Legal
Privacy Policy
Last updated: October 5, 2026
This policy explains how Plotnikov LLC, 5900 Balcones Drive STE 100, Austin, TX 78731, USA ("paidpost", "we") handles personal data when you use paidpost.net and app.paidpost.net. Contact: support@paidpost.net.
1. Data we collect
- Account: your email address and sign-in codes (stored only as a one-way hash, valid for 10 minutes).
- Consent: the date and version of the Terms of Service and this Privacy Policy you accepted when signing in.
- Session: a session identifier in a cookie (we store only its hash), sign-in time and last activity.
- Security: IP address and bot-check results, used for rate limiting and abuse prevention.
- Linked X accounts: X user ID, username, display name, profile image, banner, bio, location, website, follower and following counts, account creation date and X subscription type, read from X with your permission. We also store OAuth access and refresh tokens, encrypted, to refresh these details. We do not read your posts, timeline, followers list or direct messages, and we never post on your behalf.
- Creator profile: the description, audience, language, time zone, prices and schedule you enter.
- Collaborations: campaigns and their media, offers and their versions, chat messages, links to published posts and reviews.
- Usage analytics: pages viewed (as page templates — never your email, names, campaign titles or record IDs), referrer, approximate location, device and browser, collected with Google Analytics. Whether analytics cookies are set depends on where you are (see section 5).
- Payments to paidpost: processed by Stripe. We receive the amount, status and a Stripe reference — never your full card details.
2. How we use it
- To provide the Service: sign-in, linking X accounts, showing creator pages and the catalog, and running collaborations.
- To send service emails: sign-in codes, notifications about your collaborations and reminders. No marketing emails without your consent.
- To understand how the Service is found and used and to improve it (usage analytics, with your consent where required).
- To keep the Service secure and prevent abuse, and to comply with legal obligations.
We do not sell or rent personal data, do not use it for third-party advertising, and do not use X data to train AI models.
3. What is public and what others see
- A linked creator account has a public page at paidpost.net/@username showing its X username, name, profile image, banner, bio, location, website, follower and following counts, your description and audience, prices and ratings with recent reviews. Reviewers are not named on public pages.
- Advertisers you work with see your offers, chat and reviews for those collaborations. Creators who receive an offer see the campaign's content and media, but not the advertiser's internal campaign name.
- Your email address is never public.
4. Service providers
- Cloudflare — hosting, database, file storage, bot protection (Turnstile).
- Zoho (ZeptoMail) — sending service emails.
- X Corp. — account linking via OAuth.
- Stripe — optional payments to paidpost, as merchant of record (Stripe Managed Payments).
- Google (Google Analytics 4) — usage analytics. IP addresses are not logged or stored by Google Analytics 4; advertising features and Google signals are off.
They process data on our behalf under their own security and privacy commitments. Data may be processed in the United States and other countries.
5. Cookies
- Essential: one cookie keeps you signed in to the app; Cloudflare Turnstile may set cookies needed for bot protection; `pp_consent` remembers your cookie choice for 1 year.
- Analytics (optional): Google Analytics cookies (`_ga`, `_ga_*`, up to 2 years).
- In the European Economic Area, the United Kingdom and Switzerland they are set only after you click "Accept" in the cookie banner. Until then, and if you click "Decline", Google Analytics receives only cookieless, anonymous signals (Consent Mode) that cannot identify you or link your visits. Your region is determined from your IP address by Google; if your device's time zone is in Europe, we also ask first.
- Everywhere else they are set when you first visit, and the cookie banner lets you turn them off: click "Decline" (or later "Cookie settings") and the analytics cookies are deleted and Google Analytics switches to the cookieless, anonymous signals described above.
- You can change your choice anytime via "Cookie settings" in the site footer or the app menu. Your choice applies to both paidpost.net and app.paidpost.net.
- We do not use advertising or cross-site tracking cookies.
6. Retention and deletion
- Sign-in codes expire after 10 minutes; sessions after 30 days at most.
- Disconnecting an X account deletes its stored tokens and X profile data (except the username and name shown in past collaborations), prices and schedule, revokes our access at X and removes its public page. Past collaborations, messages and reviews remain available to the other party.
- You can delete your paidpost account in the app (menu → Delete account) once you have no open offers or collaborations, or ask us at support@paidpost.net. We immediately remove your email address, sessions, notifications, campaigns that were never sent and linked X account data, and revoke our access at X. Past collaborations, messages and reviews remain available to the other party, linked to a de-identified account. Payment records are kept as required by law.
7. Your rights
Depending on where you live (for example under the GDPR or the CCPA), you may have the right to access, correct, delete or export your data and to object to certain processing. Email support@paidpost.net — we will respond within 30 days. You can also complain to your local data protection authority.
8. Security
Data is encrypted in transit. X tokens are encrypted at rest. Access to production systems is restricted.
9. Children
The Service is not intended for anyone under 18, and we do not knowingly collect their data.
10. Changes
We will post updates here and, for material changes, notify you by email or in the app.