Privacy Policy

viewd is a creator-marketing platform operated by Cooksat LLC (“viewd”, “we”, “us”). It connects UGC creators with brands and, for accounts that choose to connect them, provides first-party analytics for social media accounts on Instagram, Facebook, TikTok, and YouTube.

This policy explains what personal information we collect, why we collect it, how we protect it, and the choices you have. It applies to viewd.net and the viewd application. It does not cover the practices of the social platforms themselves or other third parties, each of which has its own privacy policy.

Account information. Your name, email address, and sign-in credentials.

Creator profiles. Profile details you add to be discovered by brands: social media handles and links, portfolio content, content categories, rates, location, and anything else you choose to include.

Brand information. Company name, contact details, campaign briefs, creative guidelines, and billing details (payment card processing is handled by our payment providers; we do not store full card numbers).

Communications. Messages sent through the platform and correspondence with our support team.

Creators and businesses can connect their social media accounts to viewd so that we can display accurate, first-party performance analytics. Connections are made exclusively through each platform’s official login and API: Instagram and Facebook (Meta), TikTok, and YouTube (Google). You authorize access on the platform’s own consent screen, and we never ask for, receive, or store your social media passwords.

When you connect an account, we access only what is needed to provide analytics:

• Account profile: account ID, username, account type, profile picture, and follower count.
• Content metadata: your posts’ IDs, captions, thumbnails, links, formats, and publish dates.
• Performance insights: per-post metrics the platform makes available to you, such as reach, views, likes, comments, saves, shares, and average watch time.
• Aggregate audience demographics: summary breakdowns such as audience by country, exactly as reported by the platform. These are aggregate statistics only; we never receive or attempt to identify the individual people who view or engage with your content.

We practice data minimization: for analytics we durably store only your account profile details and the encrypted access token needed to maintain the connection. Performance insights are fetched from the platform when analytics are viewed rather than warehoused.

Comments, messages, and publishing (Instagram). If you choose to turn on comment management, messaging, or posting for an Instagram professional account, and grant those permissions on Instagram’s consent screen, viewd also:

• reads comments on your most recent posts, including each commenter’s username and Instagram-scoped ID, so they appear in your viewd inbox;
• posts replies and comments you write in viewd, hides or unhides comments you choose, and deletes comments your account wrote when you ask it to;
• sends one private reply (a direct message) to a person who commented on your post, either when you send it or when a keyword rule you created and switched on matches their comment. Instagram allows this once per comment, within 7 days of it;
• shows your Instagram direct message conversations in viewd’s inbox, including each person’s username, name, and profile picture as Instagram provides them, and sends the replies you write there. Instagram only allows a reply within 24 hours of the person’s last message;
• uploads the photos and videos you add in viewd’s composer and publishes them to your account’s feed with your caption, at the time you choose. Nothing is published without you creating and submitting that post.

To do this we store those comments, your direct message conversations and their messages, the replies and messages viewd sent on your behalf, your keyword rules and their delivery log, and the media and captions of posts you compose. We use this data only to provide those features to you, never for advertising, and never sell or share it. Keyword rules are off until you switch them on.

Platform Data received from Meta is handled in accordance with the Meta Platform Terms, and data received from TikTok in accordance with the TikTok Developer Terms. YouTube data is covered separately in section 9.

Like most web applications, we collect basic technical information when you use viewd: IP address, browser and device type, pages viewed, and actions taken. We use cookies for authentication, security, and remembering your session, not for third-party behavioral advertising. Blocking essential cookies will prevent sign-in from working.

• Operate the platform: accounts, creator discovery, campaign management, messaging, and payments.
• Display analytics for connected social accounts to the people you’ve authorized to see them.
• Match creators with relevant brand campaigns and surface fit signals.
• Keep viewd secure: authenticate users, prevent fraud and abuse, and debug problems.
• Communicate with you about your account, campaigns, and product updates.
• Comply with legal, tax, and accounting obligations.

We do not use your information, and in particular we do not use Platform Data from connected social accounts, to build advertising profiles, to train third-party AI models, or for any purpose unrelated to providing viewd’s services to you.

• Encryption in transit: all traffic to and from viewd, and between viewd and platform APIs, is encrypted with TLS (HTTPS).
• Encryption at rest: social account access tokens are encrypted with AES-256-GCM before being stored. Tokens are never written to logs and are never sent to any browser or client.
• Access controls: connected-account data is protected by server-side, role-based authorization checks enforced on every request. Internal access is limited to what is necessary to operate the service.
• Vendor management: we host on reputable cloud infrastructure providers under data processing agreements.

