investigate fraud or a complaint when one is raised.

Public: your profile, portfolio, reels and reviews. Anyone on the internet can see these, including people without an account. We may also use them to showcase Luvenex — on the homepage, in the app, in featured sections and in our own promotion — as set out in clause 9 of the Terms & Conditions.

The other side of a booking: your name, your public profile and the messages and files exchanged on that booking.

Nobody but you and our staff: your email address, your identity documents, your bank details and your payment receipts. A brand you apply to is not given your email address — it sees your public handle and can message you on the platform.

Identity documents are stored separately from everything public and have no web address at all. They can only be opened by you or by a member of our team reviewing your verification.

You can hide your profile from search and from the public directory at any time in your privacy settings.

We share personal data with only three kinds of organisation, and only what each needs:

• Payment providers, to take a payment and confirm it. They receive the amount and a reference, not your profile or your messages.
• Our hosting and storage providers, which store the site and the files uploaded to it on our behalf and under contract.
• A bank, regulator or court, where we are legally required to, or where it is necessary to investigate fraud.

We do not share your data with advertisers or data brokers.

Our database and the files you upload are hosted with providers whose servers may be outside Pakistan, including in the Asia-Pacific region. Wherever it sits, it remains under our control and subject to this policy.

Connecting an Instagram professional account is optional, and nothing on Luvenex requires it. Luvenex never asks for your Instagram password: you authorise us on Instagram's own screen, and Instagram gives us an access token.

While an account is connected we store its Instagram account id, username, the follower and post counts Instagram reports, which permissions you granted, and the access token itself, which is encrypted. When you attach one of your published posts to a collaboration, we read the statistics Instagram provides for that post — reach, views, likes, comments, saves and shares, where available — and show them to the brand on that collaboration only.

We do not read your direct messages, your private content, or any post you have not attached to a collaboration. We do not use anything from your Instagram account for advertising, and we do not sell it.

You can disconnect at any time from your profile, under Social Accounts. Disconnecting deletes the stored authorisation immediately. To remove Luvenex from Instagram as well, open Instagram and go to Settings and privacy, then Apps and websites, and remove it there. Deleting your Luvenex account removes the connection and everything stored with it. To have it removed without closing your account, write to inquiry@luvenex.com and we will act within thirty days.

Your account data is kept while your account exists. Records of completed bookings and the payments behind them are kept for seven years after completion, because tax and financial record-keeping require it — this applies even after an account is closed.

Identity documents are kept for as long as required for verification and the record-keeping above, and are deleted when that period ends.

You can ask for a copy of the personal data we hold about you, ask us to correct anything wrong, hide your profile from public view, or delete your account.

On deletion we remove your profile, your uploads and your public content. We keep the minimum financial record of completed bookings described above, because we are not permitted to delete those. We will tell you exactly what was kept.

Write to inquiry@luvenex.com and we will respond within thirty days.

Traffic to the site is encrypted. Passwords are hashed. Identity documents and payment receipts are held in private storage that is not reachable by any public address and is served only after checking who is asking. Access by our team is limited to the people who need it to do the job in front of them.

No system is perfect. If a breach ever affects your data, we will tell you and the relevant authority without delay.

We use cookies and similar browser storage to keep you signed in and to remember preferences such as your theme. We do not use advertising cookies. If analytics are enabled, they are used only to understand which pages are used, never to identify you personally.

Luvenex is not for anyone under 18. We do not knowingly collect data from children, and we delete any account we find belongs to one.

If we change this policy we will update the date at the top, and tell account holders directly if the change is significant.

Luvenex is operated by Tech Souls — see the Ownership Statement. Privacy questions go to inquiry@luvenex.com or +92 309 8987636.