Faved - Privacy Policy
This privacy policy explains how Our Company (Faved Ltd) uses the personal data we collect from you when you use our website.
Topics:
- What data do we collect?
- How do we collect your data?
- How will we use your data?
- How do we store your data?
- How do we protect your data?
- Gmail access (Sponsor Agent)
- Who we share your data with
- AI and automated processing
- What are your data protection rights?
- What are cookies?
- How do we use cookies?
- What types of cookies do we use?
- How to manage your cookies
- Privacy policies of other websites
- Faved Influencer Data Sources
- Marketing
- Changes to our privacy policy
- How to contact us
- How to contact the appropriate authorities
What data do we collect?
Our Company collects the following data:
- Your channel and profile data on YouTube, TikTok, Instagram, LinkedIn and X.
- Sponsorship pricing.
- Your contact details and the account you sign in with, such as your name and email address.
- Records of the sponsorships you take part in — the brief, the contract, the content you deliver, and the payment details we need to pay you.
- Only if you connect a mailbox for Sponsor Agent: the emails we send for you and, where you have enabled reply tracking, incoming messages to that mailbox. See Gmail access (Sponsor Agent).
How do we collect your data?
We collect and process your data when you are onboarded onto our platform, when you sign in, and as you take part in sponsorships. Pricing data comes directly from you or your agency, usually in your reply to our emails.
We also receive data about your channels indirectly, through:
- The platforms' own APIs — YouTube, TikTok, Instagram, LinkedIn and X — including where you connect an account to us yourself
- Modash and other creator-data providers, and public information about your channels
- Gmail API services (only if you connect a mailbox)
- Unipile (only if you enable reply tracking)
Please note, by agreeing to use our platform, you acknowledge that data such as "CPM, Male & Female, Engagement Rate" about your influencer/creator channels will be collected and only shared to relevant parties (see How will we use your data?).
How will we use your data?
Our Company collects your data so that we can:
- Email you with offers for brand sponsorships we think you might like.
- Present your channel to brands considering a sponsorship, and pay you for the ones you accept.
- Where you have set up Sponsor Agent, draft sponsorship pitches for you to review and send or have them be automatically sent from your own address, and — if you enabled reply tracking — show you which incoming messages are opportunities.
We do not sell your data, and we do not pass it to anyone for their own marketing. The service providers who process it on our behalf, and the limited circumstances in which we disclose it, are set out in Who we share your data with.
How do we store your data?
Our Company securely stores your data in an access-controlled, cloud-hosted database (PostgreSQL) running on secure cloud infrastructure. Your information is encrypted in transit and at rest, and any OAuth tokens (such as those obtained through YouTube or Gmail API services) are stored encrypted.
We keep your channel data for as long as we are working with you or your channel is listed for sponsorships, and afterwards only for as long as we need it for the purposes described in this policy or to meet a legal obligation, such as keeping records of payments we have made.
Two shorter periods apply specifically: messages received in a connected mailbox that we do not identify as a sponsorship opportunity are deleted automatically after 30 days, and disconnecting a mailbox deletes the credentials we hold for it straight away. You can ask us to delete your data, or disconnect any connected account, at any time — see What are your data protection rights?.
How do we protect your data?
Our Company is committed to ensuring that your data is secure and protected. We have implemented comprehensive security measures to safeguard your information, including Google user data obtained through YouTube API services and, where you have connected a mailbox, through Gmail API services.
Encryption: We use industry-standard encryption to protect your information both in transit and at rest. All data transmitted between your browser and our servers is encrypted using secure HTTPS protocols with TLS encryption.
Access Controls: Security procedures are in place to protect the confidentiality of your data. Access to personal data is restricted to authorized personnel only, who require the information to perform their job functions. We implement role-based access control to ensure that only necessary individuals can access sensitive information.
Google User Data Protection: When we access and store data from your Google account — your YouTube channel data, and Gmail data where you have connected a mailbox — we adhere to Google API Services User Data Policy, including the Limited Use requirements. We implement additional safeguards specifically for Google user data, including encrypted storage and restricted access controls.
