Privacy Policy
Last updated November 6, 2026
1. What We Collect
Account data (name, email, profile photo, niche), marketplace activity (campaigns, applications, messages, post URLs), payment metadata via Stripe (we never see card or bank numbers), device push tokens if you enable notifications, and standard usage logs. When the app or our servers hit an error, we keep a crash report: what went wrong and where, the app and system versions and the device model, but not who you are or what you wrote. If you join a waitlist, in the app or on tandiim.com, we keep what you give us: your name and email, and your Instagram handle and niche, or for a brand, the company's name, website, Instagram handle and rough monthly budget. If you connect Instagram, Tandiim reads it through Phyllo, a creator-data provider you authorize when connecting: your profile (handle, account type, follower and following counts), your posts and their engagement (likes, comments, views, reach, impressions, saves, shares), the comments on your campaign posts, and your audience demographics (shares by country, city, gender and age). For creators who apply or are invited, we may also obtain a report on their public Instagram profile, including an estimate of how real and active the audience is.
2. How We Use It
To run the marketplace: matching creators with campaigns, processing payments, Payment Protection and payouts, rendering branded content, delivering messages and notifications, verifying live posts, computing verified metrics and audience insights from connected accounts, checking campaign posts for fake engagement (a flagged post can pause its payout while we review it), and preventing fraud and abuse. Waitlist details are used to review a creator's Instagram account, to set up a brand's account, and to contact you about joining. We do not sell personal data.
3. Sharing
Your profile is visible to the other side of the marketplace (creators to brands and vice versa). Brands also see a connected creator's verified numbers, audience summary, audience-quality rating, recent posts and campaign post results; other creators do not. Service providers process data on our behalf: Supabase (database, auth, storage), Stripe (payments and payouts), Phyllo (connected Instagram data and profile reports), Replicate (optional background removal, only when a campaign enables it), Expo (push notifications), Resend (email), and Sentry (crash reports). Finished ads are rendered by Tandiim on infrastructure we operate — your footage is not sent to a third-party video service. We disclose data if required by law.
4. Retention & Security
Data is retained while your account is active and as required for financial records. All access is protected by row-level security; payments are handled entirely by Stripe. Disconnecting Instagram stops collection and deletes the data we synced from it (campaign post results stay with that collaboration). Contact us to delete your account and associated personal data; deleting your account also disconnects Instagram at Phyllo.
5. Your Rights
You can access, correct, or delete your personal data, and object to or restrict processing, by contacting privacy@tandiim.com. If you are in the EU/UK, you may also lodge a complaint with your supervisory authority.
6. Changes & Contact
We will notify you in the app about material changes to this policy. Questions: privacy@tandiim.com.