Privacy Policy

Two different groups of people appear in StealthMatch:

• Users — people with an account: agency staff, and individuals who use the platform to plan campaigns.
• Creators — the talent listed in the creator directory. Creators do not have accounts, but information about them is held in the platform by the agency that represents them.

• Account details — your name, email address, and the name of your workspace. If you sign in with Google, we receive your name, email address and profile picture from Google. We never receive your Google password.
• What you create in the platform — campaign briefs, budgets, shortlists and approvals, Contracts of Engagement (CEs), uploaded contracts and SOWs, rate cards you upload, post links and their performance numbers, comments, and feedback you submit on the review page.
• Basic technical data — the session cookie that keeps you signed in, and standard server logs kept by our hosting provider. We do not use advertising cookies, and we do not track you across other websites.

The directory holds professional information about creators: name, handle, platform follower counts, engagement rate, location, niche, a short bio, profile image, and commercial rates. This is business information used to match talent to campaigns.

Each creator is assigned to the agency that represents them. That agency is responsible for the accuracy of their entry and for having the right to list them. If you are a creator and want to see, correct or remove your entry, email us at pyroracer@gmail.com and we will act on it, and put you in touch with the agency holding the record.

Rates are protected. A creator's exact negotiated rate is visible only to the agency that represents them. Everyone else sees an estimated range based on the creator's tier.

StealthMatch uses AI to shortlist creators, read uploaded briefs, draft campaign strategy, summarise results and search for public mentions of a campaign. To do that, we send the relevant content to third-party AI providers.

• What is sent — the campaign brief and its details, and the professional profile data of candidate creators. Uploaded brief documents are sent for text extraction.
• Who it is sent to — Anthropic, and where configured as a fallback, OpenAI and Google (Gemini). Which one handles a request depends on availability.
• Public web search — for social listening and talent discovery, the AI provider performs searches of publicly available web content.

We do not send your uploaded contracts or SOWs to AI providers. We do not permit these providers to use your content to train their models under the business terms we use, but you should treat AI features as you would any external service and avoid pasting information you are not permitted to share.

AI output is a recommendation, never a decision. A human on your team approves every shortlist and every CE.

When you share a CE or a campaign report, StealthMatch creates a link containing a long, unguessable code. Anyone holding that link can open the page without signing in. That is deliberate — it is how a client reads a proposal without needing an account.

It also means the link is the only protection. Treat it like a password: send it to the people who need it, and revoke it when the deal is done.

We do not sell your data, and we do not share it for advertising. We use the following providers to run the service:

• Supabase — database, sign-in and file storage. Our data is held in the Singapore region.
• Vercel — application hosting and delivery.
• Anthropic, OpenAI, Google — the AI features described above.
• Google — sign-in with Google, and the YouTube Data API when you ask StealthMatch to fetch a video's public view count.

We will also disclose data if we are legally required to, and we will tell you unless we are prohibited from doing so.

• A campaign is visible to the person who created it, anyone they add to it, the workspace owner, and anyone granted agency-wide oversight.
• Other agencies and individual users can see creators in the shared directory, but never your campaigns, your CEs or your clients.
• Personal accounts are private to the person using them. No agency can see their work.

We keep your account and your campaign records for as long as your workspace is active, because campaign history is the point of the product. If you close your account, tell us and we will delete your personal data and your workspace content within 30 days, except where we are required to retain records for legal or accounting reasons.

Access is enforced in the database itself, not only in the interface — the rules that decide who may read what are applied to every query. Traffic is encrypted in transit. Uploaded contracts are held in private storage that is not publicly readable.

No system is perfect. If you find a security problem, please email pyroracer@gmail.com rather than posting it publicly, and we will fix it.

Under the Philippine Data Privacy Act of 2012 (RA 10173), and equivalent laws where they apply to you, you may ask us to:

• See the personal data we hold about you
• Correct anything that is wrong
• Delete your data, where we are not required to keep it
• Object to a particular use of it
• Receive a copy of your data in a portable format

Email pyroracer@gmail.com and we will respond within 30 days. If you are not satisfied, you may complain to the National Privacy Commission of the Philippines.

StealthMatch is a business tool and is not intended for anyone under 18. We do not knowingly create accounts for minors.

If we change how we handle data in a way that materially affects you, we will update this page and tell account holders. The date at the top always reflects the current version.

Tier One Entertainment — email pyroracer@gmail.com.