Secure Infrastructure: Our systems are hosted on secure cloud infrastructure with regular security updates and patches. We use secure databases with encryption at rest to protect stored data.
Data Minimization: We only collect and retain the data necessary to provide our services. We do not store unnecessary sensitive information and regularly review our data retention practices.
Regular Security Audits: We conduct regular security assessments and monitoring to identify and address potential vulnerabilities in our systems.
While we implement robust security measures to protect your data, please note that no method of transmission over the Internet or electronic storage is 100% secure. We continuously work to improve our security practices to provide the highest level of protection for your information.
Gmail access (Sponsor Agent)
Sponsor Agent is an optional feature that pitches you to brands from your own email address. It only ever runs after you connect a mailbox yourself, and you can disconnect it at any time. If you do not use Sponsor Agent, nothing in this section applies to you.
Sending on your behalf. We request the Gmail gmail.send scope so that sponsorship emails go out from your address rather than ours, and so brands reply directly to you. We use it for exactly one thing: sending the emails you have reviewed, to the brand contacts you chose. It is a send-only permission and cannot read, search, label or delete anything in your mailbox.
What we do not request. Our own Google client asks only for gmail.send and your email address (so we can show you which account you are sending as). We do not request gmail.readonly, gmail.modify or gmail.metadata through it.
Reply tracking, where you have enabled it. Some creators additionally connect their mailbox through Unipile, an authentication provider we use as a data processor, so that we can show you brand replies in one place. That connection is made on Google's own consent screen under Unipile's name, and it does grant read access to the connected mailbox. While it is connected, new messages arriving in that mailbox are sent to us.
What we keep, and for how long. For mailboxes connected for reply tracking, we store the text content of incoming messages so we can identify which are sponsorship opportunities. Messages we do not classify as an opportunity are deleted automatically after 30 days. We never store attachments or raw message files, and nothing is placed in a shared mailbox that our team browses.
What we use it for. We process incoming messages to identify the sponsorship opportunities you receive. This is used to help which other external brands are relevant to you as well as Faved when doing outreach. Members of our team may see messages identified as opportunities, so that we can help improve the outreach we do; the companies that handle this data on our behalf are listed in Who we share your data with.
Limited Use. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements, and to the Google Workspace API User Data and Developer Policy. We do not sell Gmail data, do not use it for advertising, and do not use it — raw, aggregated or derived — to develop, train, or improve any generalised or foundational artificial intelligence or machine learning model, whether ours or a third party's. Message content is processed only to provide the features described above. See AI and automated processing for the specific providers involved and how that restriction is enforced.
Withdrawing access. Disconnecting from your Sponsor Agent page deletes the credentials we hold and stops any further sending immediately. You can also revoke our access, and Unipile's, at any time from your Google account permissions.
Who we share your data with
We do not sell your personal data and we do not share it with anyone for their own independent purposes. We do use a small number of service providers who process data on our behalf, under contract and on our instructions only. They are listed below, along with what each one actually receives.
Data obtained through Google APIs — your Gmail messages and your YouTube channel data — is shared only with the providers marked below. Every one of them is contractually bound not to use it for any purpose other than delivering the service to us, and none of them may use it to train artificial-intelligence models (see AI and automated processing).
