Privacy Policy
Last updated: August 11, 2026
PromoteIt ("we", "us") is operated by Einar Skau (Sweden). This Privacy Policy explains what personal data we collect through the PromoteIt website and iOS app, why we use it, how we share it, and your choices. By using the Service you acknowledge this policy. See also our Terms of Service.
1. Who we are
Data controller: Einar Skau trading as PromoteIt. Contact: einar.skau420@gmail.com. Website: https://promoteit.app.
2. Data we collect
- Account: email, name, role (creator or brand), password hash (if you use password login), company name when provided.
- Sign-in providers: if you use Google Sign-In or Sign in with Apple, we receive identifiers and basic profile data those providers share with us (e.g. email, name; Apple may provide a private relay email).
- Creator profile: TikTok username, public profile fields we fetch to validate the account (e.g. display name, avatar URL, follower counts when available), niche/region/about when you add them, and Trust Score–related activity metrics.
- Marketplace activity: campaigns, applications, deliverable TikTok URLs, public video preview metadata (e.g. caption, engagement stats from TikTok oEmbed/public pages), chat messages, reports, blocks, approval/rejection notes.
- Uploaded media: cover images and audio (or similar campaign assets) that brands upload for campaigns; we store and serve these to operate the marketplace.
- Payments: Stripe customer and Connect account IDs, escrow/payout amounts and status, wallet balance. We do not store full card numbers. Stripe processes cards and bank payout details.
- Devices & notifications: push notification device tokens (APNs), and basic technical logs needed for security and reliability (e.g. IP/user-agent on API requests).
- Support: messages you send to einar.skau420@gmail.com or via promoteit.app/contact.
We do not use third-party advertising trackers or App Tracking Transparency cross-app advertising identifiers in the iOS app.
3. Why we use data
- Provide and operate the marketplace (campaigns, review, chat, wallet, payouts).
- Authenticate you and secure accounts.
- Validate TikTok usernames and show public preview information for submitted videos.
- Send transactional communications (password reset, important account email) and push notifications about applications, reviews, chat, campaigns, and payouts when you allow notifications.
- Prevent fraud, abuse, and spam; handle reports and blocks.
- Meet legal, tax, and accounting obligations.
- Improve reliability and customer support.
Legal bases (where GDPR/UK GDPR applies) include: performance of a contract, legitimate interests (security, product improvement), consent (e.g. optional notifications where required), and legal obligation.
4. Sharing
We share personal data only as needed to run the Service:
- Other users: brands and creators see profile and campaign information needed to complete a deal (e.g. name/handle, briefs, submitted URLs, chat, uploaded campaign media).
- Processors: Stripe (payments), email delivery (e.g. Resend), hosting/database providers (e.g. Render), Apple Push Notification service, and similar vendors under appropriate agreements.
- Law: when required by law, regulation, or valid legal process, or to protect rights, safety, and the Service.
We do not sell personal data and we do not share it for cross-context behavioral advertising.
5. International transfers
We may process data in the EU/EEA, the United States, and other countries where our vendors operate. Where required, we use appropriate safeguards (such as standard contractual clauses) for transfers.
6. Retention
We keep data while your account is active and as needed to provide the Service. After account deletion, we remove or anonymize personal data we control, except records we must keep for legal, tax, accounting, or fraud-prevention purposes (for example payment ledgers), which we retain only as long as required.
7. Your rights & choices
- Access / export / correction: email einar.skau420@gmail.com.
- Delete account: in the PromoteIt iOS app under Profile or Payments → Delete account. Creators must withdraw wallet balance and finish or leave open campaigns first; brands must settle live campaigns first. You can also email us to request deletion.
- Notifications: you can disable push notifications in iOS Settings; transactional email (e.g. password reset) may still be sent when necessary.
- Where GDPR applies you may also object, restrict processing, or lodge a complaint with your local supervisory authority (in Sweden: Integritetsskyddsmyndigheten / IMY).
- If you are a California resident, you may have rights under the CCPA/CPRA to know, delete, and opt out of “sale”/“sharing” of personal information. We do not sell personal information. Contact us to exercise applicable rights.
8. Security
We use industry-standard measures (encryption in transit, hashed passwords, access controls). No method of transmission or storage is 100% secure.
9. Children
PromoteIt is not directed at anyone under 18. Do not create an account if you are under 18. If we learn we have collected data from a minor, we will delete it.
10. Cookies & similar tech
The website may use cookies or local storage for authentication and basic preferences. The mobile app uses local storage for session tokens and similar operational needs. We do not use third-party advertising cookies on the core product pages.
11. Changes
We may update this policy and will post the new version with an updated date. Material changes may also be noted in-app or by email when practical.
12. Contact
Privacy questions: einar.skau420@gmail.com · Contact form.