PRIVACY POLICY

Effective 2 September 2026. OMILY LABS LTD is the controller for Creator Billboard account, campaign, moderation and site-usage data. The merchant of record separately controls payment data it must process for checkout, tax, fraud and disputes.

WHAT WE COLLECT

• Creator claims: handle, display name, email, social profile URL, creator tag, destination link, and the video file you upload.
• Payments: processed by our payment provider; we store payment status, amounts, and a receipt email — never full card details.
• Reports: your contact email, report type, explanation, optional evidence link, and our case status.
• Visitors: short-lived HMAC-pseudonymised network keys for the live counter, one unlinkable key per network/day for aggregate visit measurement, security/rate-limit records, and aggregate outbound link clicks. We do not store raw historical IP addresses in these tables and we use no third-party ad tracker.

WHAT'S PUBLIC

The board is a public scoreboard. Your handle, display name, tag, video, pot total, rank, boost amounts, and boost timing are public by design — that is the product. Actor emails are shown only in redacted form.

WHY AND HOW LONG

We process claim and campaign data to review submissions, perform paid placement, prevent fraud, operate rankings, answer reports, and meet legal obligations. Videos stay available while a campaign is active. Top 5 archive data is retained for the Hall of Fame; non-winner media may be deleted after season operations and dispute windows. Transaction and moderation records may be retained for accounting, fraud, legal-claim and audit periods. Short-lived presence rows and daily visitor keys are periodically deleted.

PROCESSORS AND INTERNATIONAL TRANSFERS

We use Vercel for application hosting, Supabase for the production database, Mux for video upload/streaming, Postmark for transactional email, Cloudflare Turnstile for bot prevention, and Dodo Payments for merchant-of-record checkout. These providers may process data outside the UK. We rely on their contractual transfer safeguards and only send each provider the data needed for its role.

YOUR RIGHTS

You may request access, correction, deletion, restriction, objection or portability where applicable using the support email below. You may complain to the UK Information Commissioner's Office. Some public rank, payment and moderation records must be retained for audit, fraud, accounting or legal-claim purposes.

CONTACT