Privacy Policy

This policy explains what Calywire collects when you apply to or take part in the Calywire creator network, why we collect it, who we share it with, and what you can ask us to do with it. Calywire is based in the United States, and the information described here is stored and processed in the United States.

Who we are

Calywire is a marketing agency that connects brands with social media creators. When you apply to the creator network, Calywire is the business responsible for the information you give us. Questions about this policy, or about your information, go to privacy@calywire.com.

Information we collect

We collect the following, and only the following:

• What you give us on the application form. Your name, email address, phone number, city, state and country, the social handles you post under, the categories you cover, the languages you post in, the kinds of collaboration you are open to, a link to your portfolio if you have one, a profile photo if you choose to upload one, and anything you write in the free-text fields.
• Public metrics for the accounts you list. Follower counts, typical view counts, engagement rates, posting frequency and your public profile picture, collected from the public version of your profile. We do not collect anything from a private account, and we do not ask for your social media passwords.
• Platform data, if you connect an account. If you choose to connect your TikTok or Instagram account in the creator portal, the platform shares data with us through its official API, with your permission. From TikTok we receive your account ids, display name, username, profile picture, whether the account is verified and the link to your profile; your follower, following, like and video counts; and your newest 20 public videos with their id, link, cover image, posting time, length, and public view, like, comment and share counts. From Instagram, which allows this for professional (business or creator) accounts only, we receive your user id, username, account type, profile picture, follower count and post count, and your newest 12 posts with their id, caption, media type, links to the media and its thumbnail (we keep a resized copy of the image or of a video’s thumbnail, never the video itself), the post’s link, posting time, and like and comment counts (Instagram does not give us view counts). We do not receive private posts, direct messages, drafts, email addresses or phone numbers from either platform, and we cannot post or act on your account. Connecting is optional, and you can disconnect at any time from the Social accounts page.
• Working records. Notes our staff write about fit and past work, the campaigns you take part in, the content you deliver, and how it performed.

We do not collect your Social Security number, your bank account details, or your tax forms through this site. If Calywire pays you for a campaign, payment and tax information is collected separately by our payment processor.

How we use it

• To review your application and decide whether there is a fit with the brands we work with.
• To match you to campaigns, and to share your profile with the brand client for a campaign you are considered for.
• To run campaigns you accept: briefs, deadlines, deliverables, feedback and reporting.
• To pay you for work you complete.
• To contact you about the network, new campaigns, and your application status.
• To keep the social accounts on your profile current. For a connected account we read the numbers from the platform’s API instead of from the public page, on the same schedule as the rest of your profile: daily while you are applying to an open campaign or under review, otherwise every one to four weeks depending on your activity, and sooner when our staff ask for a refresh.
• To keep records of what we agreed and what was delivered.

We do not sell your information. The one case in which information is shared for advertising is the Meta Pixel on some campaign pages, described below: the brand running that campaign, and Meta, may use what the pixel collects to measure and target their advertising. Some state laws call this sharing for cross-context behavioral advertising. You can opt out by turning on Global Privacy Control in your browser; when we receive that signal, we do not load the pixel at all.

Some campaign pages use the Meta Pixel, a script provided by Meta, when the brand running that campaign has asked for it so it can measure its advertising. We load it only on that campaign’s pages, and not at all if your browser sends the Global Privacy Control signal. The events we send it say that the page was viewed and that an application was submitted; we do not pass it your name, email address or answers. What the script collects on its own once it runs in your browser is governed by Meta’s privacy policy.

Who we share it with

We share your information with brand clients when you are proposed for or take part in a campaign, and with the service providers we use to run the network. Those providers are:

• Supabase, which hosts our database and handles sign-in.
• Vercel, which hosts this website.
• Klaviyo, which we use to send creator email.
• Apify, which we use to read public profile metrics for the accounts you list that are not connected, and for a connected account while the platform is not honoring our access.

