PRIVACY POLICY

Effective 7 September 2026. OMILY LABS LTD is the controller for Creator Billboard account, campaign, moderation and site-usage data. The merchant of record separately controls payment data it must process for checkout, tax, fraud and disputes.

WHAT WE COLLECT

• Support conversations: your verified email, request and reply text, topic, and delivery status. Private conversation access uses a short-lived sign-in link and a protected support-session cookie.
• Creator claims: handle, display name, email, social profile URL, creator tag, destination link, and the video file you upload.
• Payments: processed by our payment provider; we store payment status, amounts, and a receipt email — never full card details.
• Reports: your contact email, report type, explanation, optional evidence link, and our case status.
• Visitors: short-lived HMAC-pseudonymised network keys for the live counter, one unlinkable key per network/day for aggregate visit measurement, security/rate-limit records, and aggregate outbound link clicks. We do not store raw historical IP addresses in these tables and we use no third-party ad tracker.

WHAT'S PUBLIC

The board is a public scoreboard. Your handle, display name, tag, video, pot total, rank, boost amounts, and boost timing are public by design — that is the product. Actor emails are shown only in redacted form.

WHY AND HOW LONG

We process claim and campaign data to review submissions, perform paid placement, prevent fraud, operate rankings, answer reports, and meet legal obligations. Videos stay available while a campaign is active. Top 5 archive data is retained for the Hall of Fame; non-winner media may be deleted after season operations and dispute windows. Transaction and moderation records may be retained for accounting, fraud, legal-claim and audit periods. Short-lived presence rows and daily visitor keys are periodically deleted.

PROCESSORS AND INTERNATIONAL TRANSFERS

We use Vercel for application hosting, Supabase for the production database, Mux for video upload/streaming, Postmark for transactional email, Cloudflare Turnstile for bot prevention, OpenAI for automated screening of sampled video frames, audio transcripts and submitted profile/destination content, and Dodo Payments for merchant-of-record checkout. These providers may process data outside the UK. We rely on their contractual transfer safeguards and only send each provider the data needed for its role.

AUTOMATED SCREENING

Our authorised staff manage support and moderation through OMILY Command Centre. Support conversation records stay separate from other products. Creator Billboard sends an opaque customer reference rather than your email to the support service. Staff notes are not included in your conversation, and a queued message is not shown as delivered until the support service confirms receipt. Generic reply emails link back to the private support page.

We use automated checks to identify submissions that can proceed to payment and those needing human review. Flagged, uncertain or incomplete checks are held for review, not automatically rejected. We do not send your payment credentials or claim email to the screening model. We retain screening decisions, reason codes and evidence hashes for moderation audit; this does not establish identity or copyright ownership. Contact support to request human review of a decision. Short submission-status alerts are also delivered to the operator through email and Telegram via OpenClaw.

YOUR RIGHTS

You may request access, correction, deletion, restriction, objection or portability where applicable using the support email below. You may complain to the UK Information Commissioner's Office. Some public rank, payment and moderation records must be retained for audit, fraud, accounting or legal-claim purposes.

CONTACT