Privacy Notice

1. Introduction & Scope

Welcome to StreamClick ("we," "our," or "us"). We are committed to protecting your personal data and respecting your privacy. This Privacy Notice explains how we collect, use, disclose, and safeguard your information when you use our platform, website, and services (collectively, the "Services").

This policy applies to all users, including Advertisers (brands) and Creators (influencers). By accessing or using our Services, you acknowledge that you have read this Privacy Notice.

2. Data Controller

For the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws, the Data Controller is:

3. Personal Data We Collect

We collect data to provide our marketplace services, process payments, and ensure platform security.

A. Data You Provide Directly

• Identity Data: Name, email address, profile picture, bio, website URL.
• Account Credentials: Encrypted passwords (if email signup used) or OAuth tokens.
• Financial Data: Stripe Connect ID, transaction history, payout preferences. (Note: We do not store full credit card numbers; these are handled directly by Stripe).
• Creator Profile: Niche keywords, content preferences, and self-reported demographics.

B. Data Collected Automatically

• Technical Data: IP address, browser type, device information, operating system.
• Usage Data: Login timestamps, pages visited, campaigns viewed or joined.
• Security Logs: Audit logs of critical actions (e.g., withdrawals, settings changes) for fraud prevention.

C. Data from Third Parties (YouTube API)

If you connect your YouTube channel, we access data via the YouTube Data API Services. This includes:

• Channel statistics (subscriber count, view count, video count).
• Public video metadata (titles, descriptions, tags, duration) to verify campaign compliance.
• We do NOT access private messages or non-public videos unless you explicitly submit an unlisted video for review.

By using our YouTube integration, you agree to be bound by the YouTube Terms of Service and acknowledge the Google Privacy Policy. You can revoke our access at any time via the Google Security Settings page.

4. How We Use Your Data

We use your data for the following legal bases:

5. Data Sharing & Disclosure

We do not sell your personal data. We share data only with:

• Service Providers: Cloud hosting (AWS/Azure), payment processors (Stripe), email services (SendGrid/AWS SES).
• Counterparties:
  • Advertisers can see the channel name and basic stats of Creators who join their campaigns.
  • Creators can see the brand name and campaign details of Advertisers.
• Legal Authorities: If required by law, court order, or to protect our rights and safety.

6. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements.

• Active Accounts: Indefinitely, until you request deletion.
• Transaction Records: 7 years (for tax and audit purposes).
• Inactive Accounts: We may archive or delete accounts inactive for over 24 months.

7. Your Rights

Under GDPR and CCPA, you have the right to:

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate data.
• Erasure: Request deletion of your data ("Right to be Forgotten"), subject to legal retention requirements.
• Portability: Receive your data in a structured, machine-readable format.
• Withdraw Consent: Revoke OAuth permissions or marketing consent at any time.

To exercise these rights, contact us at [email protected].

8. Security

We implement industry-standard security measures, including encryption (SSL/TLS), secure database storage, and regular security audits. However, no method of transmission over the internet is 100% secure.

9. International Transfers

Your data may be transferred to and processed in countries outside your residence (e.g., the United States). We ensure appropriate safeguards (such as Standard Contractual Clauses) are in place for such transfers.