Privacy at the 8x portal

8x Social, Inc., 1111B S Governors Ave STE 47647, Dover, DE 19904, United States, is the controller of the personal data described here. Write to privacy@8x.social about any of it.

The full 8x privacy policy sets out legal bases, retention periods and rights in full, and governs wherever the two differ. The terms of service cover the agreement itself.

• Account and sign-in — your email address, the one-time sign-in codes sent to it, and a session cookie. Codes are single-use and expire ten minutes after they are sent.
• Applications — the details you type into the application form and the sample video you link, upload or record.
• Connected social accounts — the handles you connect, and the public metrics of the posts you make for a campaign: views, and whether the post is still live.
• Campaign work — the briefs assigned to you, the posts you submit, and the approvals and feedback on them.
• Money — what each post earned, invoices, payout runs and their status. Payout account details are held by the payment provider, not by this portal.
• Discord — the Discord account you link, so campaign channels can be assigned to you.

• Vercel — application hosting.
• Resend — sign-in codes and campaign email, including delivery events.
• Cloudflare R2 — storage for application videos and archived campaign posts.
• Stripe, PayPal and payout partners — creator payments.
• TikTok, Instagram and YouTube data providers — public metrics for campaign posts.
• Discord — campaign channels.

The signed-in portal carries no advertising or analytics pixels. The public creator application at /apply loads a Meta pixel in production so campaign advertising can be measured; the tracking notice describes it.

Depending on where you live, you can ask for access to your data, its correction, its deletion, a portable copy of it, or a restriction on how it is processed. Write to privacy@8x.social from the address on the account, or name that address in the message, so the request can be matched to a record.

Some data outlives a request: invoices and payout records are kept as long as tax and accounting law requires them, and campaign posts already published on a social platform are governed by that platform.