Legal

Privacy Policy

Last updated: October 29, 2026 · Effective: October 29, 2026

The short version: We collect only what we need to run the marketplace, matching brands and agencies with creators. We don't sell your data. We never access, connect to, or log into your social media accounts, brand or creator. A creator's contact email is shared with a brand only after that brand selects them. Questions? Email info@aveoreach.com.

1. Who we are

aveoreach is a free creator marketplace operated by Aveo Software. Brands and agencies post free campaign briefs, our outreach team approaches matching creators from our network, verified creators apply, and brands select who they want to work with. This policy explains what we collect from both sides of that marketplace and how we handle it.

When this policy says "aveoreach," "we," "us," or "our," it refers to Aveo Software and the aveoreach platform at aveoreach.com.

2. What we collect

If you're a brand or agency

Account details: name, email address, company name, and password when you sign up.
Campaign briefs: the niche, follower range, budget, platforms, and location you specify when posting a campaign.

We do not currently charge for any part of the service, so we do not collect payment information from brands or agencies.

If you're a creator

Account details: name, email address, and password when you sign up.
Verification: the social handle you DM us from to prove account ownership, and the resulting verified status on your profile.
Profile information: up to 10 profile URLs or handles across platforms, along with niche, follower counts, and other public profile details you provide.
Applications: which campaigns you apply to, and any information you include with an application.
Find Brands activity: which brands you save or pitch, the outreach drafts you write or generate, and your outreach status notes, so you can track your own pitches.
Google Account (optional): if you connect Gmail for Find Brands outreach, we store the connected Gmail address, an encrypted authorisation token, and synced message metadata/content needed to show brand replies in your dashboard. See Google Account access (Gmail) below.

From everyone

Messages: anything you send us via the contact form, email, or DM verification.
Usage data: pages visited, features used, filters applied, and time spent in the dashboard.
Device and browser data: browser type, operating system, IP address, and referring URL.
Cookies and similar technologies: see the Cookies section below.

How we access creator profiles

The profile information behind a creator's public campaign applications, such as follower counts, niche, and bio details, comes from publicly available social profile data plus what the creator tells us directly. We never access, connect to, or log into any brand's or creator's social media account. Our outreach team approaches creators using aveoreach's own accounts and sessions, never a brand's login.

Brand data behind Find Brands

Find Brands surfaces brands that are actively running paid social ads as potential collaboration opportunities for creators. This is data about businesses, not individuals: publicly available advertiser and ad-creative data from the Meta Ad Library, plus public business contact emails found either on a brand's own website or through business-contact lookup providers (currently Hunter.io). We do not use this to look up or infer anything about you.

3. How we use your information

To create and manage your account, whether you're a brand, an agency, or a creator.
To verify creator account ownership before allowing applications.
To match campaign briefs with relevant creators and conduct outreach on the brand's behalf.
To show brands the creators who apply to their campaigns, and to share a creator's contact email with a brand once that brand selects them.
To power Find Brands: surfacing brands with active ad spend as outreach opportunities, and, if you connect Gmail, sending a pitch you compose from your own Google Account (only when you choose to send it) and syncing replies so they can appear on the related brand thread in your dashboard.
To send transactional emails (verification confirmation, new applicant, selection notice, password reset).
To respond to your support messages.
To improve the platform: understanding which features are used most helps us prioritise what to build next.
To send occasional product updates if you opt in. You can unsubscribe at any time.

We do not use your data to train AI models, sell advertising, or build profiles for third parties.

5. How long we keep it

We keep your account data for as long as your account is active. If you close your account, we delete your personal data within 30 days, except where we are required to retain it for legal compliance purposes.

Campaign briefs and application data are retained in your dashboard until the relevant campaign is deleted or you close your account.

If you connect Gmail, synced mailbox messages stored for Find Brands are kept while the connection is active (and deleted when you disconnect or close your account), except where we must retain records for legal compliance.

6. Your rights

Depending on where you are located, you may have the right to:

Access: request a copy of the personal data we hold about you.
Correction: ask us to correct inaccurate data.
Deletion: ask us to delete your personal data ("right to be forgotten").
Portability: receive your data in a structured, machine-readable format.
Objection: object to certain uses of your data.
Withdraw consent: where processing is based on consent, withdraw it at any time.

To exercise any of these rights, email info@aveoreach.com. We'll respond within 30 days.

7. Cookies

We use a small number of cookies:

Essential cookies: keep you logged in and remember your session. The site does not work without these.
Analytics cookies: anonymised page-view data that helps us understand which parts of the product people use. No cross-site tracking.

We do not use advertising or third-party tracking cookies. You can disable cookies in your browser settings, though some features may not work correctly without session cookies.

8. Google Account access (Gmail)

Creators may optionally connect a Google Account so that Find Brands pitches are sent directly from their own Gmail account instead of from aveoreach on their behalf, and so brand replies can be synced into their aveoreach dashboard. This section explains exactly what that access is and is not.

What we request: the gmail.send permission (to send a message via the Gmail API when you choose to send a pitch) and the gmail.readonly permission (to sync email messages so brand replies can be matched to your outreach threads and shown in Find Brands). We also request userinfo.email so we can display the connected address. We do not request access to contacts, calendar, Drive, or other Google products beyond these Gmail-related scopes.

What we store: the email address of the connected Google Account; an authorisation token encrypted at rest (AES-256); and synced message metadata and content needed to show outreach threads and brand replies in your dashboard. We never see or store your Google password.

How we use it: (1) to send the outreach message you compose and explicitly choose to send through Find Brands, to the brand you are pitching; and (2) to periodically sync mailbox messages so replies can appear on the related brand thread in aveoreach. We do not use Gmail access to send any other email, and we do not sell or use mailbox contents for advertising. aveoreach's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: we do not use this data for advertising, we do not transfer or sell it to any third party, we do not use it to train generalised AI or machine-learning models, and no aveoreach employee reads it except where necessary for security, to comply with law, or with your explicit consent.

Disconnecting: you can disconnect Gmail at any time from your account settings, which deletes the stored token (and associated synced mailbox data we no longer need) and revokes aveoreach's access with Google. You can also revoke access directly from your Google Account's own permissions page at myaccount.google.com/permissions.

9. Security

We use HTTPS everywhere, encrypt data at rest, and limit access to personal data to team members who need it to do their job. No method of transmission over the internet is 100% secure. If you believe your account has been compromised, email us immediately at info@aveoreach.com.

10. Children

aveoreach is a business tool intended for adults. We do not knowingly collect personal information from anyone under 16. If you believe a minor has provided us with their data, please contact us and we'll delete it promptly.

11. Changes to this policy

If we make material changes, we'll notify you by email or with a notice in your dashboard before the change takes effect. The "last updated" date at the top of this page reflects the most recent revision.

12. Contact us

Questions, requests, or concerns about this policy:

Aveo Software, aveoreach
Email: info@aveoreach.com

We aim to respond to all privacy-related enquiries within 5 business days.