Privacy Policy

Information we collect

• Enquiries. When you submit our contact or representation form, we collect the name, email, phone, and message you provide.
• Creator profiles. For talent we represent, we store profile details (name, bio, photos, category, self-reported audience figures, and social links) to display on the site and manage in our CRM.
• Connected social accounts. If a creator chooses to connect a social account (e.g. YouTube or Instagram) through the portal, we receive an access token and limited account data to provide the features below.

How we use connected accounts

• YouTube. With read-only permission, we retrieve a creator’s public channel information and subscriber count to display verified statistics on their portal and media kit. We do not modify, upload, or delete any YouTube content. Our use of YouTube data is also governed by the Google Privacy Policy.
• Instagram. With a creator’s authorization, we publish photo and video posts they create in the portal to their own Instagram professional account. We act only at the creator’s direction and never post without their action.

Bank account connections

A creator may choose to connect a bank account so that money in and money out appear in their profit-and-loss view. Bank connections are optional, and the portal works without one.

Bank data is retrieved through a regulated third-party bank data provider. We currently use Teller. You authenticate directly with your bank or with the provider; we never see, receive, or store your online banking username or password. When you connect an account we receive account metadata (institution name, account type, and the last few digits of the account number), balances, and transaction history — date, amount, and description.

Access is read-only. The portal has no ability to move, transfer, or withdraw money, and no such permission is requested.

Nothing is counted automatically. Transactions arrive in a review queue and appear in your profit and loss only after you have reviewed and categorized them. Anything you mark as personal is excluded entirely and is never used in any calculation. This is deliberate: it is what makes a mixed business-and-personal account safe to connect.

We do not sell or share your bank data. It is not used for advertising, lending, credit decisioning, underwriting, or any automated decision-making about you. It is used solely to produce your own financial reporting, at your direction. Tulips Talent staff do not use it to set your rates or assess your deals.

The credential that lets us retrieve your transactions is held server-side only. It is never sent to a browser, never written to logs, and cannot be read through the portal by any signed-in account. You can disconnect a bank account at any time from the portal, which revokes our access at the provider; we then stop retrieving new transactions and delete the stored bank data within 30 days.

How we use your information

We use the information above to respond to enquiries, represent and promote our creators, provide the portal’s features, and communicate with you. We do not sell your personal information.

Service providers

We rely on trusted providers to run the service, including Supabase (database and storage), Vercel (hosting), Google Workspace (email), Stripe (subscription payments), and Teller (bank account connections). Connected-account data is processed via Google (YouTube) and Meta (Instagram) APIs. These providers process data only to provide their services to us. We do not sell your personal or financial information to anyone.

Data retention & your choices

We keep information for as long as needed to provide the service. A creator can disconnect a social account or a bank account at any time from the portal, which revokes our access. To request access to, correction of, or deletion of your information, email us at the address below.

Contact

Questions or requests about this policy? Email collab@tulipstalent.co.