Draft for review. This page has not yet been checked by a solicitor and may change before launch.

Privacy policy

Last updated 10 November 2026

Who we are

Tastemark is the data controller for the personal data described here. Controller details and a contact address will be added before launch.

What we collect

  • Venues: your name, role, email, venue details, answers you give during sign-up, and billing records. Card details are handled by Stripe; we never see them.
  • Creators: your name and email if you join the waitlist; once you connect TikTok, your public profile, follower count and the view counts and captions of your own videos; your city and postcode area; payout status from Stripe (bank details stay with Stripe).
  • Everyone: basic technical data needed to keep you signed in and the service secure.

Why we use it

  • To run the service: matching creators and venues, counting verified views, paying creators and billing venues (contract).
  • To check posts for ad labels and venue tags, prevent fraud and keep records for tax (legitimate interests and legal obligation).
  • To send marketing emails, only if you opted in. You can unsubscribe at any time (consent).

Automated checks

We use automated checks, including an AI model, to read post captions and cover images for an ad label and venue tag. These checks can flag a post, but a person makes every decision to withhold pay or suspend an account, and you can appeal.

Who we share it with

Our processors: Supabase (database and hosting of our data), Netlify (website hosting), Stripe (payments and identity checks), Loops (email), Anthropic (automated post checks) and TikTok (when you connect your account). Venues see the TikTok handle, tier and stats of creators who post for them.

How long we keep it

Account data is kept while your account is open and for up to 12 months after. Payment and tax records are kept for 6 years. Waitlist entries are deleted if you haven't joined within 24 months.

Your rights

You can ask to access, correct, delete or export your data, object to processing, or withdraw consent. You can also complain to the Information Commissioner's Office (ico.org.uk).