Privacy policy
You're trusting a piece of software with your income and your line of work. Here is exactly what we hold, what we don't, and what you can make us forget.
The short version
- We never store your content. There is no upload for photos or video anywhere in the product.
- We never ask for your platform passwords. No logins, no two-factor codes, no account access.
- We never touch your money. We hold no funds and move none.
- We don't sell or share your data. Not to advertisers, data brokers, or anyone else.
- You can export everything and delete everything yourself, whenever you want.
What we collect
Your account
An email address and a password hash. That's the minimum to have an account at all. You can use any email you like — it doesn't have to contain your name, and we don't verify who you are.
The financial data you enter
Income entries, expenses, chargebacks, payouts, mileage, equipment, and the settings that make the maths work — your country, your agency's commission rate, your filing status. You typed it, so you know what's there, and you can see and export all of it at any time.
Your stage name and, if you choose, your legal name
These are separate fields on purpose. Your stage name is what the app shows you. Your legal name is optional, is only used where a tax calculation genuinely needs it, and is never displayed anywhere else in the product. If you never enter it, everything except some tax paperwork still works.
Files you upload
Receipts and invoices, and contracts you send to the reviewer. Nothing else can be uploaded — the product has no capability to accept content media, so this isn't a policy you have to trust us on so much as a thing that doesn't exist.
Basic technical data
Server logs, and first-party analytics we run ourselves recording which pages get used. We don't load third-party trackers or advertising pixels, so your visit here isn't being sold on to an ad network.
What we never collect
- Photos, videos, or any content you produce
- Platform passwords, session tokens, or two-factor codes
- Your fans' names, real identities, or payment details
- Bank credentials or card numbers (our payment processor handles cards; we only see the last four digits and an expiry)
- Anything about what kind of content you make — we never ask, and there's no field for it
Contracts you upload
A contract goes through text extraction and an automated review, and the text is sent to our AI provider to locate and quote clauses. It is stored afterwards so you can reread the report, and then automatically deleted — you can also delete it yourself at any moment, which is immediate and permanent.
We never use your contracts to train anything, ours or anyone else's. If you'd rather no file existed at all, paste the text instead — it works exactly the same way.
Who we share with
Only the companies needed to run the service:
- Our payment processor — to take your subscription payment. They see your card; we don't.
- Our AI provider — receives contract text when you request a review, for that request only.
- Our hosting provider — stores the database the application runs on.
That's the whole list. We don't sell data, we don't share it with advertisers or data brokers, and we don't share it with any platform, agency, or anyone claiming to represent you. If someone contacts us saying they manage you and asks for your data, the answer is no.
We'd disclose data if legally compelled to. If that ever happens and we're permitted to tell you, we will.
What you can do
Export everything
Your whole financial history, in a normal file format, whenever you want. It's your data and it should be able to leave with you.
Delete everything
Self-serve, no support ticket, no retention email trying to talk you out of it. Deletion is permanent — we can't undo it, so export first if you want a copy.
Correct anything
Every record in the app is editable by you directly.
Ask us what we hold
Write to us and we'll tell you, though the export already shows you everything.
If you're in the UK, EU, California or anywhere else with data-protection law, these rights are yours by statute as well. Where local law gives you more than this policy does, the law wins.
How long we keep things
- Financial records — for as long as your account exists, because that's the point of them. Deleted when you delete your account.
- Contracts — automatically purged after a set retention window, or sooner if you delete them.
- Payment records — kept as long as tax and accounting law requires us to.
- Server logs — rotated and discarded on a short cycle.
Security
Everything runs over HTTPS. Passwords are hashed, never stored in a readable form. Sensitive identity fields are encrypted at rest. Access to production is restricted and logged.
We're not going to claim we're unhackable — anyone who does is either inexperienced or selling something. What we can say is that the most sensitive things you might fear losing aren't here to lose: no content, no platform passwords, no fan identities, no funds.
Cookies
A session cookie to keep you logged in, and a preference cookie for things like your language and discreet mode. No advertising cookies and no cross-site tracking.
Changes
If we change this policy in a way that affects what we collect or who sees it, we'll tell account holders directly rather than quietly editing the page and relying on you to notice.
Contact
Questions about any of this: get in touch. You don't have to identify yourself to ask.
Last updated: July 2026