Privacy Policy

1. Data we collect

• Account data — name, email address, password hash, account type (brand or creator), language and country.
• Profile data — avatar, bio, niches, audience location, rate card, portfolio links, company name and website.
• Connected social accounts — when you connect Instagram, TikTok, YouTube or another platform, we store your public handle, platform user ID, follower count, engagement metrics and access tokens issued by that platform.
• Deal data — campaign briefs, offers, messages exchanged in deal rooms, deliverables, contracts and signature metadata (timestamp, IP address, user agent).
• Payment data — invoice amounts, escrow status, and payout details you provide (bank or Wise account). We do not store full card numbers.
• Technical data — IP address, device and browser information, and usage logs used for security and abuse prevention.

2. Why we use it

• To create and operate your account and match brands with creators.
• To verify creator identity and audience statistics.
• To generate campaign briefs and contracts, and to run escrow and payouts.
• To send transactional email (new offers, messages, payment updates).
• To detect fraud, off-platform circumvention and abuse.
• To comply with legal, tax and accounting obligations.

Our legal bases are performance of a contract with you, our legitimate interest in operating a safe marketplace, your consent (for optional integrations and marketing), and legal obligation.

3. Social platform data

If you connect an Instagram, TikTok or YouTube account, we request only the permissions needed to confirm ownership of the account and read public profile and aggregate insight metrics. We never post on your behalf, never read private messages, and never sell platform data. Data obtained from these platforms is used solely to display your profile inside MusePact and to help brands evaluate you. You may disconnect an account at any time from your profile page, which deletes the stored tokens and metrics.

4. Sharing

We share personal data only with:

• The other party of a deal — a brand sees the creator's profile and agreed contact details once escrow is funded, and vice versa.
• Service providers — hosting and database infrastructure, email delivery, payment and payout processors, and AI providers used to draft briefs and contracts.
• Authorities — where required by law or to defend legal claims.

We do not sell personal data and we do not use it for third-party advertising.

5. Retention

Account and profile data are kept while your account is active. Deal, contract, invoice and payout records are kept for up to 7 years after completion to satisfy tax and dispute-resolution requirements. Social platform tokens and metrics are deleted immediately when you disconnect the account. Technical logs are kept up to 12 months.

6. Your rights

Depending on your country, you may request access, correction, deletion, portability or restriction of your personal data, and object to processing based on legitimate interest. Email dev@musepact.com and we will respond within 30 days. You can delete your account and associated data at any time — see Data Deletion.

7. Security

Data is encrypted in transit and at rest, access is restricted by row-level security policies, and contact details in chat are masked until a deal is funded. No system is perfectly secure; please use a strong, unique password.

8. International transfers & children

MusePact operates globally and data may be processed outside your country under appropriate safeguards. The service is not intended for anyone under 18, and we do not knowingly collect data from children.

9. Changes

We will post any update on this page and change the date above. Material changes will also be announced by email.