Privacy Policy

1. Who we are

aveoreach is a free creator marketplace operated by Aveo Software. Brands and agencies post free campaign briefs, our outreach team approaches matching creators from our network, verified creators apply, and brands select who they want to work with. This policy explains what we collect from both sides of that marketplace and how we handle it.

When this policy says "aveoreach," "we," "us," or "our," it refers to Aveo Software and the aveoreach platform at aveoreach.com.

2. What we collect

If you're a brand or agency

• Account details: name, email address, company name, and password when you sign up.
• Campaign briefs: the niche, follower range, budget, platforms, and location you specify when posting a campaign.

We do not currently charge for any part of the service, so we do not collect payment information from brands or agencies.

If you're a creator

• Account details: name, email address, and password when you sign up.
• Verification: the social handle you DM us from to prove account ownership, and the resulting verified status on your profile.
• Profile information: up to 10 profile URLs or handles across platforms, along with niche, follower counts, and other public profile details you provide.
• Applications: which campaigns you apply to, and any information you include with an application.
• Find Brands activity: which brands you save or pitch, the outreach drafts you write or generate, and your outreach status notes, so you can track your own pitches.
• Google Account (optional): if you connect Gmail for Find Brands outreach, we store the connected Gmail address and an encrypted authorisation token that lets us send a pitch on your instruction. See Google Account access (Gmail) below.

From everyone

• Messages: anything you send us via the contact form, email, or DM verification.
• Usage data: pages visited, features used, filters applied, and time spent in the dashboard.
• Device and browser data: browser type, operating system, IP address, and referring URL.
• Cookies and similar technologies: see the Cookies section below.

How we access creator profiles

The profile information behind a creator's public campaign applications, such as follower counts, niche, and bio details, comes from publicly available social profile data plus what the creator tells us directly. We never access, connect to, or log into any brand's or creator's social media account. Our outreach team approaches creators using aveoreach's own accounts and sessions, never a brand's login.

Brand data behind Find Brands

Find Brands surfaces brands that are actively running paid social ads as potential collaboration opportunities for creators. This is data about businesses, not individuals: publicly available advertiser and ad-creative data from the Meta Ad Library, plus public business contact emails found either on a brand's own website or through business-contact lookup providers (currently Hunter.io). We do not use this to look up or infer anything about you.

3. How we use your information

• To create and manage your account, whether you're a brand, an agency, or a creator.
• To verify creator account ownership before allowing applications.
• To match campaign briefs with relevant creators and conduct outreach on the brand's behalf.
• To show brands the creators who apply to their campaigns, and to share a creator's contact email with a brand once that brand selects them.
• To power Find Brands: surfacing brands with active ad spend as outreach opportunities, and, if you connect Gmail, sending a pitch you compose from your own Google Account, only when you choose to send it.
• To send transactional emails (verification confirmation, new applicant, selection notice, password reset).
• To respond to your support messages.
• To improve the platform: understanding which features are used most helps us prioritise what to build next.
• To send occasional product updates if you opt in. You can unsubscribe at any time.

We do not use your data to train AI models, sell advertising, or build profiles for third parties.

4. Who we share it with

Because aveoreach is a marketplace, some information is shared between brands and creators as part of how it works:

• Campaign briefs are shared with creators we approach as an invitation to apply.
• Applicant profile information (handle, niche, follower count) is shown to the brand whose campaign a creator applied to.
• A creator's contact email is shared with a brand only after that brand selects the creator for their campaign.

We also share data with service providers that help us operate aveoreach, and only to the extent needed:

• Email service provider: transactional emails (verification, applicant, and selection updates), and Find Brands pitches sent on your behalf when Gmail isn't connected.
• Google (Gmail API): only if you connect your Google Account, used solely to send a Find Brands pitch you compose and choose to send - see Google Account access (Gmail).
• Business-contact lookup provider (Hunter.io): queried with a brand's public domain to find that brand's public contact email for Find Brands - never queried with your personal information.
• Cloud infrastructure: hosting and database storage.
• Analytics: aggregate, anonymised usage statistics.

We do not sell, rent, or trade your personal information to any third party for their own marketing purposes.

We may disclose information if required by law, or to protect the rights, property, or safety of aveoreach, our users, or others.

5. How long we keep it

We keep your account data for as long as your account is active. If you close your account, we delete your personal data within 30 days, except where we are required to retain it for legal compliance purposes.

Campaign briefs and application data are retained in your dashboard until the relevant campaign is deleted or you close your account.

6. Your rights

Depending on where you are located, you may have the right to:

• Access: request a copy of the personal data we hold about you.
• Correction: ask us to correct inaccurate data.
• Deletion: ask us to delete your personal data ("right to be forgotten").
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to certain uses of your data.
• Withdraw consent: where processing is based on consent, withdraw it at any time.

To exercise any of these rights, email info@aveoreach.com. We'll respond within 30 days.

7. Cookies

We use a small number of cookies:

• Essential cookies: keep you logged in and remember your session. The site does not work without these.
• Analytics cookies: anonymised page-view data that helps us understand which parts of the product people use. No cross-site tracking.

We do not use advertising or third-party tracking cookies. You can disable cookies in your browser settings, though some features may not work correctly without session cookies.

8. Google Account access (Gmail)

Creators may optionally connect a Google Account so that Find Brands pitches are sent directly from their own Gmail account instead of from aveoreach on their behalf. This section explains exactly what that access is and is not.

What we request: the gmail.send permission only - the ability to send a message via the Gmail API. We do not request, and cannot obtain through this permission, access to read your inbox, contacts, calendar, or any other Google data.

What we store: the email address of the connected Google Account, and an authorisation token encrypted at rest (AES-256). We never see or store your Google password.

How we use it: solely to send the outreach message you compose and explicitly choose to send through Find Brands, to the brand you are pitching. aveoreach's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: we do not use this data for advertising, we do not transfer or sell it to any third party, we do not use it to train generalised AI or machine-learning models, and no aveoreach employee reads it except where necessary for security, to comply with law, or with your explicit consent.

Disconnecting: you can disconnect Gmail at any time from your account settings, which deletes the stored token and revokes aveoreach's access with Google. You can also revoke access directly from your Google Account's own permissions page at myaccount.google.com/permissions.

9. Security

We use HTTPS everywhere, encrypt data at rest, and limit access to personal data to team members who need it to do their job. No method of transmission over the internet is 100% secure. If you believe your account has been compromised, email us immediately at info@aveoreach.com.

10. Children

aveoreach is a business tool intended for adults. We do not knowingly collect personal information from anyone under 16. If you believe a minor has provided us with their data, please contact us and we'll delete it promptly.

11. Changes to this policy

If we make material changes, we'll notify you by email or with a notice in your dashboard before the change takes effect. The "last updated" date at the top of this page reflects the most recent revision.

12. Contact us

Questions, requests, or concerns about this policy:

Aveo Software, aveoreach
Email: info@aveoreach.com

We aim to respond to all privacy-related enquiries within 5 business days.