Privacy Policy

This policy covers the Posty marketing site (posty.so), the Posty dashboard (app.posty.so), the Posty mobile apps, and the Posty mini-app inside LINE. It describes what we actually do today, and says so plainly where something is not switched on yet.

Who we are

Posty is a creator marketplace operated from Taiwan. Brands and agencies post briefs, creators apply, the work is reviewed in the product, and Posty pays the creator. We are a small team, and the fastest way to reach a human about your data is hello@posty.so.

We have not yet appointed a data protection officer or a local representative in every market we serve. That is part of the legal review named at the top of this page.

What we collect, and why

Your account

Your email address, your name, your profile picture if you have one, your LINE user id when you sign in with LINE, the language and time zone we should use, and whether you are a creator, a brand or Posty staff. We need this to sign you in and to show you the right product.

Sign-in secrets are never stored in a readable form. An email sign-in link and a mobile app session token are each kept only as a hash — the token itself is shown to your browser or your phone once and never written to our database.

Your creator profile

If you join as a creator, onboarding asks for your full name, gender, birth year, country, city or region, phone number, the languages you work in, your content categories and formats, whether you appear on camera, your rate band, your monthly capacity, which chat app you prefer and your handle there, and how you heard about Posty. Brands read this to decide whether to work with you; we read your country to decide which market's rules and which consent wording apply to you.

We also record which version of the consent text you agreed to and the country whose text you saw. That way a later change to this policy is a new version you can be asked about again, rather than a silent rewrite of something you already agreed to.

Tax and payout details

To pay you, and to file the withholding Taiwanese law requires, we collect your legal name, your national ID number, your business tax ID if you invoice as a company, your address, and your bank code, account number and account holder name.

Your national ID number and your bank account number are encrypted in our database. Screens only ever show a masked hint such as 812 ****3456, and the full value is decrypted only when a payout file is generated or a tax document is issued.

Connected social accounts

When you connect Instagram, TikTok, YouTube, Facebook or Threads, we store your handle on that platform, the platform's own account id, your follower and post counts, your recent reach, views and engagement rate, how often you post, and the aggregate audience breakdown the platform reports (age bands, gender split, top locations). We never receive your password, and we do not read your private messages.

The connection is brokered by a social-data provider, which holds the platform authorisation on your behalf. That provider is not switched on yet — see the table below — so any follower or engagement figure you see in the product today is placeholder data, not a real reading of your account.

Campaign work

Your applications, the briefs you are sent, the messages and file attachments in a collaboration thread, the drafts you submit for review, the URL of the post you publish, the periodic metric snapshots we take of that post, and any fraud flag an automated check raises against it.

Receipts

Some campaigns ask a shopper to prove a purchase. When a receipt is uploaded we store the photo and, for a Taiwanese e-invoice, the values encoded in its QR code: the invoice number, the date, the amount and the seller's unified business number (統一編號).

Link clicks

Every Posty tracking link is a redirect through posty.so/go/<code>. When someone follows one, we write a row containing a freshly generated click id, a salted SHA-256 hash of the IP address (never the IP address itself), the browser user-agent string, a coarse device type, the country the request came from, and the referring URL.

We then add the click id to the destination URL as ?pc=… and set it in a posty_cid cookie for 30 days. We do both because in-app browsers — LINE, Instagram, Facebook — routinely drop cookies, and without the URL copy a brand could not tell that a sale came from a creator's post.

How you use Posty

We use Google Analytics 4 to see how people move through the product: which page was opened, which onboarding question was reached, and where people stop. Google receives a randomly generated browser id, the page address, the page that referred you, an approximate location worked out from your IP address, your device and browser, and a short list of event details we choose to send.

That list is an allow-list, not a promise to be careful. Only the parameters named in our code are sent — which onboarding step, which market, which platform a connection was attempted on, how many categories were picked. No name, email address, phone number, national ID, bank detail, amount of money, social handle or account id is sent to Google, ever. The internal creator id, the Instagram handle and the referral code our own code passes around are dropped before the request is made.

Where it runs matters as much as what it sends. The whole of posty.so is measured. Inside the dashboard only the creator onboarding screens under /join are — the pages that show your tax profile, your bank account, your payouts and your earnings load nothing from Google at all.

Advertising is switched off. Google Signals, ads personalisation and advertising storage are denied by the tag itself as well as in the Google Analytics account, so this counts how the product is used and does nothing else: it does not build an advertising profile of you and it does not follow you to other sites. We have told Apple's App Store the same thing.

You can opt out with Google's browser add-on or any content blocker, and the product behaves exactly the same without it.

