Legal
Privacy Policy
Last updated: September 1, 2026
This Privacy Policy explains how Sherpa Agent Co., Ltd ("we," "us") collects, uses, stores, and shares personal data through Star KH (the "Platform"), a website that connects businesses ("Brands") with content creators and key opinion leaders ("Creators") in Cambodia for video-based marketing collaborations.
1. What We Collect
From Brands (via the Platform's inquiry form): company name, contact person's name, contact details (email/phone), a description of the project, number of videos needed, budget per video, desired platform(s) for posting, and, optionally, industry, preferred timing, and interest in secondary usage (e.g., using the Creator's video as a paid ad).
From Creators (collected off-platform, not through a public sign-up form): real name, contact details, submitted video files, gender, age range, category, self-reported follower/view counts, and rate information gathered during onboarding. Creators are recruited and onboarded directly by Sherpagent staff, not through a self-service registration flow on the Platform.
We do not use cookies, analytics scripts, or any tracking technology on the Platform as of this writing. If that changes, this Policy will be updated first.
2. How We Use This Data
Brand inquiry data is used to route the request to Sherpagent staff so a staff member can evaluate the budget and, where reasonable, begin mediating the deal with a Creator outside the Platform. Creator data is used to build the public-facing profile card shown to Brands (see Section 3 for what is and isn't shown), calculate the aggregated, non-individual price-range estimates displayed on the Platform, and allow Sherpagent staff to contact the Creator during mediation. We do not use Brand or Creator data for purposes unrelated to operating the matching service (e.g., we do not sell it to third parties for their own marketing).
3. What Is Shown Publicly vs. Kept Internal
Shown to Brands on the Platform: the Creator's video, category, gender, age range, platform presence, follower/view range, and an estimated price range calculated from aggregated data across similar Creators (never an individual Creator's real rate).
Never shown to Brands: the Creator's real name, social media account/handle, or any direct contact information. This information is retained internally by Sherpagent and is only used by Sherpagent staff to contact the Creator during deal mediation. Creator videos are re-hosted on our own storage specifically so that Brands cannot trace a video back to its original social media account.
4. How Long We Keep Data
Creator contact information is kept as long as Sherpagent continues to represent that Creator for potential deals. Brand inquiry data is kept as long as needed to process the inquiry and for Sherpagent's own business records (e.g., invoicing, dispute handling).
5. Third-Party Service Providers (Subprocessors)
Because the Platform is built on standard cloud infrastructure, the following third parties process data on Sherpagent's behalf. None of them are given rights to use the data for their own purposes beyond providing their service to us.
| Provider | What it stores/processes | Data involved |
|---|---|---|
| Notion | Sherpagent's internal Creator database (source of truth) | Creator real name, contact info, rates, category, video files (before re-hosting) |
| Cloudflare (R2) | Re-hosted Creator videos, publicly accessible via URL | Creator video content (no real name/contact attached) |
| Vercel (Blob storage) | Cached, whitelisted Creator profile data served to the public site | Only the fields shown to Brands (Section 4), never real name/contact |
| Vercel | Website hosting | All traffic to the Platform |
| Slack | Internal notification when a Brand submits an inquiry | Brand inquiry form contents |
These providers may process or store data outside Cambodia (Notion, Cloudflare, Vercel, and Slack all operate global infrastructure). By using the Platform, Brands and Creators acknowledge this cross-border processing.
6. Data Security
Cambodia's Law on Electronic Commerce (2019) requires any business that electronically stores personal data to maintain reasonable measures against loss, unauthorized access, use, alteration, or leaks. We rely on our providers' built-in security features (access controls, encryption in transit) to help meet this obligation.
7. Your Rights / Requests
Cambodia does not yet have a comprehensive, enacted personal data protection law as of this writing, so there is currently no statutory right of access, correction, or deletion that automatically applies to the Platform. That said, a Brand or Creator may contact us (Section 9) to request a copy of, correction to, or deletion of their data, and we will respond on a case-by-case basis.
8. Changes to This Policy
We may update this Policy from time to time. Continued use of the Platform after an update constitutes acceptance of the revised Policy.
9. Contact
Sherpa Agent Co., Ltd
No. 234, 6th Floor, Zone A-2, Mao Tse Toung Blvd (245), Corner Street 193, Phum 2, Sangkat Tumnob Tuek, Khan Boeng Keng Kang, Phnom Penh, Cambodia
info@sherpagent.com