No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security, but we design for it, and if a breach affecting your personal information occurs we will notify you and the relevant authorities as required by law.

We do not sell personal information, and we do not share Platform Data from connected social accounts with advertisers, data brokers, or analytics resellers. We share information only:

• Within viewd: as the product is designed to work. For example, a creator’s profile is visible to brands, and analytics for a connected account are visible to the users that account’s owner has authorized.
• Service providers: cloud hosting, database, email, and payment providers who process data on our behalf under contract, only as needed to run viewd.
• Legal reasons: when required by law, valid legal process, or to protect the rights, safety, and security of viewd and its users.
• Corporate transactions: in connection with a merger, acquisition, or sale of assets, subject to this policy’s commitments.

• Connected-account tokens and profile data: kept only while the connection is active; deleted immediately when you disconnect the account.
• Performance insights: fetched on demand from the platform rather than stored, so there is no retained insights archive to delete.
• Instagram comments and messages: kept only for your most recent posts. Comments are deleted as soon as their post leaves that window, and any comment we have not re-read from Instagram in 30 days is deleted. Everything is deleted immediately when you disconnect the account.
• Instagram direct messages: kept while the account is connected so you can see each conversation, and deleted immediately when you disconnect the account or remove viewd on Instagram.
• Composed posts: the post record and its uploaded media are kept while the account is connected so you can see what was published, and deleted with the account.
• Account and profile: kept while your viewd account is active and deleted or de-identified within 30 days of account deletion.
• Campaign and transaction records: retained as needed to document collaborations and meet tax, accounting, and legal requirements (typically up to 7 years for financial records).
• Backups: residual copies in encrypted backups are purged through routine backup rotation within 30 days of deletion.

You are always in control of connected social accounts:

• In viewd: disconnect an account at any time from your settings. Its stored access token and account data are deleted immediately, and viewd stops accessing that account.
• On the platform: revoke viewd’s access directly: on Instagram under Settings → Website permissions → Apps and websites, on Facebook under Settings → Apps and websites, on TikTok under Settings → Security → Apps and websites, and for YouTube via your Google security settings. When you remove viewd on Instagram or Facebook, Meta notifies us and we delete that account’s stored token, comments, messages, rules, and posts right away. For other platforms, revoking access invalidates our token and we delete the associated stored data within 7 days.
• Everything else: to delete your viewd account and associated personal information, use your account settings or email viewdnet@gmail.com with the subject “Data deletion request”. We will confirm completion, subject to records we are legally required to keep. Step-by-step instructions, including how to request deletion of data we received from Meta, are on our data deletion page.

When you connect a YouTube channel, viewd uses YouTube API Services. By connecting, you agree to the YouTube Terms of Service, and Google’s handling of your data is described in the Google Privacy Policy.

Our access covers your channel profile and video metadata, the analytics described in section 3, and comments on your videos, including each commenter’s public username and comment text, so you can read and reply to them in viewd. When you schedule a post, we also upload that video to your channel. viewd posts to your channel only what you create: replies you write, replies sent by keyword rules you set up and switch on, and videos you schedule. We never edit or delete your videos, and we never use comment data for anything beyond showing your inbox and running the rules you enabled. You can revoke viewd’s access at any time via your Google security settings or by disconnecting in viewd; stored YouTube data, including comments, is deleted immediately on disconnect and in any event within 7 days of revocation.

Depending on where you live, you may have the right to access, correct, delete, or receive a portable copy of your personal information, to object to or restrict certain processing, and to withdraw consent. Exercise any of these by emailing viewdnet@gmail.com; we may verify your identity before acting on a request.

For residents of California and other U.S. states with privacy laws: we do not sell or share personal information for cross-context behavioral advertising, and we will never discriminate against you for exercising your privacy rights. For users in the EEA, UK, and Switzerland: we process personal information to perform our contract with you, with your consent (for example, when you connect a social account), to meet legal obligations, and for legitimate interests such as keeping viewd secure; you may also lodge a complaint with your local supervisory authority.

viewd is operated from the United States, and information is processed on servers located there. Where the law of your jurisdiction requires safeguards for international transfers, we rely on appropriate mechanisms such as contractual protections.

viewd is intended for users 18 and older. We do not knowingly collect personal information from anyone under 18; if we learn we have, we will delete it and close the account.

We may update this policy as viewd evolves. We will post the updated version here with a revised date, and for material changes we will provide additional notice through the product or by email.

Email: viewdnet@gmail.com