New Terms, Privacy Policy and Safe Deal Terms: what changes

We updated the Terms of Service and the Privacy Policy and added a third document, the Safe Deal Terms. All three take effect on October 31, 2026.

The reason is Safe Deal, a new optional way to work where the brand buys the post from paidpost and paidpost pays the creator. For the first time, paidpost sells posts and pays creators, so the documents have to say how. We also used the update to write down things that already work a certain way.

This is a plain summary, not legal advice. The documents themselves are what count.

If you only use Direct deals

• Direct deals stay free. You pay each other directly, outside paidpost. We're not part of that deal, and we don't settle disputes about it.
• The Safe Deal Terms don't apply to you. You accept them only if you choose to use Safe Deal.
• We don't read your posts. That only happens for Safe Deal checks, for creators who use it.
• A few things do change for everyone. They're marked "for everyone" below: mainly the rules for adult content, and some data and cookies in the Privacy Policy.

1. Safe Deal Terms — new

What it is. A separate agreement for Safe Deals: who sells what to whom, what it costs, how posts are checked, what happens with cancellations, refunds and problem reports, how the Advance and earnings work, payouts, chargebacks and taxes.

The main points. In a Safe Deal, paidpost sells the post to the brand and buys it from the creator, who works as our independent contractor. The brand and the creator have no contract with each other. Safe Deal is sold to businesses only.

How you accept it. You tick a box before your first Safe Deal action: a creator when turning on Safe Deal, a brand before the first payment or Advance prepayment. Each new version of these terms asks again.

Why a separate document. Most people who use paidpost don't need these rules. If you never use Safe Deal, you never accept them.

2. Terms of Service — changed

Two kinds of deal — added

Before: paidpost was only a free tool, and every agreement and payment was between users.

Now: each collaboration is a Direct deal or a Safe Deal. A Direct deal works as before. In a Safe Deal, we're the seller to the brand and the buyer of the creator's post.

Why. That's what Safe Deal is. The Terms now define these words and link to the Safe Deal Terms.

Fees — changed

Before: paidpost was free, and a creator could choose to pay us an amount after a collaboration.

Now: accounts, prices, the catalog, offers, chat and Direct deals are free. Those optional payments are gone. Safe Deal has a 7% service fee on card payments and on payouts, and nothing else inside.

Why. We removed the optional payments from paidpost, and Safe Deal needed its fee written down.

Adult content — changed, for everyone

Before: adult sexual content wasn't allowed.

Now: it's allowed only from creators in the 18+ niche, only where X allows it, never in a Safe Deal and never involving anyone under 18.

Why. paidpost now has an 18+ niche, and the Terms have to match.

Direct deals and new accounts — written down, for everyone

• A Direct deal is marked complete when the brand confirms it, or by itself 7 days after the creator adds the post link.
• When you link an X account, we set starter prices of $5 per 1,000 followers and an open schedule and list it in the catalog. You can change them or hide the account anytime.

Why. paidpost already works this way. The Terms didn't say so.

Fraud rules — added, for Safe Deals

Fake deals, deals with yourself, cards you're not allowed to use, bought engagement, deleting and re-posting to pass a check, and using several accounts to get around limits aren't allowed in Safe Deals. The Terms also list what we can do about it, such as cancelling deals, pausing payouts or closing accounts.

Why. Once money goes through paidpost, fake deals become a real risk, so the rules have to be clear.

Accounts, updates and disputes — changed, for everyone

• Account limits. Besides suspending or closing an account, we can now limit what it can do while we review it. If we close an account, we still pay out earnings and refund unused Advance, except amounts the Safe Deal Terms allow us to keep or that are under review.
• Updates. For changes that affect everyone, the app shows what changed, and you accept the new version to keep using it. If you don't agree, you can stop using paidpost and close your account.
• Small claims. Either side can bring an individual claim in small claims court, in Travis County, Texas, or in the county where you're based, if the claim qualifies there.

Why. To say plainly what we can do, and what you can do, in each of these cases.