Money records

Your payout lines and their gross, withholding, health-insurance supplement and net amounts, the double-entry ledger rows behind them, the bank batch a transfer went out in, the currency and exchange rate if you are paid outside Taiwan, and the Taiwanese labour-income and withholding statements (勞報單 / 扣繳憑單) we issue.

Support and operations

Emails and chat messages you send us, and an audit log of significant actions taken in the product — who approved a draft, who released a payout, when a refund clawback ran. We keep it to settle disputes and to investigate fraud.

Why we are allowed to use it

• To run the service you asked for. Everything needed to match you to a brief, brief you, review your work, track its results and pay you.
• Your consent. At the end of creator onboarding you agree to a dated consent text. In Korea and Vietnam there is a second, separate consent for sending your data abroad — see below.
• A legal obligation. Taiwanese tax withholding and reporting, and the accounting records behind a payment.
• Our interest in a marketplace that is not being gamed. Fraud flags, the audit log, bot filtering on clicks.

We do not sell your personal data, and we do not use it to target advertising at you. There are no advertising trackers on posty.so — only the product analytics described above.

Cookies

There are no third-party cookies on posty.so. The two analytics cookies are set on Posty's own domain by a script we load, and Google cannot read them from any other site.

Who else sees your data

Brands and agencies

A brand you apply to or work with sees your creator profile, your platform handles and the audience and performance figures attached to them, your submissions, your published post and the campaign's results. Brands never see your national ID number, your bank details or your home address — those are visible only to you and to Posty staff who handle payouts and tax.

Service providers

These companies process data on our instructions. "Not enabled" means the integration is written but switched off: no data reaches that company today, and we will update this page, with a new date, before any of them is turned on.

We will also disclose data where the law requires it, or where we need to establish or defend a legal claim — including handing a Taiwanese tax authority the records it is entitled to.

Where your data lives, and crossing borders

The database runs on Neon in the US West region. The site and the dashboard run on Vercel's global edge network. Posty itself is operated from Taiwan, and our team in Taiwan can access the data to run the service.

Posty serves creators in Taiwan, Japan, Korea, Hong Kong, Malaysia, Thailand, Vietnam, Singapore, Indonesia and the Philippines. If you are outside Taiwan, your personal data leaves your country: it is stored in the United States and it is accessible from Taiwan.

Korea's PIPA and Vietnam's PDPD require a separate, explicit consent for transferring personal data abroad. Creators in those two countries are therefore asked for an additional checkbox during onboarding, on top of the general consent, and cannot finish onboarding without it. We record that you gave it.

What we rely on for the other markets is part of the open legal review. We would rather say that than print a claim we have not yet earned.

How long we keep it

• Account and profile data — while your account exists, and briefly afterwards so anything in flight can be finished.
• Clicks, metric snapshots and audit records — for as long as they are needed for campaign reporting and dispute handling. We do not delete them on a fixed schedule today; when we set one it will be named here.
• Analytics events — Google deletes them 14 months after they are collected.
• Money, tax and contract records — payout lines, ledger entries, bank batches, labour-income and withholding statements, and your signed creator contract are accounting and tax records. Taiwanese tax and accounting rules require them to be kept for several years after the tax year they belong to, so these records survive the deletion of your account. We keep them for at least five years, and only for that purpose — they are not used to keep profiling you. The exact period for each market is part of the open legal review.

Your rights

You can ask us to show you a copy of what we hold about you, correct it, delete your account and the personal data that is not one of the statutory records above, withdraw a consent you gave, or stop a particular use of your data. Withdrawing a consent can mean we are no longer able to hire or pay you.

Email hello@posty.so from the address on your account. We aim to answer within 30 days.

Deletion today is manual. There is no delete button in the product yet. Until there is, email us and we do it by hand — the steps and what is kept are on the Delete your account page. We say so plainly because both Google Play and the App Store require an account-deletion path, and we would rather describe the one that exists than the one we intend to build.

Your local law — Taiwan's PDPA, Japan's APPI, Korea's PIPA, Singapore's and Malaysia's PDPA, Thailand's PDPA, Vietnam's PDPD, Indonesia's UU PDP, the Philippines' Data Privacy Act, Hong Kong's PDPO — may give you more than this list. Pinning down exactly what each one requires of us is the legal review that is still open.

Age

You must be at least 16 to create a Posty creator account. Between 16 and 17 you must confirm that you have a guardian's consent, and you may only take gifted collaborations: paid work and payouts are blocked until you turn 18. Campaign categories meant for adults, such as bars and nightlife, are hidden from anyone under 18.

We do not knowingly collect data from anyone under 16. If you believe a younger child has an account, email hello@posty.so and we will remove it.

Changes to this policy

When this policy changes we publish a new version and change the date at the top. The creator consent text carries its own version number as well, so we can always tell which wording you agreed to and ask you again when it matters.

Contact

hello@posty.so