Privacy Policy

• Account information — name, email, password (stored hashed, we never see it in plain text), and account type (Creator or Brand).
• Profile information — bio, headline, categories, portfolio links, location, languages, pricing preferences, and (for Brands) company details.
• Instagram data — if you connect your Instagram account, we access your public profile info, recent posts, and engagement metrics through Instagram's own API, solely to power profile suggestions and matching. We never post on your behalf or see your Instagram password.
• Messages and deal activity — conversations, offers, deal state, and content submissions exchanged through the Service.
• Payment information — for paid deals, our payment processor handles your card details directly; we store only the resulting transaction status, not your card number.
• Usage data — standard technical data like IP address, browser type, and pages visited, collected automatically.

• To run the matching engine — scoring campaign fit based on your profile and preferences.
• To generate AI-assisted profile summaries ("Creator DNA" / "Brand DNA") and category classification, using Google's Gemini API. We send the relevant text (bio, captions, campaign descriptions) to Gemini for this purpose; we don't send your payment information or private messages to it.
• To facilitate deals, messaging, and payments between Creators and Brands.
• To send account, deal, and campaign-related notifications by email.
• To screen direct messages for harassment, threats, and similarly harmful content before sending.
• To detect fraud and enforce our Terms of Service.

• The other party in a match or deal — your public profile, and whatever you choose to share in messages, pitches, and deal negotiations.
• Service providers we rely on to run Bingo: Supabase (database and authentication), Google (Gemini API for AI features, and Google Sign-In if you use it), Instagram/Meta (if you connect your account), our payment processor, and our email provider. Each only receives what it needs to do its job.
• We don't sell your personal information to anyone.

We keep your data for as long as your account is active. If you want your account and associated data deleted, contact us at privacy@bingo.app or through the support form — we'll process deletion requests within 30 days, except where we're required to retain certain records (e.g. transaction history) for legal or accounting purposes.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to certain processing. Contact us at privacy@bingo.app to exercise any of these.

We use essential cookies/local storage to keep you signed in and remember your preferences (like theme). We don't use third-party advertising trackers.

Bingo isn't intended for anyone under 18. We don't knowingly collect information from minors.

We use industry-standard measures to protect your data — encrypted connections, access controls on our database (row-level security scoped to your own account), and encrypted storage for sensitive tokens like your Instagram access token. No system is perfectly secure, and we can't guarantee absolute security.

We may update this policy from time to time. Material changes will be announced through the Service or by email before they take effect.

Questions about this policy or your data? Reach us at privacy@bingo.app or through the support form.