Privacy Policy
Last Updated: Oct 28, 2026
This Privacy Policy explains how Popow collects, uses, shares, and retains personal information when people use our websites, applications, creator marketplace, campaign services, creator recruitment services, or AI-app connectors (including the Popow MCP plugin), or communicate with us.
This policy applies to creators, prospective creators who may not have a Popow account, personnel of brands and agencies ("Brand Users" in our Terms of Service), website visitors, and people who connect an AI app to Popow.
1. Information We Collect
Information You Provide:
- Name, email address, phone number, account information, and communications with us
- TikTok username, profile information, and account identifiers received through a connected account
- Role, organization, job title, and organization membership for brand and agency personnel
- Campaign briefs, product information, brand guidelines, applications, approvals, and campaign communications
- Content you submit for campaigns, including videos, images, text, and links
- Payout account identifiers and status, internal reward and settlement records, tax information when required, and purchase or shipping evidence when a campaign requires it
- Payment information for wallet top-ups. Card and Stripe Link payment details are collected and processed by Stripe through Stripe Checkout; Popow does not store full card numbers and receives payment records such as amount, status, and invoice information
- Files, reference content, and prompts that brand and agency personnel upload or enter to plan Campaigns, including through AI-assisted planning tools
- Through our AI-app connectors: tool arguments such as search requests, video links, filters, and related context sent by your AI app, together with your authenticated Popow account information. These arguments can contain text from your conversation.
Information Collected Automatically:
- IP address, browser type, device information, operating system, and approximate location derived from IP
- Usage data, such as pages or screens viewed, clicks, referring pages, and features used
- Cookies, local storage, and similar technologies
- Error, performance, security, and support diagnostics
We use product analytics, masked-input session replay, error monitoring, performance measurement, and TikTok Pixel for creator-acquisition measurement and advertising where enabled.
Information We Obtain from Other Sources:
To invite creators to brand campaigns, we collect contact information — primarily email addresses, and where available a TikTok handle, display name, and related public profile information — about creators who may or may not have a Popow account. We obtain it from:
- Publicly available profile information: contact details a creator has published in a public social media profile, such as a TikTok bio
- Third-party providers: creator contact information supplied by providers of creator analytics and contact data
- Our own correspondence: an address a creator used to email us, or that appeared in a message we sent or received
Creators do not opt in to this collection, and we do not separately notify each creator that we hold their contact information. We keep this information and may use it to invite the same creator to campaigns for more than one brand. Creators can opt out or ask us to delete their information at any time, as described in Section 7.
We also receive public TikTok profiles, posts, captions, engagement information, images, thumbnails, and videos from TikTok and approved data providers for creator discovery, campaign planning, and analysis.
2. How We Use Your Information
We use personal information to:
- Provide accounts, organizations, campaign services, creator recruitment, and support
- Match creators with brand campaigns and administer applications, submissions, approvals, reporting, rewards, and payouts
- Invite creators to campaigns, including on behalf of brands using our creator recruitment service
- Communicate about accounts, campaigns, support requests, and recruitment messages
- Draft support and outreach emails with AI-assisted tools
- Analyze public social content, creator profiles, and campaign content for discovery, matching, screening, reporting, and campaign planning
- Process payments, rewards, reimbursements, tax records, and transaction records where applicable
- Measure use, diagnose errors, secure the service, prevent fraud, and improve our services
- Provide organization workspaces, wallets, billing, and invoices to brands and agencies
- Generate AI-assisted campaign plans and briefs from materials brand and agency personnel submit
- Return creative references and video information to connected AI apps, process video-collection requests where available, and diagnose and improve connector performance
3. Automated and AI-Assisted Processing
When Popow drafts a response to a creator support or outreach email, our AI-assisted email drafting service sends the sender's name and email address, subject, message body, relevant thread history, and matched account email, username, account-setup status, recruitment source, recruitment status, and related notes through Vercel AI Gateway to an AI model provider. The fields included depend on whether the message is a support or recruitment email. When an operator asks the tool to revise an email, the current subject and body — including personal information entered in the draft — may also be sent.
For creator and content analysis, Google Gemini API may receive public TikTok display names, handles, biographies, captions, profile images, thumbnails, videos, and audio or transcripts. RunPod processes TikTok videos for video analysis. These analysis workflows do not send Popow account email, phone number, shipping address, payout information, or tax information.
When brand and agency personnel use our AI-assisted campaign planning tools, the prompts, files, product information, and other materials they submit are sent through Vercel AI Gateway to OpenAI to generate campaign plans and briefs.
AI-app connectors (Popow MCP plugin). For reference searches, we send the search intent and relevant date or engagement preferences supplied by your AI app to TwelveLabs Jockey, which searches stored public-video metadata and analysis. Popow returns the results to your connected AI app. That app processes the conversation and tool results under its own privacy terms. Interactive video results may load TikTok embeds and YouTube thumbnail images from those providers.
We record connector tool inputs and output summaries in our Phoenix trace system for diagnostics and product improvement. These records include the authenticated Popow user ID, search and retrieval details, and available conversation or call identifiers and host/browser metadata. We mask recognized credentials such as passwords and access tokens; this does not anonymize ordinary user text or personal information included in tool arguments. These records follow the application and analysis records category in Section 5. Do not include sensitive personal information in reference requests.
