Privacy Policy

1. What we collect

• Account details you give us: name, username, email address, profile photo.
• Connected account data: the account's name and handle on each platform, its follower count, and the platform's own identifier for it.
• Submissions: the post link, the platform's permanent post ID, the caption, and the campaign you submitted to.
• Performance data for those posts: views, likes, comments, shares, and — where the platform reports it — average watch time and the broad markets the views came from.
• Financial records: what each post earned, what was paid out, when, and to which payout account.
• Device and usage data needed to keep the app working, secure and free of fraud.

We collect performance data only for posts you have actually submitted to a campaign. Connecting an account does not give us a view of everything you have ever posted, and we do not ask for scopes that would.

2. Videos you upload for us to publish

Somar is not a video host. When you hand us a file so we can post it to your accounts, that file goes into temporary object storage and stays there only as long as publishing takes.

• We do not keep a copy after publishing.
• We do not use your footage to train models.
• We do not license it to the brand beyond the usage rights that campaign's brief sets out.
• If publishing fails on every platform, the file is deleted too — a video nobody will post is a video nobody should be holding.

If you submit a link to a post you have already published, we never download the video at all. We store the link, the platform's post ID, and the metrics we are given about it.

3. Connecting a social account

Connecting is an OAuth grant you give on the platform's own screen. We never ask for, see or store your password, and nothing in Somar logs into your accounts. Everything we publish goes through the platform's own publishing API — TikTok's Content Posting API, the Instagram and Facebook Graph APIs, the YouTube Data API, and X's API — using the permission you granted.

• We request the narrowest scopes the features need: publish a post, and read metrics for posts submitted to a campaign.
• We can only post when you ask us to. One post per account, per submission. There is no background posting.
• Access tokens are held server-side, encrypted, and are never sent to the app on your phone.
• You can revoke the grant on the platform, or disconnect in Settings, at any time. We stop that day.

Disconnecting stops metrics updating for posts already submitted, which may freeze what they earn. We say so in the app before you do it.

4. How we verify views

Payouts are made on verified views, not on the raw number a platform reports. This matters to your privacy as well as your income, so it is set out here rather than buried in a help article.

Screening uses only data the platform gives us about your submitted post: watch time, the shape of its engagement, how fast the views arrived, and the broad markets they came from. We do not profile you, we do not buy third-party data about your audience, and we do not look at posts you have not submitted.

• Every deduction is itemised on the submission, with the reading behind it.
• You can dispute any deduction, and a person will look at it.
• Brands see the verified total they are paying on. They do not see which individual checks flagged your post.

5. Automated decisions on your work

Brands can set a campaign to check submissions against its requirements automatically. Where that happens, the decision affects whether you get paid, so you are entitled to know how it was made and to contest it.

• We show you every requirement, whether it was met, and what the check actually saw.
• Any automated rejection can be escalated to a person, from the submission itself.
• Where a brand has chosen manual review, nothing is scored automatically and no model gets a vote.

This is your right under Article 22 of the GDPR and the equivalent provisions elsewhere. We would build it this way regardless.

6. Who sees what

We use processors, not advertisers: Supabase (database and authentication), Cloudflare (storage and delivery) and Stripe (payments and payout compliance). They act on our instructions and may not use your data for their own purposes.

7. How long we keep it

8. Your rights

• Access and export. Everything we hold on you, from Settings, as a file.
• Correction. Fix anything wrong, in the app or by emailing us.
• Deletion. Delete your account and we remove personal data within 30 days, keeping only the financial records we are legally required to hold.
• Objection and restriction. Ask us to stop a particular use, including automated review of your submissions.
• Complaint. To the Office of the Australian Information Commissioner, or your local supervisory authority if you are in the UK or the EU.

9. Security

• Everything in transit is TLS. Everything at rest is encrypted.
• Every table is behind row-level security, so a bug in one screen cannot expose another account's rows.
• Platform access tokens are held in a separate secret store, reachable only by the service that publishes on your behalf.
• We never hold your card number. Stripe does.

10. Changes

If we change anything that affects what we collect, how earnings are calculated, or who can see your data, we will tell you in the app before it takes effect — not by quietly editing this page and changing the date at the top.