Privacy Policy
Last updated: October 30, 2026
1. Who we are
Omnya Growth LLC ("Omnya", "we", "us") is a user generated content (UGC) and creator marketing agency. We operate the Omnya Portal at portalomnyagrowth.com (the "Portal"). Creators use the Portal to join campaigns, submit content and get paid. Brand clients use it to follow their campaigns. Our staff use it to run those campaigns.
This policy explains what data the Portal collects, why, who can see it, how long we keep it and how to delete it. It covers the Portal only. Our public website at omnyagrowth.com may have its own notices.
Questions: hello@omnyagrowth.com.
2. Information we collect
Account information
Your name, email address, role (creator, client or staff) and, for clients, your company name. Sign in is handled by our authentication provider (Supabase). We never see or store your password in readable form.
Campaign information
Campaign applications, briefs, the content you upload or link to (videos, images, post links), captions, review notes, approvals and messages about your submissions.
Payment information
Creators are paid through Stripe Connect. Stripe collects your identity and bank details directly. We receive only your Stripe account ID and its status. If you choose bank transfer or Zelle, we store your bank name and the last four digits of your account number or phone number, or your Zelle email. We never store full account numbers. We also keep records of your earnings, payouts and withdrawal requests.
Data from connected social accounts
Only if you choose to connect an account. See section 3 for exactly what we access.
Technical information
IP addresses and basic request data, used to rate limit requests and protect accounts from abuse, plus standard server logs kept by our hosting provider.
3. Data from TikTok, Instagram, Facebook and YouTube
Creators can connect social accounts from Social Channels in the Portal. To submit a final campaign video for a platform, you need to connect the account you posted it from, so we can confirm the video is yours and measure it. We ask only for read-only access, and only through the platform's official login and consent screen, where you can see and approve the permissions.
| Platform | Permissions we request | Data we access |
|---|---|---|
| TikTok | user.info.basic, video.list |
Your TikTok open ID and union ID, display name and avatar. For your public videos: video ID, title, description, duration, posting time, share link, cover image, and view, like, comment and share counts. |
instagram_business_basic, instagram_business_manage_insights |
Your Instagram professional account ID, username and profile picture. For your media: media ID, shortcode, type, posting time, and like and comment counts. For posts submitted to a campaign: views, reach, shares and saves. | |
public_profile, pages_show_list, pages_read_engagement, pages_read_user_content |
Your Facebook user ID, name and profile picture, the list of Pages you manage, and like, comment and share counts for Page posts you submit to a campaign. | |
| YouTube | youtube.readonly |
Your channel ID and name, basic details of your videos, and view, like and comment statistics for videos you submit to a campaign. |
Why creators connect
Connecting lets you see how your campaign videos perform (views, likes, comments and shares) and what they earn you, including bonuses. Connect only accounts you own. You can disconnect any time from Social Channels.
When you connect, our staff and the brand running your campaign can see how the videos you submit to that campaign perform (see section 5).
How we use this data
- To confirm which account is yours and show its connection status.
- To match the posts you submit for a campaign to the published posts and measure how they perform.
- To calculate creator earnings when a campaign pays on performance, for example per view.
- To show campaign performance to you, to our staff and to the brand that runs the campaign.
We refresh these numbers automatically about every 12 hours, when you verify a video you are submitting, and when you or our staff ask for a manual sync.
What we never do
- We never post, comment, like, follow, message or change anything on your accounts.
- We do not read your direct messages or private content.
- We do not sell platform data, use it for advertising, or give it to data brokers.
- We do not use platform data to train AI or machine learning models.
- We do not use platform data for any purpose other than the ones listed above.
How we protect your access tokens
The tokens that let us read your data are stored only on our servers, encrypted with AES-256-GCM, and are never sent to your browser. When you disconnect an account we delete its tokens straight away. For TikTok we also revoke the token with TikTok.
4. How we use information
- To run the Portal: accounts, campaigns, submissions, reviews and reporting.
- To pay creators and keep accurate payment and tax records.
- To send service emails, such as invitations, submission updates and payout notices.
- To keep the Portal secure, prevent fraud and abuse, and fix problems.
- To meet legal obligations.
5. Who we share information with
- Brand clients. A brand sees the content submitted to its own campaigns, the creator's name and social handle, and the performance numbers for those posts. Brands do not see your other posts, your tokens or your payment details.
- Shared campaign reports. Our staff can create a private link to a campaign report for a brand. Anyone with that link can view the report until it is turned off. Reports leave out rates, budgets, margins and commissions.
- Our staff. Owners and account managers see the information they need to run campaigns and payouts.
- Service providers who process data for us under contract: Supabase (database, sign in and file storage), Vercel (hosting), Stripe (creator payouts), Resend (email delivery) and Google (the YouTube API).
- Legal reasons. When the law requires it, or to protect the rights, safety or property of our users, Omnya or others.
- Business transfers. If Omnya is merged or sold, this information may transfer to the new owner, who must follow this policy.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
6. How long we keep information
- Access tokens: until you disconnect the account, revoke access in the platform's settings, or your Portal account is closed.
- Synced profile and performance data: while your Portal account is active, so campaign reports and earnings stay accurate. We delete it within 30 days of a deletion request (see Data deletion).
- Payment and tax records: for as long as tax and accounting law requires, even after a deletion request.
- Temporary sign-in data for social connections: deleted automatically within a day.
7. Your choices and rights
- Disconnect a social account at any time in Social Channels. We stop syncing and delete its tokens straight away.
- Revoke access from the platform: TikTok (Settings and privacy, Security, Manage app permissions), Facebook (Settings, Apps and websites), Instagram (Settings, Apps and websites), Google (myaccount.google.com/permissions).
- Access, correct or delete your personal information. See Data deletion or email hello@omnyagrowth.com.
Depending on where you live, for example California, the EEA or the UK, you may have more rights, such as data portability or the right to object to some processing. Email us to use them. We will not treat you differently for using your privacy rights. We may need to confirm your identity before acting on a request.
8. Security
We use encryption in transit (HTTPS) and at rest, database access rules so each user sees only the data their role allows, encrypted token storage, rate limiting and audit logs for sensitive actions. No system is perfectly secure. If a breach affects your information, we will tell you as the law requires.
9. Children
The Portal is for people aged 18 or older. We do not knowingly collect information from children. If you believe a child has given us information, email us and we will delete it.
10. International transfers
We are based in the United States and our providers process data in the United States. If you use the Portal from outside the United States, your information will be transferred there.
11. Google API Services
The Portal's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. YouTube data is accessed through YouTube API Services and is subject to the Google Privacy Policy.
12. Changes to this policy
If we change this policy, we will update the date at the top. If the changes are significant, we will tell you in the Portal or by email before they take effect.
Questions or requests about your data? Email hello@omnyagrowth.com.