Privacy Policy
Last updated: October 2026. This policy explains what data Tiniso Labs (“we”, “the studio”) collects when you use this website and how it is processed.
What we collect
- Contact data — name, YouTube channel name or handle, and email address you submit through our application or subscription forms.
- Public channel data — when you submit a channel, we fetch publicly available statistics (subscriber count, video count, total views, avatar) to prepare your review.
- Technical data — IP address and coarse country, processed to secure the forms against abuse and to route your request to the right team.
How we use it
Submitted data is used to review your channel, prepare an offer, and — if you subscribe — to send our newsletter. We do not sell personal data to third parties. Sponsor brands never receive your contact details until you accept a deal and sign.
Processors we use
Form submissions are transmitted to our email service provider (SendPulse) for storage in our mailing list, and to our notification channel for internal handling. Both processors process data strictly on documented instructions.
Retention and your rights
Application data is kept for up to 12 months, after which it is deleted unless you become a partner. Newsletter data is kept until you unsubscribe — every email contains a one-click unsubscribe link. You may request access, correction or deletion of your data at any time by writing to [email protected].
Cookies & Tracking Technologies
We use cookies and browser storage technologies to maintain secure sessions, respect your privacy choices, and analyze site traffic anonymously. You have full, granular control over non-essential cookies — adjust your consent at any time:
- Strictly Necessary Cookies: required for core website navigation, form security, and session validation of the application flow. Cannot be disabled.
- Performance & Analytics Cookies: help us evaluate page speed, popularity of service offerings, and traffic sources in aggregated format. Loaded only after you press “Accept all”.
- Functional Cookies: remember your consent choices and channel lookup inputs across visits, so you do not retype the same things.
- Targeting Cookies: help measure the effectiveness of advertiser brand-partner opportunities shown to creators. Off by default.
Sharing & Disclosures
We do not sell personal data. We disclose information strictly to trusted entities under robust contractual safeguards:
- Advertiser brand partners: with your explicit prior authorization, we share channel demographic metrics and sponsorship proposals with prospective brand sponsors. Your contact details remain private until you accept a deal.
- Production & operational contractors: dedicated video editors, thumbnail designers, and legal counsel assigned to your roster, bound by strict non-disclosure agreements.
- Infrastructure providers: secure cloud hosting and database systems that process data under strict data processing agreements (e.g., Cloudflare, AWS).
- Email service processor: newsletter subscriptions are stored with SendPulse under their data processing terms; every email contains a one-click unsubscribe.
- Statutory authorities: when required by lawful court order, subpoena, or applicable regulatory mandates.
Data Security & Retention
We implement industry-standard administrative, physical, and technical controls to safeguard records against unauthorized access, loss, or alteration:
- Encryption in transit: all web traffic is encrypted via TLS 1.3 with modern cipher suites.
- Access controls: access to application data is restricted to authorized talent managers on a least-privilege basis.
- Retention timelines: application records for channels not accepted are purged or anonymized within 12 months. Partner records are retained for the duration of the representation contract plus statutory accounting retention periods (7 years for financial records).
- Newsletter data: kept until you unsubscribe; the unsubscribe event removes your address from campaign sends within 72 hours.
Your Privacy Rights (GDPR & CCPA)
Regardless of your geographic location, Tiniso affords creators comprehensive rights regarding their personal data:
- Right to Access & Portability: you may request a machine-readable export of all data associated with your submissions.
- Right to Rectification: you may request immediate correction of any inaccurate or outdated information.
- Right to Erasure (“Right to be Forgotten”): you may request permanent deletion of your contact records and channel telemetry.
- Right to Object or Restrict: you may object to specific processing activities, including promotional outreach.
- Non-Discrimination: we will never deny services, alter rates, or provide disparate quality of representation for exercising your privacy rights.
Contact & Data Protection Officer
If you have questions about this Privacy Policy, wish to exercise your data rights, or want to submit an inquiry to our Data Protection Officer, contact us directly:
- Tiniso Labs — Privacy & Compliance Office
- Email: [email protected]
- Response window: within 30 calendar days of verified identity receipt.
EU/UK creators also retain the right to lodge a formal complaint with their national supervisory data protection authority.