Privacy Policy

Last updated: 4 November 2026

1. Who is responsible for your data

[Company name] (company number [Company number], registered office [Registered office address]) is the controller of your personal data under the UK GDPR and the Data Protection Act 2018. Contact us about anything in this policy at [contact email].

2. What we collect

Account details: your email address and password. Passwords are stored only in scrambled (hashed) form.
Your agreement: when you signed up, which version of our terms you accepted, and that you confirmed you are 18 or older.
Your email choice: whether you asked for emails about new campaigns and product updates, and when.
Linked accounts: the platform and handle of each social account you link, your verification code, and the account ID the platform shows. When you press Confirm we read your public bio once to look for the code; we don’t store the bio.
Posts: links to the posts you submit, their public view counts over time, and whether we approved them.
Payments: the PayPal email you give us and a record of payments to you.
Agency and client logins: email address, role, and which clients you work with.
Technical data: IP address and browser information recorded by our hosting provider to run and protect the site.

3. Why we use it, and our legal basis

Running your account and campaigns, and paying you: to perform our contract with you.
Checking that linked accounts are yours and preventing fake views: our legitimate interest in keeping campaigns fair and paying only for genuine views.
Reporting results to the campaign’s client: our legitimate interest in showing clients what their campaign achieved. Clients see your handle, post links and views, never your email or payout details.
Keeping payment and accounting records: to meet our legal obligations, including UK tax law.
Keeping the site secure: our legitimate interest in protecting the service and its users.
Emails about your account (confirming your email, post approvals, payments, changes to our terms, security notices): to perform our contract with you. These are part of the service, so they continue while you have an account.
Emails about new campaigns and product updates: only if you ticked the box when you signed up (your consent). You can withdraw it at any time in your account settings, with the unsubscribe link in any of these emails, or by emailing [contact email].

You need to give us your email, password and payout details to use the site and get paid. We don’t make decisions about you based solely on automated processing.

4. Who we share it with

Clients whose campaigns you join: your handle, post links and view counts.
Vercel Inc., which hosts the website (United States).
Supabase, which runs our database and sign-in (data stored in Frankfurt, Germany).
Resend, a US company that sends our emails, from Ireland.
Apify, which reads public TikTok and Instagram profile and post data for us.
Google, through the YouTube Data API, to read public YouTube channel and video data.
PayPal, when we send you a payment.
Authorities, when the law requires it.

We don’t sell your personal data, and we don’t use it for advertising.

5. Transfers outside the UK

Some of these providers process data outside the UK, including in the European Union and the United States. Where the law requires it, we rely on UK adequacy regulations or safeguards approved under UK law, such as the International Data Transfer Agreement or Addendum, or the UK Extension to the EU–US Data Privacy Framework.

6. How long we keep it

We keep your account data while your account is open. When it closes, we delete or anonymise it within 90 days, except payment and accounting records, which we keep for 6 years to meet UK tax rules, and anything we need to deal with a dispute or suspected fraud.

If you delete your account in your settings, we remove your email straight away and stop tracking your posts. If we still owe you money, we keep your PayPal email so we can pay you. Posts we already approved stay in campaign reports, because they are part of the results clients paid for.

7. Your rights

You can change your email and payment details, or delete your account, in your account settings. You can also ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to you or another organisation in a reusable format. Email [contact email]; we will reply within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk.

8. Cookies

We only use cookies that are strictly necessary to keep you signed in and to keep the site secure. We don’t use advertising or analytics cookies, so we don’t ask for cookie consent.

9. Children

The site is only for people aged 18 or older. If we learn that someone under 18 has signed up, we will close the account.

10. Changes

If we change this policy in a significant way, we will tell you by email or on the site. The date at the top shows the latest version.