Privacy notice.

Who to contact

Bountain is operated by Valuehalla Ltd, which is responsible for the personal information described in this notice. For questions, account deletion or a privacy request, email hello@bountain.co.uk.

Social profiles and your creator portfolio

Instagram and TikTok profile links are supplied by you. Saving a link does not verify ownership or grant access to that platform. Your creator portfolio is private by default. If you choose to show it to signed-in brands, they can see your display name, the profile links you share and your connected YouTube channel, where available. Your account email and provider access tokens are not included. You can withdraw this visibility in your profile; people may still retain information they have already viewed.

When available, connecting YouTube is separate from Google sign-in and requests read-only YouTube access. Bountain uses YouTube API Services to confirm your channel and show its public videos, titles, links, thumbnails, publication dates and available view and comment counts. We store the channel identifier, channel name, connection status and server-only access and refresh tokens needed to maintain the connection. Public video information is fetched when you request it; Bountain does not upload, edit or delete your YouTube content. Only public videos owned by your connected channel can be linked as verified campaign content. Imported videos and statistics are not automatically added to the brand directory.

Disconnecting YouTube removes the stored provider credentials and channel details from Bountain and requests revocation of the Google grant. If Google cannot confirm revocation, we tell you how to finish it in your Google Account connections. Campaign records and links you separately submitted remain part of the campaign history; contact us to request their deletion. YouTube access is used for these account and content features, not for advertising targeting or selling personal data. Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

YouTube features are subject to the YouTube Terms of Service. Google handles information under the Google Privacy Policy. We ask you to read this notice and agree to YouTube’s terms before connecting a channel.

When you choose Google sign-in

Google provides your account identifier, email address and verification status, name and profile picture, where available. We use these details to authenticate you, create or link your Bountain account, and maintain your account profile. They are stored with our authentication provider, Supabase. Your Google password is never shared with us.

This sign-in option requests basic identity, email and profile access. It does not request your Gmail messages, Drive files, contacts or calendar. We do not use Google account data to target advertising or sell it to data brokers. Choosing email sign-in instead gives you the same Bountain account features.

You can remove Bountain’s access in your Google Account’s third-party connections settings. This stops the Google connection; it does not automatically delete data already saved in Bountain. Contact us to request account deletion.

Information you provide and create

• Account information: your email, account identifier, selected Brand or Creator role, and profile or onboarding details you submit.
• Workspace information: campaigns, briefs, participation records, content links and activity you save. Published campaign information is visible in the marketplace; participating brands and creators can see information needed to manage their campaigns.
• Technical and attribution information: requests can include IP address, browser information, timestamps and campaign or click identifiers. A tracked referral can be associated with account creation, onboarding or campaign activity to measure the referral and detect invalid activity.
• Support: information you include when contacting us. Please avoid sending passwords or unnecessary sensitive information.

Why we use it

We process account and workspace information to provide the service you request. Our legitimate interests include keeping accounts secure, investigating errors and abuse, answering support requests and measuring campaign referrals. Where processing depends on your consent, you may withdraw it. We may also retain or disclose information where required by law.

An email address and account identifier are needed for an account. You can explore the public website and interactive demo without creating one. Demo funds, orders and payouts are simulated and are not financial transactions.

Services that help run Bountain

Supabase provides authentication and the account database; Cloudflare serves the website and processes web requests; Purelymail delivers account emails and handles our support mailbox. Google processes the Google sign-in you choose under its own privacy terms. Authorised operators may access information to provide support and maintain the service.

The primary Bountain database is hosted in London. Our providers operate internationally, so support, network delivery and other processing may take place outside the UK. Contact us for details about the providers and applicable transfer arrangements for your information.

Cookies, storage and retention

Sign-in uses cookies to keep your session and complete secure redirects. Browser storage can remember the account role selected during signup and stores the interactive demo’s progress on your device. Tracked links can also set first-party campaign attribution cookies. Clearing site data removes locally saved demo progress and may sign you out; it does not delete your server-side account.

We retain account and workspace data while needed to provide your account. Retention after a deletion request depends on outstanding support issues, security or fraud investigations, disputes and legal record-keeping requirements. Removing Google access or signing out does not itself erase these records. Contact us to request deletion or details of the information retained about you.

Your choices and rights

Depending on the circumstances, you can request access, correction, deletion, restriction or a portable copy of your personal information. You can withdraw consent where it is the basis for processing. We may need to verify your identity before acting on a request.

You can object to processing based on legitimate interests. Send privacy requests to hello@bountain.co.uk. You may also complain to the UK Information Commissioner’s Office.

We will update this notice when our data practices change and explain material changes where appropriate. The date above identifies the current version.