Who we are

SocialDB ("we", "us") operates socialdb.xyz, an open database of YouTube, Twitch, TikTok and other influencers, plus a marketplace where brands and influencers discover each other and arrange paid deals (sponsorships, collabs, UGC and event/appearance bookings) with funds held in escrow.

SocialDB Inc. (“SocialDB”, “we”) is the data controller for the personal data described in this policy. You can reach us at hi@socialdb.xyz or by post at:
22 Fort York Blvd, Toronto, ON M5V 3Z2, Canada

Information we collect

• Account data: your name, email address and password (stored hashed) when you register, plus your chosen role (influencer or sponsor).
• Public influencer data: statistics, profile details and content surfaced from the official YouTube, Twitch and TikTok APIs. This is publicly available information, not personal data you provide to us.
• Deals, messages & wallet: the proposals, in-deal chat messages and attachments, e-signed agreements, deliverables, reviews, and wallet/transaction records you create on the platform. Payments and escrow are processed by Stripe — we do not store your full card or bank details.
• Feedback: when you submit feedback through the site, we store your message, any star rating, the page you sent it from, and (if you're signed in or provide one) your email, so we can act on it and reply.
• Usage data: standard log data (IP, browser, pages viewed) and cookies used to keep you signed in and to measure traffic.

YouTube API Services

SocialDB uses YouTube API Services to fetch public channel statistics and content. By using SocialDB you agree to be bound by the YouTube Terms of Service. Any information accessed through the YouTube API is handled in accordance with the Google Privacy Policy. We periodically refresh stored YouTube data so it stays current and do not retain it beyond what those policies allow. You can review or revoke access you have granted to third-party applications in your Google security settings.

How we use it

To run your account and keep you signed in; to power discovery, lead lists, messaging and deals; to process payments and hold deal funds in escrow; to send transactional emails (welcome, alerts, deal updates, delivery countdowns and reminders); to review the feedback you send and improve the service; and to keep the platform secure and prevent abuse.

Legal bases (EEA/UK)

Where the EU/UK GDPR applies, we process your personal data on these bases:

• Contract — to create and run your account, power deals, messaging and escrow, and process payments.
• Legitimate interests — to secure the platform, prevent abuse and fraud, measure aggregate traffic, and maintain our open influencer database from public sources (balanced against your rights).
• Consent — for non-essential cookies (analytics & ads) where required, which you can give or withdraw via our cookie banner.
• Legal obligation — to keep records we are required to keep (e.g. tax, accounting).

Cookies & analytics

We use a small number of cookies:

• Essential — a session/"remember me" cookie to keep you signed in, and a cookie that stores your cookie choice. These are always on and needed for the site to work.
• Analytics — Google Analytics, to understand aggregate traffic.
• Advertising — Google AdSense on ad-supported pages (Pro members see no ads).

Visitors in the EEA and UK are shown a consent banner on first visit; analytics and ad cookies are not set until you accept, and you can change your choice anytime via "Cookie preferences" in the footer. Elsewhere you can control cookies through your browser settings.

Third parties & sub-processors

We share personal data only with the service providers we rely on to run SocialDB, and only what each needs to do its job:

• Stripe — subscription billing, marketplace payments and escrow, and bank payouts. Stripe handles card and bank details directly; we don't store them.
• PayPal — payouts to creators in countries our bank-payout rail doesn't reach.
• Cloudflare — CDN, DNS and security/WAF in front of the site.
• Postmark — delivery of transactional email.
• Anthropic and DeepSeek — AI features (e.g. support replies, recommendations, content generation). We don't send them more personal data than the feature needs.
• Google (Analytics & AdSense) — traffic measurement and advertising, subject to your cookie consent.

We do not sell or "share" your personal data (including as those terms are defined under California law). A current list of sub-processors is available on request at hi@socialdb.xyz.

International transfers

SocialDB is operated from Canada, and our infrastructure and providers are largely US-based, so your data may be transferred to and processed in the US and other countries. Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as the Standard Contractual Clauses (and the UK Addendum) offered in our providers' data-processing terms.

Email to influencers

When a sponsor or influencer sends a proposal, we email the recipient influencer at the business/contact address listed publicly on their channel, on the sender's behalf, so they can respond. Influencers can claim their profile to manage these and control their listing.

Your rights

Depending on where you live (including under the EU/UK GDPR and California's CCPA/CPRA), you have the right to:

• Access / know — get a copy of the data we hold about you.
• Rectify — correct inaccurate data.
• Erase / delete — have your account and personal data deleted.
• Portability — receive your data in a portable, machine-readable format.
• Restrict / object — limit or object to certain processing, including our legitimate interests.
• Withdraw consent — for anything based on consent (e.g. analytics/ad cookies), without affecting prior processing.
• Non-discrimination — we won't treat you differently for exercising these rights.

Self-serve tools: signed-in members can download a copy of their data and delete their account from Settings. For anything else — or if you don't have an account — email hi@socialdb.xyz and we'll respond within 30 days. You may also lodge a complaint with your local data-protection authority (in the UK, the ICO).

Retention

We keep account and transaction records while your account is active and for as long as needed to provide the service, resolve disputes, and meet legal, tax and accounting obligations — then we delete or anonymise them. Deleting your account erases your personal data; some deal and transaction records are retained in anonymised form so the other party's records and our accounts stay intact.

Data breaches

We maintain safeguards to protect your data and an internal plan to detect and respond to security incidents. If a breach affects your personal data, we will notify the relevant supervisory authority and affected users where the law requires it — under the GDPR, the authority within 72 hours of becoming aware where feasible.

Children

SocialDB is not intended for children under 16 (or the minimum age in your country), and we don't knowingly collect their personal data. If you believe a child has provided us data, contact us and we'll delete it.

Changes

We may update this policy; material changes will be reflected by the "last updated" date above. Continued use means you accept the current policy.