| Recipient | Purpose | Receives Google user data? |
|---|---|---|
| Unipile (France) | Connects your mailbox and delivers new messages to us, if and only if you enable reply tracking | Yes — Gmail messages and your address |
| OpenRouter (USA) | Routes our request to the language model that sorts sponsorship opportunities from ordinary mail | Yes — the sender, subject and text of an incoming message |
| OpenAI (USA) | Writes the sponsorship pitches Sponsor Agent proposes to you | Yes — your public YouTube channel statistics. Never your mailbox |
| Google (Gemini API) | Summarises and categorises public creator videos | Yes — YouTube channel and video data. Never your mailbox |
| Discord (USA) | Carries our internal notifications about identified sponsorship opportunities | Yes — messages identified as an opportunity. No other mail |
| Serper (USA) | Looks up public information about a brand that has approached you, so we can tell a genuine partner from a scam | Yes — the brand's name and website address only. Never your messages, and never your address or the sender's |
| Neon, DigitalOcean, Vercel, Redis (hosting and infrastructure) | Run our database, servers and website. Data is encrypted in transit and at rest | Yes — as stored data. Never accessed for their own purposes |
| Modash, Apollo, Clay, Findymail, ZeroBounce | Creator audience data, and finding and checking the brand contacts a pitch is addressed to | No |
| SendGrid, Instantly, Front | Our own email to you and to brands. These never send from your address | No |
| Airtable, PostHog | Our internal deal records, and product analytics on our own website | No |
| PayPal, Wise, DocuSeal | Paying you, and signing sponsorship contracts | No |
Beyond those providers, we share information in three other situations: with brands, when we present your channel for a sponsorship or send a pitch you approved — this is your public channel data and the rate card you authored, never anything from your mailbox; where you ask us to, such as a public rate card you choose to publish; and where the law requires it, or to establish or defend legal claims. If Faved is ever acquired or merged, data may transfer to the acquirer, who would remain bound by this policy.
We never share Google user data for advertising, and we never sell it to anyone.
AI and automated processing
Faved uses third-party language models to do a few specific, narrow jobs: writing a draft sponsorship pitch, summarising a public video, deciding whether an incoming email is a sponsorship opportunity, and checking whether the brand behind such an email looks legitimate. We do not train, fine-tune or build models of our own, and we run no model on your data beyond the task in front of it.
We never use Google user data to develop, train or improve artificial-intelligence models. That applies to raw data, to aggregated data and to anything derived from it, and it applies equally to our own systems and to those of the providers we send it to. This is a requirement of the Google Workspace API User Data and Developer Policy, and we hold ourselves to it.
These are the providers, and what each is used for:
OpenAI — used on a paid API plan to write sponsorship pitches and creator summaries. It receives your public channel statistics and the brand information the pitch is about. It never receives anything from your mailbox. OpenAI does not train its models on data submitted through its API.
OpenRouter — used on a paid API plan as a gateway in front of open-weight models, currently DeepSeek V4 Flash (email and text classification) and Qwen (image classification of public creator posts). The DeepSeek V4 Flash route is the only one that ever sees content from a connected mailbox, and only for messages arriving while reply tracking is on.
Because OpenRouter chooses among several hosts for the same model, every request we send it carries data_collection: "deny". That instructs OpenRouter to route only to hosts that neither retain nor train on the input, and to refuse the request outright rather than fall back to one that would. It is applied to every call we make through OpenRouter without exception, not only the ones carrying Gmail data.
DeepSeek — DeepSeek V4 Pro is used on a paid API plan for a small number of internal drafting and summarisation tasks about brand deals. It receives no Gmail data and no Google user data.
Google (Gemini API) — used on a paid API plan to summarise and categorise public creator videos. Google does not use paid Gemini API data to train its models.
AssemblyAI — used on a paid API plan to transcribe sponsored video drafts that a creator uploads to us for brand review. It receives no Google user data.
We do not use consumer or free tiers of any of these services for production data, we do not run self-hosted or offline models, and we do not pass Google user data to any AI provider not named here. Adding one is a change to this policy, made before the change ships.
No automated decision is made about you that produces a legal or similarly significant effect. You decide whether Sponsor Agent runs at all, which brands it works towards, and what your rate card says; you can review what it has drafted, pause it, or disconnect your mailbox at any time, which stops anything further being sent immediately.
What are your data protection rights?
Our Company would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:
The right to access - You have the right to request Our Company for copies of your personal data. We may charge you a small fee for this service.
The right to rectification - You have the right to request that Our Company correct any information you believe is inaccurate. You also have the right to request Our Company to complete information you believe is incomplete.
The right to erasure — You have the right to request that Our Company erase your personal data, under certain conditions.
The right to restrict processing - You have the right to request that Our Company restrict the processing of your personal data, under certain conditions.
The right to object to processing - You have the right to object to Our Company's processing of your personal data, under certain conditions.
