Banoffee is the controller of the data described here. Questions or requests: hello@banoffee.app.

We use the handles you enter to fetch your public profile and recent public posts through the official Instagram, TikTok and YouTube APIs. From those we work out your niche, language, country and follower range, and we keep your recent captions so our writing help sounds like you, and the drafts we write for you. If you tell us about brands you've worked with or creators like you, we keep those too, to look for more brands. If your YouTube channel links your Instagram, we keep that handle to ask whether it's yours, and only read it once you say yes. If you answer our few questions while we look (how you find brands, what's toughest, roughly what your last deal paid), we keep your answers to make Banoffee better, and a copy in your browser so we can show what your results are built on. If you tell us your name, it stays in your browser only: we use it to greet you and sign your drafts, and it never reaches us. Your browser also remembers which brands you saw last time, so we can show you what's new. We never ask for passwords. Your IP address is used briefly to limit how many searches can be made, and we don't store it.

If you ask us to email you when your brands are ready, we use that address for that one email and to fill it in at checkout, then delete it once the email is sent (or after 2 days).

Payments are handled by Link (part of Stripe), our reseller and the merchant of record: they collect your payment details, VAT and invoices, and we never see your card. When you start a checkout, we send the email you type to Stripe to check it doesn't have a subscription already, then hand it to Stripe's checkout. We note which kind of browser you opened it in (Instagram's own, say) for 7 days, to see where checkout gets stuck. Stripe shares your email with us, plus ids for your customer account and subscription and whether it's active. We use your email to send you sign-in codes and keep your account until 12 months after your subscription ends. When you tell us you sent a brand your pitch, we keep that, how it went and any follow-up we draft for you, and email you one nudge if the brand goes quiet. Every nudge has a link to stop them. To show an account is yours, you can add a short code to its bio, which we read once. Link's own privacy policy covers what they do with your payment data.

Creators can earn by sharing Banoffee, through our partner program on Affitor (Affitor LLC, US). If you arrive through a partner's link, your browser keeps the link's code for 60 days. If you then subscribe, we send Affitor that link (nothing else about you) to record the click, and add the click and your email to your Stripe checkout, so the partner who sent you is paid. To work out what partners earn, Affitor can read our Stripe records: members' emails and payments. If you join as a partner, Affitor holds your details, payout and tax information under its own privacy policy.

We advertise on Facebook and Instagram, and use Meta's pixel to see which ads bring people who find it useful. On our site it tells Meta which pages you open (a results page's address includes the handle looked up), basic details about your browser, a cookie Meta uses to recognise it, and when you start a search or subscribe, with the amount. Meta and we are jointly responsible for that collection; Meta's privacy policy covers what it does with it. To stop it, block Meta's tracking in your browser or ad blocker, or turn off activity from other sites in your Meta account settings.

To show creators which brands work with people like them, we also look at public posts from other creators. We find them through YouTube search (channels in the same niche), through brands' own public posts that tag the creators they work with, through public mentions in posts, through creators who name you as making work like theirs, and through TikTok's public commercial content library, whose creators we look up on Instagram under the same name. For these creators we never store captions. We keep only what ranking needs: niche tags, language, country, follower range, a numeric niche fingerprint, and which brands appeared in their posts, with dates and post links.

For collaborations that appear in your niche, we show public details about the brand involved, taken only from the brand's own website and Instagram profile: its website, its Instagram account and its general enquiry address. We show them only inside Banoffee, to members who ask for them, and never sell them, export them or pass them on. We keep enquiry addresses for 6 months, then delete them, and we remove any of these details on request at hello@banoffee.app.

We rely on legitimate interest (GDPR article 6(1)(f)): helping creators find fair brand partnerships, using data creators and their collaborators chose to publish. We've written down a balancing test, and we honour objections straight away.

Our database is stored in the EU (Cloudflare D1, EU jurisdiction). Our servers, search index and the model that maps niches run on Cloudflare's global network, so they may process data outside the EU under Cloudflare's data processing agreement and the EU standard contractual clauses. Niche tags and drafts are written by Anthropic's Claude in the US from public caption text, under Anthropic's data processing agreement and the standard contractual clauses. Our emails are sent through Cloudflare, and Cloudflare Turnstile checks that a visitor is a person (not a bot) before we look up a creator, save onboarding answers, send a code or open a checkout. Payments run through Stripe and Link in the EU and US, under Stripe's data processing agreement and the standard contractual clauses. Our partner program runs on Affitor in the US.

We refresh profiles regularly. If a creator's public data hasn't been refreshed for 12 months, we delete it. If you stop using Banoffee for 12 months (a subscription counts as using it), we delete the captions we kept for your drafts, the drafts we wrote, and your answers to our questions. If you subscribed, we delete your account 12 months after your subscription ends.

You can ask for a copy of your data, ask us to correct it, object to it being used, or have it deleted. Email hello@banoffee.app, or, if you're a member, use the form below to remove your own profile straight away. You can also complain to your local data protection authority.