Privacy Policy

1. Scope

This Policy explains how RoadMeet Creator Tracker (“RoadMeet”) collects, uses, stores, shares, and deletes personal information when brands create campaigns, invite creators, creators connect social accounts, and RoadMeet measures content performance.

Third-party platforms process information under their own privacy policies. This Policy does not replace TikTok, Instagram, YouTube, or other platform policies.

2. Information we collect

We may collect names, display names, email addresses, campaign information, consent records, and support communications provided by brand users and invited creators.

With creator authorization, we may receive platform account identifiers, usernames, display names, avatars, public profile information, published content identifiers, captions, thumbnails, public links, publication time, view counts, engagement fields, and permitted Insights. We also process authorization scopes, encrypted access and refresh tokens, token expiry, synchronization status, and necessary login, security, error, and synchronization logs.

RoadMeet does not receive or store social platform passwords.

3. How we use information

We use information to verify users, complete OAuth authorization and token refresh, connect accounts, synchronize and display authorized public content, create campaign measurements and reports, provide settlement support, prevent abuse, troubleshoot problems, respond to requests, and comply with law. We do not sell creator personal information or use authorization data for unrelated advertising profiles.

4. Sharing and disclosure

Authorized campaign administrators may access creator and performance data for their campaigns. We may use service providers such as Vercel and Supabase for hosting, database, authentication, security, and operations. We may also disclose necessary information for legal compliance, safety, fraud prevention, rights protection, or a business reorganization.

5. Retention and deletion

We retain information only as long as needed to provide the Service, support campaign settlement, resolve disputes, maintain security records, and meet legal obligations. When authorization is revoked or a valid deletion request is received, we stop new synchronization and delete or anonymize data no longer needed, except where retention is legally required. Backup copies are removed through normal backup cycles.

6. Security

We use HTTPS, server-side token storage, encryption, access controls, tenant isolation, least-privilege access, and logging. No internet system can guarantee absolute security.

7. Your choices and rights

Depending on applicable law, you may request access, correction, deletion, or export of personal information; restrict or object to certain processing; and withdraw consent. You may revoke RoadMeet through the connected platform’s settings. Revocation does not affect processing lawfully completed before withdrawal.

8. International processing and children

Information may be processed by providers in other countries or regions with appropriate safeguards. The Service is not directed to children below the applicable age of digital consent.

9. Updates and contact

We may update this Policy and publish a new effective date. Privacy questions, revocation assistance, or deletion requests may be sent to support@roadmeetapp.com. We may verify identity and account ownership before fulfilling a request.