The right to data portability - You have the right to request that Our Company transfer the data that we have collected to another organization, or directly to you, under certain conditions.
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at our email. If you have already asked us to delete your data, you can check the status of that request at faved.com/privacy/data-deletion.
Call us at: 07957515797
Or write to us: thushaan@faved.com
What are cookies?
Cookies are text files placed on your computer to collect standard Internet log information and visitor behavior information. When you visit our websites, we may collect information from you automatically through cookies or similar technology.
For further information, visit allaboutcookies.org.
How do we use cookies?
Our Company uses cookies in a range of ways to improve your experience on our website, including:
- Understanding how you use our website
What types of cookies do we use?
There are a number of different types of cookies, however, our website uses:
- Functionality - Our Company uses these cookies so that we recognize you on our website and remember your previously selected preferences. These could include what language you prefer and location you are in. A mix of first-party and third-party cookies are used.
- Analytics - Our Company uses these cookies to understand how our website is used: the pages you visited, the links you followed, and information about your browser, device and IP address. We use PostHog for this. On parts of the platform used by brands we may also record a session, so we can see where the product is confusing; password fields are always masked.
We do not run advertising cookies or tracking pixels on this website, and we do not share cookie data with advertising networks.
How to manage cookies
You can set your browser not to accept cookies, and the above website tells you how to remove cookies from your browser. However, in a few cases, some of our website features may not function as a result.
Privacy policies of other websites
The Our Company website contains links to other websites. Our privacy policy applies only to our website, so if you click on a link to another website, you should read their privacy policy.
See Modash's Terms of Services and Privacy Policy.
See YouTube's Terms of Services and Google's Privacy Policy.
Where you connect an account from another platform, that platform's own terms and privacy policy apply to it as well: TikTok, Instagram, LinkedIn and X. Our own service providers are listed in Who we share your data with.
Faved Influencer Data Sources
Pricing data is collected directly from creators/influencers and/or their agencies.
Faved uses the platforms' own APIs — YouTube, TikTok, Instagram, LinkedIn and X — together with third-party providers, to collect data about creator/influencer channels.
Proprietary algorithms are used to analyse and process collected data to generate the data that is presented on our platform.
Average Views, is the median views the creator's content gets over the past 3 months. If this is empty it means the creator has not released any content recently. This estimates how many views a future paid content video with the creator would get.
Price, indicates what creators expect to be paid for content. For YouTube, the listed prices are for a standard 1x60sec midroll integration with no usage and some exclusivity. For TikTok, the listed prices are for 1x dedicated post with no usage and some exclusivity.
CPM (Cost per mille), is used to denote the price of 1,000 advertisement impressions. It is calculated using the average views and listed prices.
CPE (Cost per engagement), is used to denote the price per engagement (usually a like or comment).
Engagement (Engagement rate), is the portion of followers that interact with the creators content. For YouTube this is calculated by comparing the average views against the average likes and comments. For TikTok this is calculated by comparing the average views against the average likes, comments, shares and saves.
Data such as CPM, Engagement, Male & Female are not provided by YouTube API services.
If you are a creator, please see the rest of this privacy policy for more details about how your information is collected and used.
Marketing
Our Company would like to send you information about our own products and services that we think you might like, and about sponsorship opportunities with the brands we work with. We do not pass your details to other companies so that they can market to you.
If you have agreed to receive marketing, you may always opt out at a later date.
You have the right at any time to stop Our Company from contacting you for marketing purposes.
If you no longer wish to be contacted for marketing purposes, please email thushaan@faved.com
Changes to our privacy policy
Our Company keeps its privacy policy under regular review and places any updates on this web page. This privacy policy was last updated on 28 August 2026.
How to contact us
If you have any questions about Our Company's privacy policy, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us.
Email us at: thushaan@faved.com
Call us: 07957515797
Or write to us at: thushaan@faved.com
How to contact the appropriate authority
Should you wish to report a complaint or if you feel that Our Company has not addressed your concern in a satisfactory manner, you may contact the Information Commissioner's Office.
Email: icocasework@ico.org.uk
Address: Information Commissioner's Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF