Privacy policy.

Overview

ReleaseStack is a workspace for creator campaigns on X, operated by an individual based in India. This policy covers our website, the brand and creator dashboards, and paid plans. We collect what we need to run ReleaseStack. We don’t sell personal data, we don’t show ads, and we don’t use advertising or analytics trackers.

Data we collect and use

What we collect

Account details. Your email address, used to send you a verification code each time you sign in.

Brands. Company name, contact name, work email, website, logo and industry; your briefs, campaigns, saved creators, offers and messages; and your plan and subscription status.

Creators.

• Application details: name, email, phone, country, timezone, links to your channels, niche, languages, audience figures, past collaborations, and files you attach.
• Your X account when you connect it: your X user ID, username, display name, profile photo and bio. We ask X for read-only access once and don’t keep your X sign-in token.
• Profile details: bio, rates, turnaround, other social links, and partnerships you add.
• Analytics and audience screenshots you upload, and the figures read from them (impressions, engagement, followers, and audience location, gender and age).
• Payout details: bank account, UPI ID, crypto wallet address, or PayPal email, with the account holder’s name.
• Posts and files you submit for a deal, and your messages with brands.

Website visitors. What you send through our contact form, call booking, newsletter sign-up, or a collaboration request on a creator’s profile: name, email, company, role and message.

Activity and device data. When you’re active (if you leave “Active now” on), notification settings and the push subscription for each browser you turn on, and security records of account actions, including IP address, approximate location (city and country), browser, operating system and device type.

Payments. Dodo Payments collects your card or other payment details at checkout. We receive your subscription status, plan, and Dodo customer and subscription IDs, never your full card number.

How we use it

• To run your account and the dashboards, and keep them secure.
• To review creator applications and show approved creators to brands.
• To send offers, messages, and notifications you’ve turned on.
• To manage subscriptions, hold and pay creator-deal amounts, and process refunds.
• To read figures from analytics screenshots so creators don’t have to type them.
• To answer enquiries, book calls, and send the newsletter you signed up for.
• To prevent fraud and abuse, enforce our Terms, and meet legal, tax and accounting duties.

We process your data to provide the service you asked for, to meet legal obligations, for our legitimate interest in keeping ReleaseStack secure, and with your consent where we ask for it (for example push notifications or the newsletter). You can withdraw consent at any time.

Sharing and visibility

What’s public

An approved creator’s profile page is public and can be shared and indexed by search engines. It shows your display name, username, photo, bio, links, niches, follower and view figures, engagement, the audience breakdown you’ve provided, your rates, and the partnerships you’ve chosen to show. Your email, phone, payout details and messages are never public.

Who we share it with

We share data only as needed to run ReleaseStack:

• Other users: brands see creator profiles and the messages and posts in their deals; creators see the briefs and offers sent to them.
• Dodo Payments: our Merchant of Record for subscriptions. It processes payments under its own privacy policy.
• Supabase: database, sign-in, and file storage.
• Netlify: website hosting.
• Resend: sending our emails.
• Google:
  • The Gemini API reads analytics screenshots.
  • Google Calendar and Meet handle booked calls.
  • Google Fonts and site icons load the site’s fonts and brand icons.
• X: connecting your account, and reading public post figures through X and public post-preview services (fxtwitter, vxtwitter).
• Lookup services: ipwho.is (approximate location from IP), Microlink (website and post previews), unavatar.io and GitHub (public profile photos).
• Browser push services, such as Google, Apple or Mozilla, deliver notifications you turn on.
• Authorities, when the law requires it or to protect people’s safety or our rights.

Screenshots you upload are sent to Google’s Gemini API to read the figures, and the screenshot itself isn’t stored by us. Under the Gemini terms that currently apply to our account, Google may keep and use submitted content to improve its services, so only upload analytics screenshots.

Retention, security and rights

Cookies and local storage

We don’t use advertising or analytics cookies. Your browser stores a few things so ReleaseStack works: your sign-in session, theme, approximate location (to show local times), draft applications and onboarding progress, notification settings, and a short-lived code while you connect X. Clearing your browser data removes them.

How long we keep it

• Account and profile data: while your account is open. When you ask us to delete it, we delete or anonymise it within 30 days.
• Payment, payout, billing and security records: as long as tax, accounting and anti-fraud laws require, even after an account closes.
• Website enquiries and bookings: as long as needed to deal with them.
• Newsletter: until you unsubscribe.

Your rights

You can ask to access, correct, or delete your personal data, ask for a copy of it, or withdraw consent. You can also:

• turn push and email notifications off in your settings;
• hide your “Active now” status;
• unsubscribe from the newsletter by replying to any newsletter email.

To make a request, or to raise a complaint (including under India’s Digital Personal Data Protection Act, 2023), email contact@thereleasestack.com. We may ask you to confirm your identity first. You can also complain to your local data protection authority.

International transfers

We’re based in India, and the services above may store or process data in other countries, including the United States and the European Union. We use providers that protect data under their own agreements and safeguards.

Security

Data is encrypted in transit. Each user can see only their own records, and payout details are masked; staff can reveal them only to send a payout, and every reveal is logged with a reason. Sensitive changes, like payout methods or your email, need a fresh email code. No system is perfectly secure, so tell us if you notice anything wrong.

Children

ReleaseStack is for people 18 and over. We don’t knowingly collect data from anyone younger. If you think a minor has given us data, contact us and we’ll delete it.

Changes and contact

We’ll update this page when what we collect or who we share it with changes, and change the date at the top. For significant changes we’ll tell you by email or in your dashboard.

Questions about your privacy? Email contact@thereleasestack.com.