Privacy Policy

1. Information We Collect

We collect the following categories of information:

• Account data: name, email, password, and account role (creator or brand).
• Creator profile data: display name, handle, bio, location, languages, content categories, and rate card.
• Connected social account data: when you connect Instagram or TikTok, we receive your public profile details and aggregate metrics (follower count, engagement rate, audience demographics) through the official platform APIs. We never receive your social account password.
• Brand data: company name, contact details, and campaign briefs you submit.
• Usage data: technical information such as IP address, device, and pages visited.

2. How We Use Your Information

• To create and manage your account.
• To verify creator metrics and match creators with relevant brand campaigns.
• To present aggregated, anonymized creator data to brands. Brands never see individual creator names, handles, or profiles unless a campaign is agreed.
• To send transactional emails (confirmation, status updates, proposals).
• To operate, secure, and improve the Service.

3. Social Platform Data (Instagram & TikTok)

When you connect a social account, we access only the permissions you authorize through Meta (Instagram) and TikTok's official login flows. We store an access token to refresh your metrics and the profile statistics returned by the platform. We do not post on your behalf, send messages, or access private content. You can disconnect at any time, which revokes our access and deletes the stored token.

4. How We Share Information

We do not sell your personal information. We share data only:

• In aggregated, anonymized form with brands evaluating the creator pool.
• With your explicit consent when a specific campaign match is made.
• With service providers (hosting, email delivery) under confidentiality obligations.
• When required by law.

5. Data Retention & Deletion

We retain your data while your account is active. You may request deletion of your account and associated data at any time by emailing info@blocpack.com. Disconnecting a social account deletes the related token and cached metrics.

6. Security

We use industry-standard measures including encrypted transport (HTTPS), row-level database security, and encrypted storage of access tokens. No method of transmission is 100% secure, but we work to protect your information.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data, and to withdraw consent. Contact us to exercise these rights.

8. Contact

Questions about this policy? Email info@blocpack.com.