Privacy Policy

1. Data we collect

• Account data — name, email address, password hash, account type (brand or creator), language and country.
• Profile data — avatar, bio, niches, audience location, rate card, portfolio links, company name and website.
• Connected social accounts — when you connect Instagram, TikTok, YouTube or another platform, we store your public handle, platform user ID, follower count, engagement metrics and access tokens issued by that platform.
• Deal data — campaign briefs, offers, messages exchanged in deal rooms, deliverables, contracts and signature metadata (timestamp, IP address, user agent).
• Payment data — invoice amounts, payment status, and payout details you provide (bank or Wise account). We do not store full card numbers.
• Technical data — IP address, device and browser information, and usage logs used for security and abuse prevention.

2. Why we use it

• To create and operate your account and match brands with creators.
• To verify creator identity and audience statistics.
• To generate campaign briefs and contracts, and to run payments and payouts.
• To send transactional email (new offers, messages, payment updates).
• To detect fraud, off-platform circumvention and abuse.
• To comply with legal, tax and accounting obligations.

Our legal bases are performance of a contract with you, our legitimate interest in operating a safe marketplace, your consent (for optional integrations and marketing), and legal obligation.

3. Social platform data

If you connect an Instagram, TikTok or YouTube account, we request only the permissions needed to confirm ownership of the account and read public profile and aggregate insight metrics. We never post on your behalf, never read private messages, and never sell platform data. Data obtained from these platforms is used solely to display your profile inside MusePact and to help brands evaluate you. You may disconnect an account at any time from your profile page, which deletes the stored tokens and metrics.

3a. Google user data (YouTube)

Connecting a YouTube channel is optional and available only to creator accounts. When you choose to connect, you sign in with Google and grant MusePact the single read-only scope https://www.googleapis.com/auth/youtube.readonly.

• What we read — your channel ID, channel title and handle, channel avatar, subscriber count, total view count, video count, and the public titles, thumbnails and statistics (views, likes, comments) of your most recent uploads.
• Why — to verify that the channel really belongs to you and to show verified audience metrics on your MusePact creator profile so brands can evaluate you before funding a deal.
• What we never do — we never upload, edit, delete or publish anything on your channel, never access private videos or messages, never share your Google user data with third parties other than the infrastructure providers strictly required to operate MusePact (hosting and database), never use it for advertising or to train generalised AI models, and never sell it.
• Retention and deletion — access tokens and metrics are stored only while the channel is connected. Disconnecting the channel on your MusePact profile deletes the stored tokens and metrics immediately, and deleting your MusePact account deletes them together with the account.
• Revoking access — you can revoke MusePact's access at any time at https://myaccount.google.com/permissions.

MusePact's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. By connecting a YouTube channel you also agree to the YouTube Terms of Service, and Google's privacy practices are described in the Google Privacy Policy.

4. Sharing

We share personal data only with:

• The other party of a deal — a brand sees the creator's profile and agreed contact details once the payment is protected, and vice versa.
• Service providers — hosting and database infrastructure, email delivery, payment and payout processors, and AI providers used to draft briefs and contracts.
• Authorities — where required by law or to defend legal claims.

We do not sell personal data and we do not use it for third-party advertising.

5. Retention

Account and profile data are kept while your account is active. Deal, contract, invoice and payout records are kept for up to 7 years after completion to satisfy tax and dispute-resolution requirements. Social platform tokens and metrics are deleted immediately when you disconnect the account. Technical logs are kept up to 12 months.

6. Your rights

Depending on your country, you may request access, correction, deletion, portability or restriction of your personal data, and object to processing based on legitimate interest. Email support@musepact.com and we will respond within 30 days. You can delete your account and associated data at any time — see Data Deletion.

7. Security

Data is encrypted in transit and at rest, access is restricted by row-level security policies, and contact details in chat are masked until a deal is funded. No system is perfectly secure; please use a strong, unique password.

8. International transfers & children

MusePact operates globally and data may be processed outside your country under appropriate safeguards. The service is not intended for anyone under 18, and we do not knowingly collect data from children.

9. Changes

We will post any update on this page and change the date above. Material changes will also be announced by email.