Privacy Policy
Last updated: September 2, 2026
AIO Connect ("the Service") is a creator campaign platform operated by AIO Agency ("we", "us") in Toronto, Ontario, Canada. This policy explains what we collect, why, and the control you keep over it.
What we collect
- Account information — your name, email address, and password (stored as a salted hash, never in plain text).
- Creator profile — the details you enter during onboarding: display name, bio, location, languages, content categories, and social channel handles.
- Connected social data — when you connect a social account through its official login (for example, Instagram), we receive your account ID, username, account type, and performance metrics such as follower count through the platform's official API. We never see or store your social media password.
- Campaign records — applications, offers, contracts, content submissions, messages, and payment records created as you use the Service.
How we use it
- To operate your profile inside the AIO creator network and match you with brand campaigns.
- To represent your work accurately to the agencies and brands you collaborate with.
- To manage campaign workflows: offers, contracts, content review, and payment tracking.
- To keep records required for contracts and dispute resolution.
Who can see your information
- Your public creator profile (name, bio, categories, channels, and verified performance) is visible to AIO and approved agencies inside the network only — never on the open internet.
- Your contact details are private and are shared with a specific agency only under the conditions you accept (such as accepting an invitation or entering a campaign).
- We do not sell your personal information. We do not permit bulk export of creator contact information.
Social platform data
Data received from Instagram and other platforms is used solely to display your verified profile and performance within the Service, in accordance with each platform's terms. Access tokens are stored encrypted. You can disconnect a channel at any time from your profile, or by removing the app in your social account's settings — new data collection stops immediately, while historical campaign records are retained as described below.
Retention and deletion
Profile data is kept while your account is active. Contract, payment, and dispute records are retained as required for legal and accounting obligations. You may request deletion of your account and personal data at any time — see our Data Deletion page. Personal data no longer subject to a retention obligation is deleted or anonymized.
Where data lives
Data is stored with our infrastructure providers (Supabase and Vercel) in Canadian and US data centres, protected by encryption in transit and at rest, role-based access control, and audit logging.
Contact
Questions or requests: info@aio-agency.ca. You may also have rights under the laws of your province, state, or country (including PIPEDA in Canada) to access, correct, or delete your personal information.