This Privacy Policy explains how NewWave Platforms, Inc.(“NewWave”, “we”, “us”) collects, uses, and shares information when you use the NewWave mobile app and website (the “Service”). NewWave is a UGC (user-generated content) campaign platform that connects brands with content creators. If you don’t agree with this policy, please don’t use the Service.
Who this applies to
NewWave serves two kinds of users in one app:
- Creators: people who make content for brand campaigns and get paid.
- Brands: businesses that run campaigns and review and approve creator content.
Information we collect
Information you provide
- Account & contact information: name, email address, phone number, password, and the sign-in method you choose (email, phone, Google, or Apple).
- Profile information: creator profile details, portfolio links, social handles, avatar, and (for brands) workspace and company details.
- Content you submit: videos, images, captions, messages, and other materials you upload or send. Brands can view content that creators submit to their campaigns.
- Payment & payout information: handled by our payments processor, Stripe. We receive limited payout and transaction data (amounts, status) but don’t store full card or bank-account numbers ourselves.
- Support communications: information you send us when you contact support.
Information collected automatically
- Device & technical data: app version, device type and operating system, and a push-notification token (if you enable notifications).
- Usage & campaign performance: how you interact with campaigns and content, and performance metrics (views, likes, comments) for content you submit.
Information from third parties
- Sign-in providers: if you sign in with Google or Apple, we receive basic profile information (such as name and email) from that provider.
- Public social-platform metrics: when a creator links a published post (e.g. TikTok, Instagram, YouTube, Facebook), we collect publicly available performance metrics for that post to calculate views and payouts.
- Authorised social-platform data: if a creator chooses to connect a social account (see Connected social accounts), we also receive data that is not public, read with their permission and only for as long as the account stays connected.
We do not use third-party advertising, analytics, or cross-app tracking SDKs, and we do nottrack you across other companies’ apps or websites.
Device permissions
The app may ask for permission to use your camera, microphone, and photo library so you can record and upload content, and to send push notifications. You can grant or revoke these in your device settings at any time.
Connected social accounts
Connecting a social account is optional and separate from having an account with us. Nothing below is collected unless a creator completes the connection themselves, and disconnecting deletes it.
A creator may connect their Instagram professional account so NewWave can show them, and the brands they choose, how their campaign posts actually performed. With their authorisation we read:
- Account basics: the Instagram user id and username of the connected account.
- Insights for campaign posts only: reach, views, likes, comments, saves, shares, total interactions, follows, profile visits and watch time. We read these only for posts the creator submitted as a deliverable on a NewWave campaign, never for the rest of their account.
- Audience make-up:aggregate counts of the creator’s followers by country, age range, gender and city, as reported by Instagram. These are group totals. They never include any individual follower’s identity, profile or contact details, and we cannot see who follows a creator.
Access is read-only. We never post, comment, react or send messages from a connected account, and we never change anything inside it.
A creator controls who sees this. Post insights are shared with a brand only for that brand’s own campaign, and only after the creator agrees on a consent screen naming that brand. Audience make-up is shared only if the creator turns it on, either for one brand or for brands viewing their creator profile. Every one of these can be withdrawn independently, at any time, from the creator’s Profile page, and disconnecting the account withdraws all of them at once.
We keep a record of what a creator agreed to and when, including after they withdraw it, because it is the evidence of the permission they gave. That record contains no Instagram data.
Deleting this data is described in full on our Data Deletion page.
Advertising accounts
A brand may connect a Meta or TikTok advertising account so NewWave can show paid performance alongside organic performance. We read advertising reporting figures only (impressions, clicks, reach, spend and conversions). We never create, edit, pause or delete an ad, and never spend a budget.
How we use information
- Provide and operate the Service (accounts, campaigns, content review, payouts).
- Connect creators with relevant brand campaigns.
- Process payouts and billing through Stripe.
- Calculate campaign performance and creator earnings.
- Send transactional and (if enabled) push notifications.
- Provide support, maintain security, prevent fraud, and comply with law.
How we share information
- Between campaign participants: creators’ submitted content and relevant profile information are shared with the brand running that campaign; brands’ campaign details are shown to participating creators.
- Service providers running our infrastructure: Supabase (authentication and database), Amazon Web Services (cloud storage and processing), Stripe (payments and payouts), and Apple / Google (sign-in and push delivery).
- Legal & safety: when required by law, to enforce our terms, or to protect rights and safety.
- Business transfers: in connection with a merger, acquisition, or sale of assets.
We do not sell your personal information.
Payments
Payments and payouts are processed by Stripe, subject to Stripe’s privacy policy. NewWave does not receive or store full payment-card or bank-account numbers.
Data retention
We keep personal information for as long as your account is active or as needed to provide the Service, comply with legal obligations (including tax and payment records), resolve disputes, and enforce our agreements. When no longer needed, we delete or de-identify it.
Your rights and choices
- Access, correction, deletion: you can access and update most profile information in the app, and request access to or deletion of your personal information by emailing support@new-wave.ai.
- Delete your account: you can delete your account from within the NewWave app, or by emailing support@new-wave.ai. Deleting your account removes your personal data, subject to records we must retain by law (e.g. payment and tax records).
- Push notifications: turn these off in your device settings.
- Tracking: we do not track you across other apps or websites.
- Region-specific rights: depending on where you live (e.g. the EEA/UK or California), you may have additional rights such as the right to object to, restrict, or port your data. Contact us to exercise them.
Security
We use industry-standard safeguards, including encryption in transit (HTTPS) and secure on-device storage of your login session. No method of transmission or storage is 100% secure, but we work to protect your information.
Children
NewWave is not directed to children. You must be at least 18 years old (or the age of majority where you live) to use the Service. We do not knowingly collect information from children under 13.
International users
We operate in the United States. If you use the Service from outside the U.S., your information will be transferred to and processed in the U.S. and other countries where we or our providers operate.
Changes to this policy
We may update this policy from time to time. We’ll post the updated version here and revise the “Last updated” date. Material changes may be communicated in-app or by email.