Draft: have a lawyer review before launch

Privacy policy

What postmonet collects, why, who sees it, and the choices you have. We collect what we need to run a marketplace and nothing to sell.

Last updated 21 October 2026.

What we collect

Account. Your email address, name, and whether you are a brand or a creator. If you sign in with Google or X, the identity details they share.
Brands. Company name and website, campaigns, briefs, offers and messages to creators, and billing details held by our payment partners (we do not store card numbers).
Creators. Your X handle, followers, account age, recent post counts and the views of your own recent posts, read through a read-only connection you authorise. Your profile (name, bio, niches, rates). Payout details: legal name, country, payout method and tax status. Bank and card details are held by the payout provider, not by us.
Posts. For a booking we record the post's identifier, time, whether it carries a paid label, and its public numbers. We store a fingerprint of the text, not the text.
Tracked links. Each click on a creator's link records the time, a country, a coarse network identifier and a one-way hash of the visitor's IP address. We do not store the raw IP address. A brand can also report signups to us so they can be attributed.
Technical. A session cookie to keep you signed in, and basic logs for security and debugging.

Why we use it

To run bookings: verify creators, hold and release payments, detect posts and check paid labels.
To show brands verified results, and to show creators their earnings.
To keep the platform safe: fraud and abuse checks, resolving disputes, and keeping an audit trail of decisions that move money.
To tell you what happened: in-app notifications and emails about offers, payments and disputes.
To meet legal duties, such as tax and anti-fraud obligations.

Who sees it

Brands see a creator's public profile, verified stats, rates and results from campaigns they book. They do not see payout details, tax information or your other posts. Impressions of a post are shown only if you chose to share them for that booking.
Creators see the brand name, website, brief and offer for campaigns they are invited to or apply for.
Public. Approved creators with a public profile appear in the directory and at their profile page. Campaign reports are visible only to people the brand shares the link with.
Service providers process data for us: hosting and database, email delivery, payment and payout providers, and subscription billing. They may only use it to provide their service.
We do not sell personal data and we do not build lead lists from the people who engage with a post.
We may disclose information where the law requires it or to protect people from fraud or harm.

X data

The X connection is read-only. We never post for you. You can disconnect X from your profile at any time; stored tokens are deleted and your verified marks are removed. We refresh or delete X data when X content is removed or when you ask us to.

How long we keep it

Account and booking records are kept while your account is open and for as long as we need them for accounting, disputes and legal duties. Financial records are kept for the period the law requires. Click records are kept with their campaign. You can ask us to delete your account; we will delete or anonymise what we are not required to keep.

Your choices

Access, correct or delete your information, or object to how we use it, by contacting us.
Choose whether your creator profile is public, and whether finished results appear on it.
Choose whether to share a post's impressions with a brand, per booking.
Turn off sign-in with a provider by signing in another way, or disconnect X at any time.

Security

Connections are encrypted. X tokens are stored encrypted. Access is limited by role and enforced in the database. Money movements are recorded in an append-only ledger. No system is perfectly secure; tell us if you find a problem.

Contact

See contact. This policy applies to postmonet as described in our terms.

What we collect

Account. Your email address, name, and whether you are a brand or a creator. If you sign in with Google or X, the identity details they share.

Brands. Company name and website, campaigns, briefs, offers and messages to creators, and billing details held by our payment partners (we do not store card numbers).

Creators. Your X handle, followers, account age, recent post counts and the views of your own recent posts, read through a read-only connection you authorise. Your profile (name, bio, niches, rates). Payout details: legal name, country, payout method and tax status. Bank and card details are held by the payout provider, not by us.

Posts. For a booking we record the post's identifier, time, whether it carries a paid label, and its public numbers. We store a fingerprint of the text, not the text.

Tracked links. Each click on a creator's link records the time, a country, a coarse network identifier and a one-way hash of the visitor's IP address. We do not store the raw IP address. A brand can also report signups to us so they can be attributed.

Technical. A session cookie to keep you signed in, and basic logs for security and debugging.

Why we use it

To run bookings: verify creators, hold and release payments, detect posts and check paid labels.

To show brands verified results, and to show creators their earnings.

To keep the platform safe: fraud and abuse checks, resolving disputes, and keeping an audit trail of decisions that move money.

To tell you what happened: in-app notifications and emails about offers, payments and disputes.

To meet legal duties, such as tax and anti-fraud obligations.

Who sees it

Brands see a creator's public profile, verified stats, rates and results from campaigns they book. They do not see payout details, tax information or your other posts. Impressions of a post are shown only if you chose to share them for that booking.

Creators see the brand name, website, brief and offer for campaigns they are invited to or apply for.

Public. Approved creators with a public profile appear in the directory and at their profile page. Campaign reports are visible only to people the brand shares the link with.

Service providers process data for us: hosting and database, email delivery, payment and payout providers, and subscription billing. They may only use it to provide their service.

We do not sell personal data and we do not build lead lists from the people who engage with a post.

We may disclose information where the law requires it or to protect people from fraud or harm.

How long we keep it

Your choices

Access, correct or delete your information, or object to how we use it, by contacting us.

Choose whether your creator profile is public, and whether finished results appear on it.

Choose whether to share a post's impressions with a brand, per booking.

Turn off sign-in with a provider by signing in another way, or disconnect X at any time.