Your data, plainly.

vuso.ai is a marketing site. It has no accounts and no forms. We use Vercel Analytics, which is cookie-free and aggregates anonymised page views and referrers — it does not identify you or track you across sites.

If you email hello@vuso.ai, we hold your email and message to reply — nothing else is done with it.

Applications happen on our portal (portal.vuso.ai). During signup and onboarding we ask for your name and email, where you're based, your date of birth, how you identify, your social handles, your niche, and a description of your content and audience.

We also ask about your working preferences: your ballpark rates, brands you've worked with, whether you felt fairly paid, any exclusivity agreements, categories you'd never promote, what you want from working with us, and a profile photo.

We ask your date of birth because some brand categories are age-restricted, and where you're based because it determines which brands and contracts are appropriate for you. We use the rest to assess your application, build your creator profile, and — if accepted — match and pitch you to brands.

Applying requires agreeing to this policy and to our Terms of Service. We record when you agreed and which version of each document you were shown, so that a later change to the wording cannot be presented as something you had already accepted.

Connecting Instagram, TikTok or YouTube is optional and entirely your choice. In every case you authorise the connection with the platform itself, so we never see your password. Instagram and TikTok go through a service called Phyllo; YouTube goes directly to Google, described separately below.

What we receive is more than the public view of your profile. It includes your follower and following counts and how they change over time; your posts, captions, thumbnails and links; and how each post performed — views, likes, comments, shares, saves, reach, impressions and watch time. It also includes a breakdown of your audience by age, gender and location, and, where a platform reports it, the revenue you earned from that platform.

For Instagram and TikTok we store Phyllo's response as we receive it. For some platforms that response also contains the email address on your account. It can technically carry further profile details such as a phone number or date of birth; we don't use those, and as of August 2026 no connected account has supplied them.

YouTube

YouTube is handled by us directly with Google, and Phyllo is not involved in it at all. There are two separate things here, and they are deliberately kept apart.

The public figures — your videos, their views, likes and comments, and your subscriber count — are published by YouTube, and we read them using our own access to YouTube's API. That needs no permission from you.

Who watches you is not public. Your audience's age, gender and country belong to you, and YouTube releases them only if you personally sign in to Google and agree. That is optional, it is a separate step from linking the account, and the app and portal describe it as sharing your audience rather than connecting.

If you do agree, we ask Google for read-only access to your YouTube analytics and nothing else — we cannot post, edit or delete anything on your channel. Google gives us a long-lived credential so we can refresh those figures each night without asking you again. We treat that credential as we would a password: it is stored so that only our own servers can read it, never sent to a browser or an app, and not readable even by you.

You can withdraw that permission at any time. Disconnecting YouTube with us deletes the credential, so we can no longer read your analytics at all. You can also remove our access from your Google account directly, under the third-party apps section — and if you want the permission to stop appearing in that list, doing it there is the step that removes it.

You can disconnect any account at any time, and we delete the data we received through it.

Brands see your media kit: your name and photo, bio, niche, follower counts, audience demographics, your best-performing posts, and your rates if you've chosen to show them. You control which platforms appear on it.

Brands never see your email address, your date of birth, your earnings, or the fees from your other deals. We do not sell your personal data.

Two parts of the service involve people who aren't our clients, and we'd rather say so than leave it buried.

When we sync your content we may also receive comments left on it, including the commenter's username. Your audience demographics are group percentages — age bands, gender split, countries and cities — not information about identifiable people. We also hold work contact details for people at brands so we can arrange deals.

We rely on our legitimate interests in running a creator management service, balanced against those people's privacy. Anyone can email hello@vuso.ai to have theirs removed.

Our iPhone app shows you the same information as the portal. So that screens load instantly, it keeps a copy of your most recent data on your phone. That copy is deleted when you sign out.

The app collects nothing beyond what's described above. There is no advertising, no tracking, and no analytics inside it.

We don't sell your data or share it for advertising. We use these providers to operate: Supabase (our database, logins and file storage), Phyllo (Instagram and TikTok data), Google (YouTube data, including your audience breakdown if you have shared it), Resend (our emails), Vercel (hosting), and Apple (distributing our app).

Some of these operate outside the UK, mainly in the United States. Where data is transferred there, it is protected by the safeguards UK data protection law requires.

We keep your account and social data while your account is open, and delete it when you ask us to or when it's no longer needed. Applications we decline are deleted once we no longer need them.

Records of deals and payments we keep for longer, because tax and accounting law requires it. When someone asks us to delete their data we keep a short note that we did, containing only an email address and a date, so we can show the request was honoured.

We're still setting exact retention periods and will state them here before the founding 100 opens.

Under UK GDPR you can ask us to show you what we hold, correct it, delete it, send you a portable copy, or stop a particular use. You can also object to anything we do on the basis of legitimate interests. Email hello@vuso.ai or use the delete option in your profile. We respond within one month, free of charge.

One honest caveat: we can't delete everything immediately, because tax law requires us to keep financial records of work we've done together. We delete everything we're permitted to and keep only what we must.

Your data is encrypted in transit and at rest. Our database enforces access rules itself, so one creator's account cannot read another's. Only our team can reach the admin systems, and privileged actions are logged. If a breach ever affected you, we would tell you and the ICO as the law requires.

If you're unhappy with how we've handled your data you can complain to the ICO at ico.org.uk. We'd rather you told us first so we can put it right.

vuso is the data controller for the information described here. For any question about your data, or to make any of the requests above, contact hello@vuso.ai.