Controller and contact
Educato's privacy policy names Educato Inc., 2261 Market St, STE 22351, San Francisco, CA 94114, United States, as the controller. Authorised representatives: Codrut Lemeni and Felix Gabler. Contact: privacy@educato.com.
Applications and identity
We process your name, email, phone number, country, date of birth, social handles, experience, availability, application answers, sample video links or uploads, and application decisions and review notes. Account and sign-in data let you access your application and creator portal. We also store your profile photo and the version, language and text of terms you accept, with the time of acceptance. Referral codes and application source information help us attribute recruitment. If you apply through a creator's referral link, that creator can see your first name, last initial and referral status.
Campaigns, videos and performance
We store campaign memberships and their history, setup, warm-up and trial dates, assignments, scripts, uploaded videos, review feedback and approval decisions. We associate your posting accounts with your work. Grade supplies placements and performance metrics for your own TikTok and Instagram posts, including post links, publication times, views and engagement, to match deliveries, assess performance and calculate campaign earnings.
Minors and parental consent
We use date of birth to establish age and whether parental consent is needed. For creators under 18, we record the name, email and relationship of the parent or guardian who accepts the Creator Terms with them. Where a signed consent form is collected, we also keep the form, its status and collection history. We use these records to administer and evidence authorisation.
Programme terms and payments
We process agreed rates, campaign commercial terms, versions of accepted terms and signed programme documents, payment and payout details supplied for the programme, earned amounts, bonuses and payment records. We use these to administer programme terms, calculate and reconcile payments and meet accounting obligations.
Discord and notifications
Linking Discord stores your Discord user ID and username and associates programme channels with your creator record. We use these details for community access and programme messages. In-app, email and Discord notifications concern applications, assignments, reviews and payments; delivery records help us operate them. Where enabled, we also provision access to Educato for programme work. Discord handles use of its platform under its own privacy policy.
Purposes and legal bases
Programme administration relies on the necessity of fulfilling the programme terms or taking steps you request before accepting them (GDPR Article 6(1)(b)); accounting and legally required records on legal obligations (6(1)(c)); security, service reliability and recruitment measurement on legitimate interests (6(1)(f)); consent-based tracking on consent (6(1)(a)). Consent can be withdrawn without affecting earlier lawful processing.
Recipients, processors and transfers
Authorised programme staff access data according to workspace, campaign and role permissions. Supabase provides authentication, database and file storage; Vercel hosts the website; Grade supports social-post tracking and campaign payment operations. PostHog, Meta and Sentry receive the analytics, advertising or diagnostic data described below. Email delivery uses Amazon Web Services; linked community functions use Discord. Providers may process data outside your country, including in the United States.
Analytics, advertising and device storage
PostHog measures page visits and programme events and may identify a signed-in account by user ID. Before a cookie decision, it uses memory; accepting PostHog enables cookie and local storage persistence, while declining stops capture. Session recording and automatic interaction capture are disabled.
Meta pixel and server-side conversions measure ad-page views, registration and eligible adult application leads. They may send click and browser IDs, network information and hashed email or account identifiers. Meta tracking follows the site's regional consent rules; the cookie dialog is shown for qualifying paid visits where consent is required.
Attribution keeps campaign tags, click IDs, referral source, landing URLs and first/last touches in local storage, with the first touch retained for up to 90 days. Meta cookies include _fbc and _fbp when enabled. Referral codes also use local storage. Authentication, language and consent settings use cookies. You can clear browser storage and change choices through your browser’s cookie controls.
Sentry processes errors, technical request context and performance traces to diagnose failures. Configuration excludes request bodies, cookies and direct user information and redacts sensitive URL tokens; PostHog may link diagnostic events to its person and session.
Security and retention
Role and workspace restrictions and private storage protect creator records and uploaded documents. We retain data while needed for recruitment, programme delivery, obligations under accepted terms, statutory duties and legal claims, and restrict or erase it when those purposes end, subject to lawful exceptions. Leaving a campaign does not itself erase accepted terms, signed programme documents, consent evidence or accounting records.
Your rights and complaints
Subject to applicable law, you may request access, correction, erasure, restriction and portability, object to processing based on legitimate interests and withdraw consent. Contact privacy@educato.com to exercise these rights. You may complain to a supervisory authority, particularly where you live or work or where an alleged infringement occurred. You may also contact Romania's National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 Bucharest, Romania; anspdcp@dataprotection.ro; www.dataprotection.ro.
How to request account deletionPolicy changes
We may revise this policy when programme processing changes. Where a change requires notice or renewed consent, we will provide it as required by applicable law.