Privacy Policy

1. Introduction

DOTVIDEO LLC ("we," "us," or "our"), operating as promote.sh, respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, please do not access or use the Service.

2. Information We Collect

2.1 Information You Provide to Us

Account Information

• Name, email address, password
• Account type (Brand or Creator)
• Profile information (bio, profile picture, social media handles)
• Company information (for brand accounts)
• Payment information (processed and stored by Stripe Connect)
• Tax documentation (W-9 forms, collected and processed by Stripe Connect)

Campaign and Content Information

• Campaign descriptions, requirements, and media
• Creator applications and pitches
• Submitted content and files
• Messages exchanged between brands and creators
• Content usage rights specifications

Social Media Integration Data

• Social media account information when you connect accounts (TikTok, Instagram, YouTube, etc.)
• Audience metrics and engagement statistics
• Content performance data
• Follower demographics and analytics

2.2 Information We Collect Automatically

Usage Data

• IP address, browser type, and version
• Device information and operating system
• Pages visited, time spent on pages, and navigation paths
• Referral sources and exit pages
• Date and time of access
• Campaign views and interaction data

Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to collect information about your browsing activities. See our Cookie Policy for more details.

2.3 Information from Third Parties

• Social media platforms when you connect your accounts
• Stripe Connect for payment and tax information
• Authentication providers (if you use social login)
• Analytics providers (Google Analytics)
• Advertising platforms (Google Ads, Meta/Facebook Ads, LinkedIn Ads)

3. How We Use Your Information

We use your information for the following purposes:

3.1 Providing and Maintaining the Service

• Creating and managing your account
• Facilitating connections between brands and creators
• Processing campaign applications and submissions
• Enabling messaging and communication
• Processing payments and managing wallets
• Providing customer support
• Administering the automatic approval system for submissions

3.2 Improving and Personalizing the Service

• Analyzing usage patterns and trends
• Recommending relevant campaigns to creators
• Recommending suitable creators to brands
• Developing new features and functionality
• Conducting research and analytics
• Using automated systems for personalization (no fully automated decision-making affecting legal rights)

3.3 Communication

• Sending transactional emails (account updates, payment confirmations, submission approvals)
• Notifying you of campaign opportunities or applications
• Sending automatic approval notifications
• Sending marketing communications (with your consent)
• Responding to your inquiries and requests

3.4 Security and Legal Compliance

• Detecting and preventing fraud, abuse, and security threats
• Identifying fake followers and engagement manipulation
• Enforcing our Terms of Service
• Complying with legal obligations
• Resolving disputes
• Verifying identity and preventing money laundering

4. How We Share Your Information

We do not sell your personal data to third parties. We may share your information in the following circumstances:

4.1 With Other Users

• Your profile information is visible to other users as necessary for the Service
• Brands can view creator profiles, portfolios, metrics, and submitted content
• Creators can view brand profiles and campaign details
• Messages between brands and creators are visible to both parties

4.2 With Service Providers

We share information with third-party service providers who perform services on our behalf:

• Stripe Connect: Payment processing and tax documentation (https://stripe.com/privacy)
• Supabase: Database and authentication services
• Cloud storage providers: File hosting and delivery
• Email service providers: Transactional and marketing emails
• Google Analytics: Web analytics (https://policies.google.com/privacy)
• Customer support tools: Help desk and chat services

4.3 With Advertising Partners

We use advertising pixels and tracking for marketing purposes:

• Google Ads: Advertising and conversion tracking
• Meta/Facebook Ads: Social media advertising and retargeting
• LinkedIn Ads: B2B marketing and analytics

These partners may collect data about your browsing activity. See our Cookie Policy for more information and opt-out options.

4.4 For Legal Reasons

We may disclose your information if required to do so by law or in response to:

• Legal processes (subpoenas, court orders)
• Government or regulatory requests
• Enforcement of our Terms of Service
• Protection of our rights, property, or safety
• Investigation of fraud or security issues

4.5 Business Transfers

If DOTVIDEO LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.

4.6 With Your Consent

We may share your information for any other purpose with your explicit consent.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account data: Retained while your account is active
• Transaction records: Retained for 7 years for tax and accounting purposes
• Communications: Retained as long as necessary for dispute resolution
• Campaign and content data: Retained for the duration of campaigns plus 3 years
• Marketing data: Retained until you unsubscribe or request deletion

After account deletion, we will retain certain information as required by law (e.g., transaction records for tax purposes) or as necessary to resolve disputes and enforce our agreements. Personal data not subject to legal retention requirements will be deleted within 30 days of account closure. Data subject to legal retention will be securely stored with restricted access and deleted after the retention period expires.

