Privacy policy.

The Audience Engine provides creator campaign services and reporting tools for artists, managers, labels, clients, and approved creators.

For privacy questions, contact us through the contact page or at david@theaudienceengine.co.uk.

We may collect your name, email address, account role, login status, campaign access, contact form details, enquiry details, and messages you send to us.

For creators, we may collect creator profile details, offer status, submitted post links, approved campaign posts, creator handles, profile images, follower counts, and post performance metrics.

For clients, we may collect campaign access details, dashboard activity, campaign reports, and contact details needed to manage the relationship.

If a creator chooses to connect TikTok, we use TikTok Login Kit to request permission to connect the creator account to The Audience Engine for campaign reporting.

Depending on the permissions granted, we may receive or process TikTok account identifiers, username, display name, avatar, profile link, verification status, follower count, following count, likes count, video count, and public video metrics for submitted campaign posts.

When a creator submits a TikTok post URL for an accepted campaign offer, we may use the connected account access to retrieve reporting fields for that post, such as title, cover image, posted date, views, likes, comments, and shares.

We do not use TikTok access to post content, manage a TikTok account, access private videos, or use creator data outside creator-authorised campaign reporting.

Some campaign reports may include public audio usage or social platform data from third-party data providers. This is used to show campaign-level reporting, such as current audio uses and daily movement.

Availability and accuracy can depend on the relevant social platform and the third-party provider.

We collect data when you submit a form, request access, accept an invite, sign in, use the dashboard, accept or reject an offer, submit a post link, connect a platform account, or communicate with us.

We also collect technical data from our hosting, authentication, email, database, and analytics infrastructure so the service can operate securely.

We use personal data to respond to enquiries, manage invite-only accounts, provide dashboard access, verify creator identity, manage creator offers, process post submissions, build campaign reports, send service emails, protect the platform, and improve the service.

We may also use personal data to keep records of agreed campaign scope, account access, approvals, and operational decisions.

We process personal data where it is needed to provide requested services, manage account access, perform agreed campaign work, or take steps before entering a contract.

We may also process data for our legitimate interests, including campaign management, reporting, platform security, service improvement, and business administration.

Where a creator connects TikTok or another platform account, that connection is based on the creator's authorisation through the relevant platform flow. The creator can ask us to disconnect or remove stored platform data where appropriate.

Campaign data may be visible to authorised admins, assigned clients, and relevant creators depending on account role and campaign access.

We use trusted service providers for hosting, database storage, authentication, email delivery, domain email, platform integrations, and public social data. These may include services such as Supabase, Vercel, Resend, Google Workspace, TikTok, and SocialCrawl.

We may also share data if required by law, to protect the service, to enforce our terms, or to deal with security, fraud, or legal issues.

Some service providers may process data outside the United Kingdom or European Economic Area. Where this happens, we rely on the provider's safeguards and contractual protections where required by law.

We keep personal data only for as long as reasonably needed for the reason it was collected, including account management, campaign delivery, reporting, legal, accounting, and security purposes.

Campaign reports and historic campaign records may be retained after a campaign ends so clients can access reporting and we can keep accurate business records.

If an account is deleted, some campaign or reporting data may be retained where required for legitimate business records, legal obligations, or to preserve campaign reporting integrity.

We use reasonable technical and organisational measures to protect personal data, including role-based access, invite-only accounts, protected server-side secrets, and authentication controls.

No online service can be guaranteed completely secure. You should keep your login details private and tell us if you believe your account has been compromised.

Depending on your location and the circumstances, you may have rights to access, correct, delete, restrict, object to processing, or receive a copy of your personal data.

You may also be able to withdraw a platform connection or ask us to remove stored platform data where we no longer need it for campaign reporting or legal records.

If you are in the UK, you can raise concerns with the Information Commissioner's Office if you are not satisfied with how we handle your data.

We do not currently use analytics or marketing cookies.

Logged-in account areas may use essential session cookies or similar technology where needed for authentication, security, and basic platform functionality.

We may update this privacy policy as the service changes or as legal requirements develop. The latest version will be available on this page.