3. Privacy Policy — changed

Data about everyone — changed

• Time zone. Before, a creator's time zone was part of the creator profile. Now we take it from your browser, for every signed-in user, and use it to show you dates and times.
• X accounts. We now also list two details we keep from X: the number of posts and the verification type.
• Support conversations. What you and paidpost Support write to each other in the app, including images, is now listed. If you delete your account, these conversations stay, linked to a de-identified account, and only paidpost can see them.
• Moderation. Limits and blocks on an account, with their reasons and our notes. For a blocked account, we keep its email and linked X user IDs, so it can't sign up again.
• Analytics. On paidpost.net, analytics covers the page address and title, including public creator pages, and campaign tags (`utm_*`). We also send Google Analytics anonymous events about completed deals, with no cookies or identifiers.
• Public pages. The policy now says that creator pages are in our sitemap and sent to search engines, that some reviews appear on our home page, and that a page can show that a creator takes Safe Deals.
• Disconnecting an X account. We now say exactly what stays: the X username, display name and user ID shown in past collaborations and reviews, plus the account's niches and rating.

Cookies — added, for everyone

`pp_device` is a random identifier in the app, set for signed-in users while Safe Deal is available. It lasts 400 days. It's there to prevent fraud in Safe Deal payments. We record its one-way hash only for people who use Safe Deal, and we never store the identifier itself. If you only use Direct deals, your browser has the cookie, but nothing from it is recorded.

The policy also now lists `XSRF-TOKEN`, which protects forms in the app, and the interface settings the app keeps in your browser.

Reading your X posts — changed, for Safe Deal creators

Before: "We do not read your posts, timeline, followers list or direct messages."

Now: we read posts only to check a Safe Deal. At each check we keep a copy of the public data X shows about the published post. For a pinned post, we check which post is pinned on your profile. For a repost, we check whether your recent posts include it. Both use the access you gave us when you linked your X account, so there's nothing to reconnect. We still don't read your followers list or direct messages, and we never post, like or follow for you.

Why. Public data can't show which post is pinned or whether a repost is there, and a Safe Deal completes only after these checks.

Safe Deal data — added

Collected only from people who use Safe Deal:

• Brands: company name, country, VAT ID (optional, EU and UK only) and your confirmation that you're buying for your business.
• Creators: legal name (encrypted), country and payout method, the Payoneer email (encrypted), or a Stripe reference if you're paid through Stripe. Stripe collects your identity and bank details itself. Each payout is recorded.
• Taxes: Form W-8BEN or W-9 details, including your address, date of birth and taxpayer ID where given, with your electronic signature.
• Payments: Stripe processes them. We get the amount, status and a Stripe reference, never your full card details.
• Records: your Advance and earnings and their history, cancellations, problem reports and our decisions.
• Fraud prevention: one-way hashes of the IP address and device identifier when you sign in and at money actions, so we can see whether a brand and a creator of the same Safe Deals share a device or network. A person always makes the final decision.
• Sanctions checks: the result of comparing company names and creators' legal names with the U.S. OFAC sanctions lists.
• Safe Deal Terms: the version you accepted, when, where in the app, and a one-way hash of your IP address.

In a Safe Deal, paidpost can read the deal's whole chat, including messages from before it became a Safe Deal, to help both sides and review problems. We may write there as "paidpost Support", which both sides see. The other side never sees your card details, Advance, earnings, business profile or payout details.

Who else gets data — changed

Stripe now also handles Safe Deal payments, fraud screening and bank payouts. For brands, it gets the business name, email and VAT ID, so it can work out any tax. For bank payouts, it gets the creator's email and country, and it verifies identity and bank details under its own terms. Payoneer gets the payout email, the recipient's name and the amount. We and payment providers may report payments to tax authorities where the law requires it.

How long we keep it — changed

• Safe Deal IP and device hashes: 240 days.
• Payment, Advance, earnings, payout and other Safe Deal records, including tax information: 7 years after the end of the year of the transaction, as tax and accounting laws require, also after you delete your account.
• Records of the document versions you accepted: as long as the agreement lasts and 4 years after it ends, also after you delete your account.

If you use Safe Deal, you can delete your account once your earnings are paid out and your Advance is used or refunded.

Other additions

• International transfers. paidpost is a U.S. company with servers in the EU, and the policy now explains what we rely on when data leaves the EEA, the UK or Switzerland.
• Legal bases. The policy now says why we're allowed to use each kind of data, where the GDPR or similar laws apply.

What you need to do

If you only use Direct deals, you don't need to change anything.

The next time you open the app, it shows you what changed and an "I agree" button before you continue.

Questions about the documents or your data: [email protected].