Privacy Policy

viewd is a creator-marketing platform operated by Cooksat LLC (“viewd”, “we”, “us”). It connects UGC creators with brands and, for accounts that choose to connect them, provides first-party analytics for social media accounts on Instagram, Facebook, TikTok, and YouTube.

This policy explains what personal information we collect, why we collect it, how we protect it, and the choices you have. It applies to viewd.net and the viewd application. It does not cover the practices of the social platforms themselves or other third parties, each of which has its own privacy policy.

Account information. Your name, email address, and sign-in credentials.

Creator profiles. Profile details you add to be discovered by brands: social media handles and links, portfolio content, content categories, rates, location, and anything else you choose to include.

Brand information. Company name, contact details, campaign briefs, creative guidelines, and billing details (payment card processing is handled by our payment providers; we do not store full card numbers).

Communications. Messages sent through the platform and correspondence with our support team.

Creators and businesses can connect their social media accounts to viewd so that we can display accurate, first-party performance analytics. Connections are made exclusively through each platform’s official login and API: Instagram and Facebook (Meta), TikTok, and YouTube (Google). You authorize access on the platform’s own consent screen, and we never ask for, receive, or store your social media passwords.

When you connect an account, we access only what is needed to provide analytics:

• Account profile: account ID, username, account type, profile picture, and follower count.
• Content metadata: your posts’ IDs, captions, thumbnails, links, formats, and publish dates.
• Performance insights: per-post metrics the platform makes available to you, such as reach, views, likes, comments, saves, shares, and average watch time.
• Aggregate audience demographics: summary breakdowns such as audience by country, exactly as reported by the platform. These are aggregate statistics only; we never receive or attempt to identify the individual people who view or engage with your content.

We practice data minimization: we durably store only your account profile details and the encrypted access token needed to maintain the connection. Performance insights are fetched from the platform when analytics are viewed rather than warehoused, and we take no action on your account beyond what you have explicitly authorized on the platform’s consent screen.

Platform Data received from Meta is handled in accordance with the Meta Platform Terms, and data received from TikTok in accordance with the TikTok Developer Terms. YouTube data is covered separately in section 9.

Like most web applications, we collect basic technical information when you use viewd: IP address, browser and device type, pages viewed, and actions taken. We use cookies for authentication, security, and remembering your session, not for third-party behavioral advertising. Blocking essential cookies will prevent sign-in from working.

• Operate the platform: accounts, creator discovery, campaign management, messaging, and payments.
• Display analytics for connected social accounts to the people you’ve authorized to see them.
• Match creators with relevant brand campaigns and surface fit signals.
• Keep viewd secure: authenticate users, prevent fraud and abuse, and debug problems.
• Communicate with you about your account, campaigns, and product updates.
• Comply with legal, tax, and accounting obligations.

We do not use your information, and in particular we do not use Platform Data from connected social accounts, to build advertising profiles, to train third-party AI models, or for any purpose unrelated to providing viewd’s services to you.

• Encryption in transit: all traffic to and from viewd, and between viewd and platform APIs, is encrypted with TLS (HTTPS).
• Encryption at rest: social account access tokens are encrypted with AES-256-GCM before being stored. Tokens are never written to logs and are never sent to any browser or client.
• Access controls: connected-account data is protected by server-side, role-based authorization checks enforced on every request. Internal access is limited to what is necessary to operate the service.
• Vendor management: we host on reputable cloud infrastructure providers under data processing agreements.

No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security, but we design for it, and if a breach affecting your personal information occurs we will notify you and the relevant authorities as required by law.

We do not sell personal information, and we do not share Platform Data from connected social accounts with advertisers, data brokers, or analytics resellers. We share information only:

• Within viewd: as the product is designed to work. For example, a creator’s profile is visible to brands, and analytics for a connected account are visible to the users that account’s owner has authorized.
• Service providers: cloud hosting, database, email, and payment providers who process data on our behalf under contract, only as needed to run viewd.
• Legal reasons: when required by law, valid legal process, or to protect the rights, safety, and security of viewd and its users.
• Corporate transactions: in connection with a merger, acquisition, or sale of assets, subject to this policy’s commitments.

• Connected-account tokens and profile data: kept only while the connection is active; deleted immediately when you disconnect the account.
• Performance insights: fetched on demand from the platform rather than stored, so there is no retained insights archive to delete.
• Account and profile: kept while your viewd account is active and deleted or de-identified within 30 days of account deletion.
• Campaign and transaction records: retained as needed to document collaborations and meet tax, accounting, and legal requirements (typically up to 7 years for financial records).
• Backups: residual copies in encrypted backups are purged through routine backup rotation within 30 days of deletion.

You are always in control of connected social accounts:

• In viewd: disconnect an account at any time from your settings. Its stored access token and account data are deleted immediately, and viewd stops accessing that account.
• On the platform: revoke viewd’s access directly: on Instagram under Settings → Website permissions → Apps and websites, on Facebook under Settings → Apps and websites, on TikTok under Settings → Security → Apps and websites, and for YouTube via your Google security settings. Revoking access invalidates our token, and we delete the associated stored data within 7 days.
• Everything else: to delete your viewd account and associated personal information, use your account settings or email viewdnet@gmail.com with the subject “Data deletion request”. We will confirm completion, subject to records we are legally required to keep.

When you connect a YouTube channel, viewd uses YouTube API Services. By connecting, you agree to the YouTube Terms of Service, and Google’s handling of your data is described in the Google Privacy Policy.

Our access is limited to channel profile information, video metadata, and the analytics described in section 3, used solely to display your channel’s performance within viewd. You can revoke viewd’s access at any time via your Google security settings or by disconnecting in viewd; stored YouTube data is deleted immediately on disconnect and in any event within 7 days of revocation.

Depending on where you live, you may have the right to access, correct, delete, or receive a portable copy of your personal information, to object to or restrict certain processing, and to withdraw consent. Exercise any of these by emailing viewdnet@gmail.com; we may verify your identity before acting on a request.

For residents of California and other U.S. states with privacy laws: we do not sell or share personal information for cross-context behavioral advertising, and we will never discriminate against you for exercising your privacy rights. For users in the EEA, UK, and Switzerland: we process personal information to perform our contract with you, with your consent (for example, when you connect a social account), to meet legal obligations, and for legitimate interests such as keeping viewd secure; you may also lodge a complaint with your local supervisory authority.

viewd is operated from the United States, and information is processed on servers located there. Where the law of your jurisdiction requires safeguards for international transfers, we rely on appropriate mechanisms such as contractual protections.

viewd is intended for users 18 and older. We do not knowingly collect personal information from anyone under 18; if we learn we have, we will delete it and close the account.

We may update this policy as viewd evolves. We will post the updated version here with a revised date, and for material changes we will provide additional notice through the product or by email.

Email: viewdnet@gmail.com