Privacy Policy

Account data: email, username, display name, role, password (stored as a hash, never readable by us). Campaign data: briefs, submissions (post URLs), and the view counts platforms publicly report for those posts. Money data: earnings ledger entries, payout requests and the payout details you save (PayPal email, bank reference or wallet address). Ordinary server logs.

Insights screenshots you upload for photo campaigns. They can show your post's reach, audience and other accounts' names. They are stored privately, seen only by our staff and the services that check them, and never shown to brands or the public.

Promotions.Marketis an open marketplace with public community surfaces. Your username and display name, the campaigns you post in, your submissions' platforms and view counts (never an insights screenshot), and settled earnings totals appear on public profiles, leaderboards and activity feeds. Your email, payout details and account balance breakdown never do.

No advertising trackers, no third-party analytics cookies, no selling or renting data. The only cookies we set are the ones that keep you signed in. On video campaigns, the view data we process is what the platforms already display publicly.

To run the marketplace you asked us to run: verifying views, settling earnings, paying out, preventing fraud, and sending the transactional emails those events produce. Legal bases under UK GDPR: performance of contract, our legitimate interest in a fraud-free ledger, and legal obligations around money records.

Infrastructure processors only: Supabase (database, authentication and file storage, including insights screenshots), Vercel (hosting), Resend (transactional email), Stripe (payments, when card payment is active), view-count retrieval services (they receive the public post URL you submitted, never your account data), and Anthropic, which reads the figures on insights screenshots when that check is on. Each processes data only to provide their service to us.

Account data for the life of the account. The money ledger (earnings, payouts, view snapshots) is append-only and retained as our financial record, including after account closure. Ask us to close your account and we delete or anonymise what the ledger doesn't require. Insights screenshots are deleted 180 days after the campaign ends, unless a fraud case on the post is open.

UK GDPR rights apply: access, correction, deletion (subject to the ledger retention above), restriction, portability, and objection. Write to hello@promotions.market and we'll act on it; you can also complain to the ICO.

Material changes get posted here with a new effective date. This policy is governed by the laws of England and Wales.