Privacy Policy
Last Updated: Aug 20, 2026
This Privacy Policy explains how Popow collects, uses, shares, and retains personal information when people use our websites, applications, creator marketplace, campaign services, or creator recruitment services, or communicate with us.
This policy applies to creators, prospective creators who may not have a Popow account, personnel of brands and agencies, and website visitors.
1. Information We Collect
Information You Provide:
- Name, email address, phone number, account information, and communications with us
- TikTok username, profile information, and account identifiers received through a connected account
- Role, organization, job title, and organization membership for brand and agency personnel
- Campaign briefs, product information, brand guidelines, applications, approvals, and campaign communications
- Content you submit for campaigns, including videos, images, text, and links
- Payout account identifiers and status, internal reward and settlement records, tax information when required, and purchase or shipping evidence when a campaign requires it
Information Collected Automatically:
- IP address, browser type, device information, operating system, and approximate location derived from IP
- Usage data, such as pages or screens viewed, clicks, referring pages, and features used
- Cookies, local storage, and similar technologies
- Error, performance, security, and support diagnostics
We use product analytics, masked-input session replay, error monitoring, performance measurement, and TikTok Pixel for creator-acquisition measurement and advertising where enabled.
Information We Obtain from Other Sources:
To invite creators to brand campaigns, we collect contact information — primarily email addresses, and where available a TikTok handle, display name, and related public profile information — about creators who may or may not have a Popow account. We obtain it from:
- Publicly available profile information: contact details a creator has published in a public social media profile, such as a TikTok bio
- Third-party providers: creator contact information supplied by providers of creator analytics and contact data
- Our own correspondence: an address a creator used to email us, or that appeared in a message we sent or received
Creators do not opt in to this collection, and we do not separately notify each creator that we hold their contact information. We keep this information and may use it to invite the same creator to campaigns for more than one brand. Creators can opt out or ask us to delete their information at any time, as described in Section 7.
We also receive public TikTok profiles, posts, captions, engagement information, images, thumbnails, and videos from TikTok and approved data providers for creator discovery, campaign planning, and analysis.
2. How We Use Your Information
We use personal information to:
- Provide accounts, organizations, campaign services, creator recruitment, and support
- Match creators with brand campaigns and administer applications, submissions, approvals, reporting, rewards, and payouts
- Invite creators to campaigns, including on behalf of brands using our creator recruitment service
- Communicate about accounts, campaigns, support requests, and recruitment messages
- Draft support and outreach emails with AI-assisted tools
- Analyze public social content, creator profiles, and campaign content for discovery, matching, screening, reporting, and campaign planning
- Process payments, rewards, reimbursements, tax records, and transaction records where applicable
- Measure use, diagnose errors, secure the service, prevent fraud, and improve our services
3. Automated and AI-Assisted Processing
When Popow drafts a response to a creator support or outreach email, our AI-assisted email drafting service sends the sender's name and email address, subject, message body, relevant thread history, and matched account email, username, account-setup status, recruitment source, recruitment status, and related notes through Vercel AI Gateway to an AI model provider. The fields included depend on whether the message is a support or recruitment email. When an operator asks the tool to revise an email, the current subject and body — including personal information entered in the draft — may also be sent.
For creator and content analysis, Google Gemini API may receive public TikTok display names, handles, biographies, captions, profile images, thumbnails, videos, and audio or transcripts. RunPod processes TikTok videos for video analysis. These analysis workflows do not send Popow account email, phone number, shipping address, payout information, or tax information.
4. How We Share Your Information
We may share personal information with:
- Brands and agencies: A creator's profile, application, submitted content, approval status, campaign communications, and performance are shared with the brand or authorized agency participating in that campaign. Where a brand uses our creator recruitment service, we provide creator contact information for the specific recruitment it is running. Brands are contractually restricted from using it for another purpose, adding it to their general marketing databases, or transferring it except to an email provider used for that recruitment.
- Social platforms: TikTok processes information when you connect a TikTok account or when we use its profile, campaign, advertising, or measurement features.