As the network grows we expect to add Stripe for creator payments and an electronic signature provider for campaign contracts. We will update this list before either one handles your information. We also share information when the law requires it, and with our professional advisors when they need it to advise us.

We do not sell platform data. We handle it like the rest of your information on this page: it is stored for us by the service providers listed above (the access tokens in Supabase’s encrypted vault), brand clients see it the same way they see your public metrics, and the legal and advisor exceptions above apply to it too. TikTok and Instagram receive from us only the technical requests needed to keep the connection working.

How long we keep it

We keep your profile for as long as you are part of the network. If your application is not accepted, we keep it for up to two years so we can consider you for later campaigns, unless you ask us to delete it sooner. Records of campaigns you were paid for are kept longer, because tax and accounting rules require it.

Access tokens for a connected account are kept while the connection is active and are deleted when you disconnect or when your account is deleted. If a platform stops honoring our access, we stop using the token and mark the account as needing reconnection; the stored token is replaced when you reconnect and deleted with your account. The profile numbers themselves follow the same schedule as the rest of your profile.

Deleting your account

You can delete your account from your creator portal (Settings, then Delete my account) or by emailing privacy@calywire.com. We confirm your request within 7 days, stop sending you campaign email, and finish the deletion within 30 days. We delete your profile, photos, social accounts, applications, messages, stored payout details and the email addresses we hold for you, both in our own systems and at the services we use to sign you in and send email.

Some records stay after a deletion. We keep a record that the deletion happened and when, and a one-way code made from your email address so that an earlier bounce or unsubscribe still applies if that mailbox joins again. We also keep the payment and tax records we are required to keep for campaigns you were paid for, and any tax form you submitted, whether or not a payment followed; these documents can include identifying information. Campaign records that do not identify you, such as the rate, deliverable and dates of a past campaign, also stay. For 30 days after we delete your data, we check for copies that arrive late, such as an email that was already on its way, and remove them.

Deleting your account also removes every connected TikTok or Instagram account and deletes the access tokens we held for them. Disconnecting one account from the Social accounts page deletes its token right away; if that first attempt fails, our worker retries in a later cleanup pass, at the earliest an hour after the disconnect. For TikTok we also ask the platform to revoke our access, while Instagram offers no such request, so remove Calywire in your Instagram settings if you want it gone there too. You can always remove our access from inside TikTok (Settings, Security, Manage app permissions) or Instagram (Settings, Website permissions, Apps and websites). When you do, our next attempt to renew the token fails, we mark the account as needing reconnection, and we go back to reading the public page for it, as we do for accounts that are not connected.

Your choices

You can ask us to show you what we hold, correct it, or delete it. Email privacy@calywire.com and we will respond within 45 days. You can unsubscribe from creator emails using the link at the bottom of any of them; we will still email you about a campaign you are actively working on.

California residents

Under the California Consumer Privacy Act, California residents have the right to know what personal information we collect, use and disclose about them, the right to request deletion of that information, the right to correct inaccurate information, the right to opt out of the sale or sharing of personal information, and the right not to be discriminated against for exercising any of these rights. Calywire does not sell personal information. The only sharing for cross-context behavioral advertising is the Meta Pixel on some campaign pages, described above. To opt out of it, turn on Global Privacy Control in your browser, and we will not load the pixel; you can also email privacy@calywire.com and we will tell you how. To exercise any other right, email privacy@calywire.com. We may need to confirm your identity before we act on a request, and you can name an authorized agent to make a request for you.

Security

Access to creator records is limited to Calywire staff who need it, and is enforced at the database level. Photos are stored privately and shown only to signed-in staff. We keep an internal log of who changed what.

Age

The creator network is for people 18 and older. We do not knowingly collect information from anyone under 18. If you believe someone under 18 has applied, email privacy@calywire.com and we will remove the record.

Changes

If we change this policy we will update the effective date above, and we will tell creators in the network by email when the change is significant.