Privacy Policy

Draft — last updated 28 August 2026

Formative Unites (“Formative”, “we”) operates a marketplace where brands and content creators find each other, agree paid campaigns, and complete that work. This policy explains what we collect, why, and what you can do about it.

1. Who this covers

Two kinds of account: creators, who publish content and are paid for it, and brands, who commission and pay for that content. Some sections apply to only one.

2. What we collect

Information you give us

• Account details: name, email address, password, and role.
• Creator profile: biography, niche, location, content rating, rate card, and portfolio.
• Brand profile: company name, industry, location, website, and campaign requirements.
• Campaign and deal records: briefs, offers, messages, contracts, and electronic signatures.
• Preferences you express in the product, including which creators or campaigns you accept or decline, and the reasons you give.

Information from social platforms you connect

When you connect an Instagram, TikTok, or Threads account, you authorise us through that platform’s own login. We never receive or store your social account password. With your authorisation we retrieve:

• Profile information: username, display name, profile picture, biography, and verification status.
• Performance metrics: follower count, engagement rate, views, likes, comments, and shares.
• Audience demographics, where the platform provides them. Instagram supplies age, gender, and city or country breakdowns for accounts above its minimum follower threshold. TikTok does not provide audience demographics to third parties at all.
• Your recent public posts, used to display your portfolio and to confirm that agreed campaign deliverables were published.

Where you have granted publishing permission, we also post content to your connected accounts on your behalf — but only content you created and a brand approved, and only at a time you selected or accepted.

Identity and payment information

• Identity verification is performed by ID.me. They verify you and tell us the result. We do not receive or store your government identification documents.
• Payments and escrow are processed by Stripe. Card and bank details go to Stripe directly. We store transaction records, amounts, and status — not full payment credentials.

Information collected automatically

• Usage data: pages viewed, actions taken, device and browser type, and approximate location from IP address.
• Campaign attribution: when someone clicks a tracked campaign link, we record the click and any resulting action on the brand’s site, so both sides can see what the campaign produced.

3. Why we use it

• To run the marketplace — build media kits, match creators to campaigns, carry deals from offer to payment.
• To keep numbers honest. Metrics shown on a media kit are pulled from the platforms rather than typed in by the account holder. That verification is the core of what we sell.
• To improve matching. Our matching engine learns from outcomes and from the preferences people express, including the reasons given when someone passes on a match.
• To publish approved content to your connected accounts, when you have authorised it.
• To handle money — fund escrow, release payment on verified delivery, and meet tax and accounting obligations.
• To keep the platform safe — prevent fraud, enforce our terms, and comply with the law.

We do not sell your personal information, and we do not use your social platform data for advertising.

4. What other people can see

• Your media kit is visible to brands on the platform, and to anyone with the link if you publish it publicly. It shows your verified metrics, portfolio, and rates.
• Brands you work with see your profile, your campaign performance, and your contact details for that deal.
• Creators you approach see your brand profile and campaign brief.
• Service providers who operate parts of the platform for us — hosting, payments, identity verification, error monitoring, customer support — access only what they need to do that job.
• Authorities, where the law requires it.

If a brand or creator account is managed by an agency, that is shown on the profile so the other side knows who they are dealing with.

5. How long we keep it

Account and profile data is kept while your account is open. Campaign, contract, and payment records are kept after that where tax, accounting, or legal obligations require it. Social metrics are retained as a historical record of campaign performance, since a completed campaign’s results have to stay verifiable.

6. Your choices

• Disconnect a social account at any time, in your settings or from the platform’s own app settings. We stop retrieving new data immediately and can no longer publish on your behalf.
• Access, correct, or delete your personal information, subject to records we must retain.
• Close your account. Your public media kit comes down.
• Depending on where you live, you may have additional rights — including data portability and the right to object to certain processing.

To make any of these requests, contact us at the address below.

7. Security

Access tokens for connected social accounts are stored encrypted and used only for the purposes described here. We use industry-standard measures to protect your information, though no system can be guaranteed completely secure.

8. Children

Formative is not intended for anyone under 18. We do not knowingly collect information from children. If we learn that we have, we will delete it.

9. Changes

We will update this policy as the platform develops and will change the date at the top when we do. Material changes will be communicated to account holders directly.

10. Contact

Questions about this policy or your data: privacy@formativeunites.us