Privacy policy

1. Overview and scope

Mainstage is a platform and related service provider for creator campaigns. Brands, creators, agencies, visitors, and other users may provide or generate information through Mainstage.

This Privacy policy does not apply to third-party websites, social networks, payment processors, banks, creator platforms, app stores, analytics providers, or other services that Mainstage does not control. Those services process information under their own policies.

2. Information we collect

We collect information you provide, information generated through your use of Mainstage, information from third parties, and information collected automatically.

• Account, profile, workspace, role, contact, authentication, preference, and communication information.
• Brand, agency, creator, campaign, brief, submission, review, dispute, status, reporting, and operational information.
• Social account, handle, content, audience, performance, engagement, verification, eligibility, and campaign participation information.
• Payment, payout, billing, tax, compliance, identity verification, sanctions, anti-money laundering, and payment-provider status information.
• Device, browser, log, session, cookie, analytics, security, fraud, abuse-prevention, and diagnostic information.
• Support messages, emails, forms, surveys, calls, transcripts, notes, attachments, and other communications.
• Information from brands, creators, payment processors, identity providers, authentication providers, social platforms, analytics providers, service providers, publicly available sources, and other third parties.

We generally do not collect full card or bank account numbers directly where those are handled by payment processors, but we may receive related records such as payment status, transaction identifiers, account status, risk signals, payout status, chargeback information, and compliance information.

3. How we use information

We use personal information to provide, operate, administer, secure, maintain, and improve Mainstage.

• Create and manage accounts, workspaces, campaigns, submissions, reviews, disputes, reporting, payments, and support.
• Verify identity, social accounts, campaign performance, eligibility, compliance, payouts, and account integrity.
• Process deposits, balances, refunds, payouts, invoices, fees, taxes, KYC, AML, sanctions, and payment-provider requirements.
• Detect, investigate, prevent, and respond to fraud, abuse, artificial engagement, payment risk, policy violations, security incidents, disputes, and unlawful activity.
• Communicate with you about Mainstage, campaigns, accounts, support, legal notices, product updates, marketing, and other matters.
• Personalize, analyze, measure, rank, match, recommend, test, develop, and improve our services.
• Enforce our agreements, protect rights and safety, comply with law, and support legal, regulatory, accounting, tax, audit, insurance, and business obligations.
• Market Mainstage, including by using campaign examples, screenshots, content, metrics, names, logos, and results where permitted by our terms or other agreements.

4. Automated and assisted processing

Mainstage may use automated, semi-automated, algorithmic, statistical, manual, or assisted systems to support campaign matching, eligibility, ranking, verification, fraud detection, account integrity, payment review, payout decisions, risk scoring, content review, dispute handling, analytics, and product improvement.

These systems may affect campaign access, account review, submission status, payout status, fraud review, or other platform activity. We may combine automated signals with human review where we consider it appropriate or where required by law.

5. How we disclose information

We may disclose personal information as needed to operate Mainstage, support campaigns, comply with law, enforce our agreements, protect rights and safety, and run our business.

• To brands, creators, agencies, workspace members, and other campaign participants as needed for campaigns, submissions, reviews, disputes, reporting, payments, compliance, support, and platform operations.
• To service providers and contractors who help us with hosting, infrastructure, authentication, payments, identity verification, tax, analytics, email, communications, support, fraud prevention, security, observability, data enrichment, social data, legal, accounting, and business operations.
• To payment processors, banks, card networks, identity providers, tax providers, compliance providers, social platforms, analytics providers, and other third parties involved in operating campaigns or payments.
• To comply with law, legal process, court orders, regulatory requests, tax obligations, sanctions screening, payment rules, audits, or government requests.
• To enforce our agreements, collect amounts owed, investigate disputes, prevent fraud, protect safety, protect rights, and respond to security or abuse issues.
• In connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, diligence process, or other business transaction.
• With your direction, consent, or as otherwise described when the information is collected.

Information shared in a campaign may include information about brands, creators, submissions, content, campaign status, performance, review decisions, dispute status, payout status, and other information reasonably connected to the campaign.

6. Cookies and similar technologies

We and our service providers may use cookies, pixels, SDKs, local storage, device identifiers, and similar technologies for authentication, security, preferences, analytics, performance, product improvement, fraud prevention, advertising, and marketing.

You may control cookies through your browser or device settings. If we use technologies that require consent or opt-out rights in your jurisdiction, we will provide the required controls.

7. Legal bases

Where a legal basis is required, we process personal information based on one or more of the following: performance of a contract with you, our legitimate interests or the legitimate interests of others, compliance with legal obligations, consent, protection of vital interests, or other bases recognized by applicable law.

8. Your choices and rights

Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, objection, withdrawal of consent, or an opt-out from certain processing.

California and other US state privacy rights

If you are a resident of California or another US state with a comprehensive privacy law, you may have the following rights, subject to the limits and exceptions those laws allow:

• To know and access the categories and specific pieces of personal information we collect, use, and disclose about you.
• To correct inaccurate personal information.
• To delete personal information we hold about you.
• To opt out of the sale or sharing of personal information and of targeted advertising.
• To limit the use and disclosure of sensitive personal information to what is necessary to provide our services.
• To not receive discriminatory treatment for exercising any of these rights.
• Where your state provides one, to appeal our decision on a privacy request.

To exercise these rights, email us at privacy@onmainstage.com, or use the Your privacy choices control where we make it available. You may use an authorized agent to submit a request where the law allows. We may need to verify your identity and authority before responding, and we may deny, limit, or retain information where permitted by law, including for security, fraud prevention, disputes, legal compliance, tax, accounting, payment, audit, backup, or legitimate business reasons.

9. Sale, sharing, and targeted advertising

Mainstage does not sell personal information for money. Some privacy laws define sell and share broadly to include disclosures for cross-context behavioral or targeted advertising, even where no money changes hands.

Where we use advertising, analytics, or marketing technologies that count as a sale, share, or targeted advertising under applicable law, we provide the opt-out choices those laws require, including a Your privacy choices link and support for opt-out preference signals such as the Global Privacy Control (GPC). We treat a valid GPC signal as a request to opt out of sale and sharing for the browser or device that sends it, where required by law.

We do not knowingly sell or share the personal information of anyone under 16 years old.

10. Retention

We retain personal information for as long as needed for the purposes described in this Privacy policy, including to provide Mainstage, administer campaigns, process payments, comply with law, resolve disputes, enforce agreements, prevent fraud, maintain security, support audits, maintain business records, and protect rights.

We may retain campaign, payment, tax, accounting, fraud, compliance, security, dispute, audit, and legal records after account closure or deletion where we believe retention is necessary or appropriate.

When information is no longer needed, we may delete, de-identify, aggregate, or archive it, subject to legal, technical, backup, and operational constraints.

11. Security

We use administrative, technical, and organizational safeguards designed to protect personal information. No system, transmission, or storage method is completely secure, and we cannot guarantee absolute security.

You are responsible for keeping your account credentials secure and for promptly notifying us of any suspected unauthorized access.

12. International transfers

Mainstage may process, store, and transfer information in the United States and other countries, which may have data protection laws different from those where you live. Where required, we use appropriate safeguards for international transfers.

13. Children's privacy

Mainstage is not directed to children, and creator accounts are intended for users who are at least 18 years old. We do not knowingly collect personal information from children. If you believe a child has provided personal information to Mainstage, contact us.

14. Changes

We may update this Privacy policy from time to time. If we make material changes, we will update the effective date and provide notice where required by law.

15. Contact