Pholoh Creators Privacy Policy

Who we are

Pholoh LLC ("Pholoh", "we") operates the Pholoh creator and ambassador program at pholohcreators.com. This policy covers the data this site collects and how we use it. Contact: info@pholoh.com.

What we collect

• Application details you submit: name, email, country, social handles, follower counts, and your pitch.
• Program activity: clips you upload or link, grades, points, badges, event RSVPs, challenge entries, and posts, comments, likes, and reports you make in the ambassador Lounge.
• Order verification: whether a Pholoh order matching your program email used your personal program code. We read order metadata (order number, date, discount code, total) from our own store; we do not store your payment details.
• Connected social accounts (optional): if you choose to connect your Instagram or TikTok account, we receive your public profile (username, display name) and read-only performance statistics for your posts (views, likes, comments, shares) via the official Instagram Graph API and TikTok Display API. We never receive your social-account password, and we cannot post, message, edit, or delete anything on your account.

How we use it

• Run the program: approvals, discount codes, points, leaderboards, badges, and community features.
• Score clip performance to award Weekly and Monthly Winner badges (read-only statistics from connected accounts).
• Moderate the community (report review and automatic filtering of hateful language).
• Operate, debug, and secure the site.

We do not sell your personal information. We do not use your data for third-party advertising.

Storage & security

Data is stored on managed infrastructure (Render) in the United States. Social-account access tokens are encrypted at rest (AES-256). Access is limited to the small Pholoh team that operates the program.

Sharing

We share data only with the services needed to run the program: our store platform (Shopify) for order and discount verification, the platform APIs you explicitly connect (Meta / Instagram, TikTok), our hosting provider (Render), and email delivery. Each receives only what it needs.

Retention & your choices

• You can disconnect Instagram or TikTok anytime from your portal — we mark the connection revoked and destroy the stored token immediately.
• You can ask us to delete your program data entirely — see Data Deletion.
• We keep program records while your membership is active and for a reasonable period after, unless you request deletion.

Changes

If this policy changes materially we will update this page and note the new effective date below.