4. How We Share Your Information
We may share personal information with:
- Brands and agencies: A creator's profile, application, submitted content, approval status, campaign communications, and performance are shared with the brand or authorized agency participating in that campaign. Where a brand uses our creator recruitment service, we provide creator contact information for the specific recruitment it is running. Brands are restricted by our Terms of Service and any agreement with Popow from using it for another purpose, adding it to their general marketing databases, or transferring it except to an email provider used for that recruitment.
- Creators: Campaign information that a brand or agency publishes, including the brand or product name, brief, product information, and compensation, is shown to creators who view or join that campaign.
- Social platforms: TikTok processes information when you connect a TikTok account or when we use its profile, campaign, advertising, or measurement features.
- Payment and reward providers: PayPal processes current creator payouts. Tremendous retains information from historical gift-card transactions, although new exchanges are disabled. Stripe processes wallet top-ups, refunds, and invoices for brands and agencies.
- Service providers: Providers that perform hosting, authentication, database, storage, analytics, error monitoring, communications, email operations, forms, creator-data collection, campaign operations, and AI-assisted processing for Popow.
- Legal requirements: Government authorities or other recipients when required by law, regulation, or valid legal process, or when reasonably necessary to protect users, Popow, or others.
- Business transfers: A buyer, investor, adviser, or other participant in a merger, financing, acquisition, restructuring, or sale of assets, subject to appropriate restrictions.
5. Data Retention
Our current retention rules are summarized below. Where no fixed period is listed, Popow does not currently apply a time-based automatic deletion schedule to that category.
| Information | Current retention rule |
|---|---|
| Account, organization, campaign, submission, agreement, payout, tax, and transaction records | No fixed time-based deletion schedule. We retain these records while needed to provide the service, administer campaigns and transactions, resolve disputes, prevent fraud, respond to requests, and meet legal obligations. |
| Creator recruitment contacts held by Popow | No fixed time-based deletion schedule. We remove identifiable copies we control in response to an applicable deletion request and retain a minimal suppression record to prevent further recruitment messages. |
| Creator recruitment contacts delivered to a brand | The brand must delete the contact information within 30 days after the recruitment engagement ends, except for a minimal suppression record needed to honor an opt-out. |
| Seeding shipping information | The current collection notice states that this information is deleted within 30 days after delivery confirmation. Automatic enforcement of this period is not currently confirmed. |
| Product analytics | Session replays are retained for 30 days. General product analytics events do not currently have enforced time-based deletion; the project has an 84-month setting that is not enforced. |
| Error and hosting diagnostics | Error events are retained for 90 days, runtime logs for 1 day, and web analytics reports for 12 months. The web analytics visitor-identification hash is discarded after 24 hours. |
| Gemini processing | Popow deletes uploaded Gemini files after processing; Google otherwise deletes Files API uploads after 48 hours. Gemini API developer logs are retained for 55 days, and Popow has no separate long-term Gemini dataset. Google separately keeps abuse-monitoring logs for a limited period that it does not publicly quantify. |
| AI-assisted email messages, drafts, session history, and trace records | No fixed time-based deletion schedule. Vercel AI Gateway deletes its copy of prompt and output content after inference, but this does not delete Popow's email, draft, session, or trace records. Source-disk snapshots for the trace system are retained for 30 days. |
| Files, reference content, and prompts submitted by brand and agency personnel (other than Campaign briefs as published, which follow the "Account, organization, campaign, submission, agreement, payout, tax, and transaction records" row) | No fixed time-based deletion schedule. We retain these materials while the organization's workspace is active and as needed for the purposes described above. |
| Campaign-planning prompts and files sent through Vercel AI Gateway to OpenAI | OpenAI may retain them under its terms. Vercel AI Gateway deletes its copy after inference. Popow's copies follow the "Files, reference content, and prompts submitted by brand and agency personnel" row. |
| Other application and analysis files | Application database backups are retained for 7 days. General application storage and analysis records, including connector usage and Phoenix trace records, do not have a common time-based deletion schedule. Video sent to RunPod is retained only during job processing. |
6. Your Rights
You may request access to, correction of, or deletion of your personal information by contacting us at help@popow.ai.
7. Creator Recruitment Emails
We use the contact information described in Section 1 to email creators about brand campaign opportunities. Depending on the campaign, we send these emails ourselves, or the brand running the campaign sends them from its own email account and sending domain.
Opting out. Every recruitment email includes an unsubscribe method. When you use it on an email we sent, we stop sending you recruitment emails. When a brand sent the email from its own account, that brand is required to stop and to tell us within five business days so that we stop as well. You can also email help@popow.ai at any time to stop recruitment emails.
Deleting your information. You do not need a Popow account to ask us to delete your contact information. Email help@popow.ai and we will delete the copies we hold and can identify. We cannot confirm deletion of copies a brand already received. Where our records show that a brand received your information, we will notify that brand of your request; under its agreement with us, the brand is required to delete it. If you have unsubscribed, we keep a minimal record — your email address and the fact that you objected — so that we do not contact you again. We do not use that record for anything else.
8. Security
We implement reasonable measures to protect your information. No method of transmission or storage is 100% secure.
9. Age Requirement
Popow is intended for users 18 years of age or older. We do not knowingly collect information from anyone under 18.
10. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes by posting the updated policy on our platform. If we hold your contact information but you do not have a Popow account, we may not be able to notify you directly; the current version of this policy is always available at popow.ai/privacy.