6. Your Privacy Rights

6.1 General Rights

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a machine-readable format
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing of your personal information
• Withdraw Consent: Withdraw consent for data processing where consent is the legal basis

6.2 GDPR Rights (EU/EEA/UK Residents)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to lodge a complaint with a supervisory authority
• Right to be informed about data collection and use
• Right to erasure ("right to be forgotten")
• Right to data portability
• Right to object to automated decision-making (we do not use automated decision-making that produces legal effects)

Legal Basis for Processing (GDPR): We process your data based on:

• Contract Performance: Processing necessary to provide the Service
• Legitimate Interests: Fraud prevention, security, service improvement
• Consent: Marketing communications, optional features
• Legal Obligation: Tax compliance, legal requests

6.3 US State Privacy Rights

If you are a resident of California, Virginia, Colorado, Connecticut, Utah, Montana, Oregon, Texas, or Delaware, you have rights under applicable state privacy laws:

• Right to Know: Request disclosure of personal information we collect, use, and disclose
• Right to Access: Request a copy of your personal information
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate information
• Right to Data Portability: Receive your data in a portable, machine-readable format
• Right to Opt-Out: Opt-out of sale/sharing of personal information and targeted advertising
• Right to Non-Discrimination: Not be discriminated against for exercising your rights

Sale and Sharing of Personal Information: We share personal information with advertising partners (Google Ads, Meta/Facebook Ads, LinkedIn Ads) for targeted advertising purposes. Under some state laws, this may be considered a "sale" or "share" of personal information. You have the right to opt-out of this activity.

To exercise your opt-out right, you can:

• Enable Global Privacy Control (GPC) in your browser
• Update your cookie preferences in your account settings
• Contact us at privacy@promote.sh

6.4 Marketing Communications

You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in our emails
• Updating your notification preferences in your account settings
• Contacting us at contact@promote.sh

6.5 Exercising Your Rights

To exercise any of these rights, please contact us at contact@promote.sh or privacy@promote.sh. We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication and access controls
• Regular security assessments and audits
• Employee training on data protection
• Restricted access to personal information (need-to-know basis)
• Secure payment processing through PCI-compliant providers (Stripe)
• Fraud detection and prevention systems

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information using commercially acceptable means, we cannot guarantee absolute security.

8. International Data Transfers

Your information may be transferred to and maintained on servers located in the United States and other countries where data protection laws may differ from those in your country. By using the Service, you consent to the transfer of your information to the United States and other countries.

For EEA, UK, and Swiss residents: We ensure appropriate safeguards are in place for international transfers:

• Standard Contractual Clauses (2021 version) approved by the European Commission
• Data Processing Agreements with all processors handling EU data (Stripe, Supabase, Vercel)
• Technical and organizational security measures to protect transferred data
• Regular assessments of data transfer risks and safeguards

You may request a copy of the safeguards we have in place by contacting privacy@promote.sh.

9. Children's Privacy

The Service is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at contact@promote.sh, and we will delete such information.

10. Third-Party Links and Services

The Service may contain links to third-party websites and services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

When you connect social media accounts or use third-party integrations, those services may collect information according to their own privacy policies.

11. Automated Decision-Making

We use automated systems to help recommend campaigns to creators and creators to brands based on matching algorithms. However, we do not use fully automated decision-making that produces legal effects or similarly significantly affects you without human involvement.

The automatic approval system for submissions (after 3 days) is a time-based automation that does not involve profiling or decision-making algorithms.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated Privacy Policy on this page
• Updating the "Last Updated" date
• Sending an email notification for significant changes
• Displaying a prominent notice on the Service

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy. For material changes that require consent under applicable law, we will obtain your consent before the changes take effect.

13. Global Privacy Control

We honor Global Privacy Control (GPC) browser signals as required by California, Colorado, Connecticut, and other state privacy laws. When you enable GPC, we will:

• Opt you out of the sale or sharing of personal information
• Opt you out of targeted advertising
• Disable non-essential tracking cookies and pixels

To enable GPC, visit globalprivacycontrol.org for compatible browsers and extensions.

Note: We do not respond to "Do Not Track" browser signals, as there is no industry standard for handling them. However, we do honor GPC signals as required by law.

14. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, or if you wish to exercise your privacy rights, please contact us at:

For EU/EEA residents: If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.