Privacy

What we collect

• Brand accounts. Your email address, name and workspace memberships, and the company details you send when you apply: company, website, your role and what you want to do. Your password is stored only as a one-way hash, which means we cannot read it and could not tell you what it is.
• Creator accounts. Creators sign up with X, so there is no password. We keep the email address X shares with us, which cannot be changed afterwards, and for each X account you link: the handle, name, photo, bio and country.
• Creator profile. Categories, whether you can be found in search, and the rates you choose to publish.
• X data. The posts on your linked X accounts and their figures (views, likes, reposts, replies, quotes, bookmarks), and your follower counts, read from X through a data provider. We do not hold your X password or any access token to your X account.
• Commercial records. Offers, counter-offers, accepted terms, deliverables, submitted posts, reviews and recorded payments.
• Messages. Content of conversations between brands and creators on the platform, and of disputes.
• Audit records. Who did what and when, for actions that affect money or a deal's status.

Why performance data is retained

We read a post's figures from X while it is recent, and a deal's posts for as long as the deal needs them, and keep the day-by-day history. A CPM deal settles against those figures, and a dispute months later has nothing to examine otherwise. This is the one place we deliberately keep data longer than the platform it came from shows it.

The contact filter

Text the other side reads (messages, post notes, applications, terms, review feedback, dispute text) is checked for contact details as it is written. Text with an email address, a link to chat elsewhere, a messaging handle or a request to talk off the platform is not delivered. A message in an open conversation, or a note sent with a post, is kept for our review; the other party never sees it, and you see only that it was not delivered. Anywhere else the text is refused and not stored. A phone number is removed and the rest delivered. For a message or post note we keep the text as you wrote it; for other text we keep only the version without the number. A log entry records what was matched (up to 120 characters) and when.

The log, and the original text of a message or post note, are readable only by our staff, and only to adjudicate a dispute. They are never shown to the person you were messaging.

Who can see your data

Brands see creator profiles and the rolled-up figures of creators who have made themselves discoverable. Access to a deal, its messages and its deliverables is limited to the two parties and, where a dispute is open, to support staff. This is enforced by the database rather than by the application, so a bug in a page cannot widen it.

What we do not do

• We do not sell personal data.
• We do not show your private commercial terms to other brands or creators.
• We do not run advertising trackers or third-party analytics on the signed-in app.

Deletion

Email privacy@weekdays.gg to request deletion. Records tied to a completed commercial transaction may be retained where we are required to keep them, and audit and moderation entries are append-only by design; we will tell you specifically what is kept and why.