Privacy Policy

1. Information we collect

• Information you give us — name, email, social accounts, audience details and anything you include in an application or message.
• Onboarding & compliance information — where required for payouts, we collect identity, tax and payout details for compliance, fraud prevention and tax reporting.
• Connected account information — when you sign in with or connect a third-party account such as Google, we receive the information that account provider shares with us under the permissions you approve. Google user data is described in section 5.
• Usage information — basic analytics about how our websites are used, collected through cookies and similar technologies.

2. How we use information

• to review applications and onboard creators, contributors and brands;
• to operate campaigns, collect revenue and distribute payouts;
• to meet legal, tax and anti-fraud obligations;
• to communicate with you about your application or relationship; and
• to improve and secure our services.

3. Legal bases

We process personal information to perform a contract with you, to comply with legal obligations, with your consent where required, and for our legitimate interests in operating and securing the services.

4. Sharing

We share information with service providers who help us run the business — including payment processors, identity-verification and tax-reporting providers, and analytics and hosting vendors — under appropriate confidentiality and data-protection terms. We may disclose information where required by law. We do not sell personal information.

5. Google user data

Some NotPeople services let you sign in with your Google account or connect Google services through Google's OAuth consent screen. This section explains how we handle the Google user data we receive ("Google user data"). NotPeople's use and transfer to any other application of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

What Google user data we access. When you sign in with Google, our application accesses your basic Google account information: your name, email address and profile picture. If you choose to connect additional Google services, we access only the data covered by the specific permissions (scopes) you grant on the Google consent screen, and only after you grant them. We do not access Google user data you have not authorized.

How we use Google user data. We use Google user data solely to provide and improve the user-facing features you requested: to create and authenticate your NotPeople account, to display your name and picture inside the service, and to deliver the specific features you connected a Google service for. We do not use Google user data for targeted, personalized, retargeted or interest-based advertising; we do not sell it to data brokers or information resellers; we do not use it to determine credit-worthiness or for lending purposes; and we do not use it to build databases unrelated to the features you requested. We do not use data obtained through Google Workspace APIs to develop, improve or train generalized or non-personalized artificial intelligence or machine-learning models.

How we share Google user data. We do not transfer, share or disclose Google user data to third parties for purposes other than providing or improving the features you requested. We share it only with service providers acting on our behalf (such as hosting and authentication infrastructure) under confidentiality and data-protection terms, where required by law, as part of a merger or acquisition with notice to you, or with your explicit consent. Humans at NotPeople read Google user data only with your consent, for security or abuse investigations, to comply with law, or when the data has been aggregated and anonymized for internal operations.

How we protect Google user data. Google user data is transmitted over encrypted connections (TLS) and stored encrypted at rest. OAuth tokens are stored encrypted and never exposed to the browser. Access is limited to staff and systems that need it to run the service, and security procedures are in place to protect the confidentiality of your data.

Retention and deletion of Google user data. We keep Google user data only for as long as needed to provide the features you connected it for. When you disconnect your Google account, revoke our access through your Google Account permissions page, or delete your NotPeople account, we delete the associated Google user data and tokens within 30 days, except where a longer retention period is required by law. You can also request deletion of your Google user data at any time by emailing hello@notpeople.ai.

6. Data retention

We keep personal information for as long as needed to provide the services and to meet legal, tax and accounting obligations, then delete or anonymize it.

7. Your rights

Depending on where you live, you may have rights to access, correct, delete or port your personal information, or to object to or restrict certain processing. To exercise these rights, contact hello@notpeople.ai. Our handling is aligned with the GDPR and CCPA.

8. International transfers

We may process information in the United States and other countries. Where required, we use appropriate safeguards for international transfers.

9. Security

We use reasonable technical and organizational measures to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children

Our services are not directed to children under 18, and we do not knowingly collect their personal information.

11. Changes

We may update this Policy from time to time; the "last updated" date above reflects the latest version. If we change how our application uses Google user data, we will notify you before the change takes effect.

12. Contact

For privacy questions, contact hello@notpeople.ai or write to NotPeople Inc, 221 W 9th St, PMB 899, Wilmington, DE 19801, United States.