Promoza Privacy Policy

Last updated: August 11, 2026

What we collect, how connected-account data and tokens are handled, and how to disconnect or delete your data.

1. Scope

This Privacy Policy explains what information Promoza ("we", "us") collects when you use the Promoza website and creator dashboard, why we collect it, who processes it for us, and the choices you have. It applies to the Promoza service only.
Promoza is independent. We are not affiliated with, endorsed by, or partnered with TikTok, Meta, Instagram, Google or YouTube. Those platforms have their own terms and privacy policies, and they may change or revoke API access at any time.

2. Information we collect

  • Account and profile information: email address, display name, password credentials handled by our authentication provider, and settings you choose.
  • Connected-platform information: the platform account identifier, username/handle, and basic public profile details returned when you authorize a connection.
  • OAuth access and refresh tokens issued by TikTok, Instagram or YouTube so we can read the permitted data you approved.
  • Submitted post URLs you paste into the dashboard.
  • Public post metadata such as caption, thumbnail, publish time, and engagement or view counts.
  • Periodic view snapshots — timestamped readings of publicly reported view counts used to calculate earnings.
  • Campaign activity: which brands you post for, submission status, and review outcomes.
  • Earnings and payout records, including balances, approvals, adjustments and payout requests.
  • Device, log and security information such as IP address, browser/user-agent, timestamps, and error or abuse signals.
  • Support communications you send us, including messages to support@promoza.net.

3. How we use information

  • Authenticating you and keeping your account secure.
  • Connecting and maintaining your social-platform authorizations.
  • Publishing actions only after you have reviewed and approved them.
  • Tracking post performance and calculating verified views.
  • Detecting and preventing fraud, inauthentic engagement and abuse.
  • Administering earnings, reviews, adjustments and payouts.
  • Providing customer support and responding to your requests.
  • Protecting the security and integrity of our systems.
  • Meeting legal, tax and record-keeping obligations.
  • Understanding and improving how the Service works.

4. Passwords and tokens

Promoza does not receive or store your social-platform passwords. Connections use each platform's own OAuth screen, so your credentials stay with the platform.
The access and refresh tokens a platform issues to us are stored server-side with access restricted to our backend systems, and they are not intentionally exposed to other users of the Service. Tokens are used only for the permissions you approved, and they stop being usable when you disconnect or when the platform revokes them.

5. Service providers and third parties

  • Supabase and Lovable, for hosting, database, authentication and application infrastructure.
  • TikTok, Meta and Google APIs, for the connected-account and post data you authorized.
  • Payment processors, only if and when payouts are configured — no payment processor receives your data before that.
These providers process data on our behalf under their own terms. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We may disclose information if required by law, to enforce our Terms, or to protect our users and systems.

6. Retention, disconnection and deletion

We keep information for as long as your account is active and as long as needed for the purposes above. You can disconnect any platform at any time, which revokes our stored authorization and stops future authorized API access — including future view snapshots.
Disconnecting does not automatically erase everything already recorded: some submission, earnings, payout and audit records may be retained where necessary for fraud prevention, tax, dispute resolution, security or other legal requirements. You can request deletion of your account and associated personal data by emailing support@promoza.net, and we will act on it subject to those retention requirements.

7. Security

We use access controls, encrypted connections, row-level database permissions and server-side handling of sensitive values to protect your data. No online service can promise absolute security, so we do not claim our measures are perfect. Please use a strong, unique password and contact us if you notice anything suspicious.

8. Where data is processed

Promoza operates from the United States, and our infrastructure providers may process or store data in the United States and other countries. If you use the Service from outside the United States, your information may be transferred across borders and handled under this Policy.

9. Children and teens

The Service is not directed to children under 13 and we do not knowingly collect their personal information. If you are under 18, you need permission from a parent or legal guardian to use the Service, and guardian involvement may be required before a payout. If you believe a child under 13 has given us information, email support@promoza.net and we will delete it.

10. Your choices and rights

  • Access, update or correct your profile information in the dashboard.
  • Disconnect a social platform at any time from your Accounts page.
  • Request a copy, correction or deletion of your personal data by email.
  • Withdraw a connection authorization without closing your Promoza account.
Depending on where you live, you may have additional rights under local privacy law — such as rights to access, correct, delete, port your data, or object to certain processing. Email support@promoza.net and we will respond as required by the law that applies to you. We will not discriminate against you for exercising these rights.

11. Cookies and local storage

We use cookies and browser local storage for essential purposes: keeping you signed in, remembering interface preferences, and protecting against abuse. We may use privacy-respecting, aggregate analytics to understand which pages and features are used so we can improve them. We do not use advertising trackers to profile you across other websites. You can clear or block storage in your browser, though signing in may then not work.

12. Changes and contact

We may update this Policy as the Service changes. We will update the "Last updated" date above and give notice in the app for material changes. Questions, requests or privacy concerns: support@promoza.net.