Privacy Policy

Manage is a creator analytics and business tool provided by Two West ("Manage", "we", "us"). This policy explains what data Manage collects when a creator connects their own social accounts, how that data is used, stored, and shared, and the choices a creator has. We do not sell personal data.

Information we collect

Account information. When you sign up, we collect your email address and authentication details through our authentication provider (Supabase Auth).

Connected social analytics. When you authorize a social account (Instagram, YouTube, TikTok, or Substack) through that platform's official login, we read the analytics that account exposes: follower or subscriber counts; reach, views, and engagement; per-post and per-reel or per-video performance; and, where the platform provides it and you meet its thresholds, aggregate audience demographics (for example age, gender, and location bands). These figures describe your audience in aggregate. We do not receive the identities of the individuals who follow or view your content. Substack has no official analytics API for your own stats (such as open rate, subscriber breakdown, or views), so its figures come from its public feed, the exports you provide, and at most an approximate public subscriber count, not a live analytics pull.

Content metadata. Titles, publish dates, thumbnails, and links for your own posts, so we can show top content and build reports.

Business records you enter. Information you add yourself, such as brand deals, revenue entries, invoices, and to-dos.

Access tokens. When you connect an account, the OAuth tokens that let us read your analytics are stored encrypted at rest.

How we use your information

• To show you your own analytics, growth over time, and top content.
• To generate brand-facing campaign performance reports and a media kit from your real numbers.
• To power optional AI-assisted drafting (see "AI processing" below).
• To operate, secure, and improve the service. With your consent, Two West may use the service to report on creators it manages.

AI processing

When you ask Manage to draft a pitch or audit, a bounded set of your own analytics (such as platform counts and top-content titles) is sent to our AI provider, Anthropic, through the Claude API, to generate the draft text. Brand-deal names and revenue figures are deliberately excluded from what is sent. This data is used only to produce your draft, and our AI provider does not use it to train its models. If no AI key is configured, Manage falls back to a non-AI template.

How we store and protect your data

Data is stored in Supabase (PostgreSQL). Every tenant table is protected by row-level security scoped to your account, so one creator cannot read another creator's data. When accounts are connected, their access tokens are stored encrypted at rest. The daily analytics sync runs as a trusted backend process and is the only component that operates across accounts, by design.

How we share data

• We do not sell your personal data.
• With the platforms you connect, through their official APIs and subject to their terms.
• With our infrastructure and AI providers (such as Supabase and Anthropic) solely to operate the features above.
• Only when you choose to: a media kit or report you publish through a share link becomes viewable by anyone with that link, until you unpublish it.

Retention and deletion

We keep your data while your account is active. The daily snapshots we capture form your owned analytics history and are retained until you delete your account or remove the connection. When you disconnect a platform, we stop collecting new data from it and delete that connection's stored access tokens and audience-demographic data. You can request deletion of your account and all associated data at any time by emailing us (see Contact), and we will complete the deletion within 30 days, except where we must retain limited records to meet a legal obligation. This section also serves as our data deletion instructions.

Google and YouTube API Services

Manage's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Manage uses YouTube API Services; by using these features you also agree to the YouTube Terms of Service, and Google's Privacy Policy applies. You can revoke Manage's access to your Google account at any time via Google security settings. We use YouTube data only to display your own analytics and to build your reports and media kit. Information received from Google and YouTube APIs is not used to develop, improve, or train generalized or non-personalized AI or machine-learning models, and is not transferred to others except as the Limited Use requirements permit. When you request an AI draft, any Google-derived figures included are used only to generate your own draft, never to train models.

Other platforms

Your use of connected platforms is also governed by their terms, including the Meta Platform Terms (Instagram) and the TikTok developer and user terms. You can revoke Manage's access from each platform's app or settings at any time.

Contact

Questions about this policy or a deletion request: contact the Two West team.