- Payment and reward providers: PayPal processes current creator payouts. Tremendous retains information from historical gift-card transactions, although new exchanges are disabled.
- Service providers: Providers that perform hosting, authentication, database, storage, analytics, error monitoring, communications, email operations, forms, creator-data collection, campaign operations, and AI-assisted processing for Popow.
- Legal requirements: Government authorities or other recipients when required by law, regulation, or valid legal process, or when reasonably necessary to protect users, Popow, or others.
- Business transfers: A buyer, investor, adviser, or other participant in a merger, financing, acquisition, restructuring, or sale of assets, subject to appropriate restrictions.
5. Data Retention
Our current retention rules are summarized below. Where no fixed period is listed, Popow does not currently apply a time-based automatic deletion schedule to that category.
| Information | Current retention rule |
|---|---|
| Account, organization, campaign, submission, agreement, payout, tax, and transaction records | No fixed time-based deletion schedule. We retain these records while needed to provide the service, administer campaigns and transactions, resolve disputes, prevent fraud, respond to requests, and meet legal obligations. |
| Creator recruitment contacts held by Popow | No fixed time-based deletion schedule. We remove identifiable copies we control in response to an applicable deletion request and retain a minimal suppression record to prevent further recruitment messages. |
| Creator recruitment contacts delivered to a brand | The brand must delete the contact information within 30 days after the recruitment engagement ends, except for a minimal suppression record needed to honor an opt-out. |
| Seeding shipping information | The current collection notice states that this information is deleted within 30 days after delivery confirmation. Automatic enforcement of this period is not currently confirmed. |
| Product analytics | Session replays are retained for 30 days. General product analytics events do not currently have enforced time-based deletion; the project has an 84-month setting that is not enforced. |
| Error and hosting diagnostics | Error events are retained for 90 days, runtime logs for 1 day, and web analytics reports for 12 months. The web analytics visitor-identification hash is discarded after 24 hours. |
| Gemini processing | Popow deletes uploaded Gemini files after processing; Google otherwise deletes Files API uploads after 48 hours. Gemini API developer logs are retained for 55 days, and Popow has no separate long-term Gemini dataset. Google separately keeps abuse-monitoring logs for a limited period that it does not publicly quantify. |
| AI-assisted email messages, drafts, session history, and trace records | No fixed time-based deletion schedule. Vercel AI Gateway deletes its copy of prompt and output content after inference, but this does not delete Popow's email, draft, session, or trace records. Source-disk snapshots for the trace system are retained for 30 days. |
| Other application and analysis files | Application database backups are retained for 7 days. General application storage and analysis records do not have a common time-based deletion schedule. Video sent to RunPod is retained only during job processing. |
6. Your Rights
You may request access to, correction of, or deletion of your personal information by contacting us at help@popow.ai.
7. Creator Recruitment Emails
We use the contact information described in Section 1 to email creators about brand campaign opportunities. Depending on the campaign, we send these emails ourselves, or the brand running the campaign sends them from its own email account and sending domain.
Opting out. Every recruitment email includes an unsubscribe method. When you use it on an email we sent, we stop sending you recruitment emails. When a brand sent the email from its own account, that brand is required to stop and to tell us within five business days so that we stop as well. You can also email help@popow.ai at any time to stop recruitment emails.
Deleting your information. You do not need a Popow account to ask us to delete your contact information. Email help@popow.ai and we will delete the copies we hold and can identify. We cannot confirm deletion of copies a brand already received. Where our records show that a brand received your information, we will notify that brand of your request; under its agreement with us, the brand is required to delete it. If you have unsubscribed, we keep a minimal record — your email address and the fact that you objected — so that we do not contact you again. We do not use that record for anything else.
8. Security
We implement reasonable measures to protect your information. No method of transmission or storage is 100% secure.
9. Age Requirement
Popow is intended for users 18 years of age or older. We do not knowingly collect information from anyone under 18.
10. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes by posting the updated policy on our platform. If we hold your contact information but you do not have a Popow account, we may not be able to notify you directly; the current version of this policy is always available at popow.ai/privacy.