Privacy Policy

Metaswap LLC (“Metaswap,” “we,” “us,” or “our”) operates a creator marketplace where brands fund campaigns and creators earn money by submitting social-media content and getting paid per verified view. This Privacy Policy explains what information we collect from creators and visitors, how we use and share it, the third-party providers we rely on, and the rights and choices you have.

This policy applies to metaswap.xyz, the Metaswap mobile app, and related services. Metaswap is intended solely for adults aged 18 and over.

Depending on how you use Metaswap, we collect the following categories of information:

• Account and authentication data. Your email address and authentication credentials, managed on our behalf by Clerk when you create or sign in to an account.
• Onboarding profile data. Your first and last name, date of birth, country, and content niche. We use your date of birth to verify that you are 18 or older and, together with your country, to determine payout eligibility.
• Connected social accounts. The handles and account identifiers of the TikTok, Instagram, YouTube, Twitch, Kick, and X (Twitter) accounts you choose to connect. TikTok accounts are connected through TikTok’s official Login Kit, which we use on a read-only basis. Instagram accounts are verified by a one-time code you place in your own profile bio, and public profile and post metrics for those accounts are retrieved through a third-party Instagram data provider. YouTube accounts are connected through Google’s OAuth consent screen using the read-only YouTube Data API (youtube.readonly) scope; we read your channel identity and public video statistics, such as view counts, and cannot modify your account or content.
• Content performance metrics. Public performance metrics — such as views, likes, and comments — for the videos and posts you submit to campaigns, which we use to verify views and calculate earnings.
• Payout and financial records. Records of your earnings, withdrawals, and completed payouts, and which payout method each withdrawal used. The identity and banking details needed to pay you are collected directly by the payment partner you choose, inside that partner’s own flow: Stripe for bank (ACH) and instant payouts, and PayPal for PayPal and Venmo payouts. Metaswap does not receive or store your full bank account number, card number, or government-ID document.
• Tax information. If you earn enough to require United States tax reporting, tax onboarding is handled by Stripe, which collects your taxpayer information (for example a W-9 or W-8 form and a taxpayer identification number) directly and prepares the corresponding year-end tax forms. Metaswap stores the status of that onboarding — whether it is complete — and the payment records the forms are based on, not your taxpayer identification number itself.
• Brand campaign funding. If you fund campaigns as a brand, your payment is taken through Whop’s hosted checkout (card or bank). Whop collects your payment details within its own flow and returns a record of the deposit to Metaswap; we do not receive or store your full card or bank details.
• Technical and usage data. IP addresses (used for rate limiting and abuse prevention) and website usage information collected through Google Analytics.
• Agreement records. When you accept our Terms of Service or Funding & Refund Policy — at sign-up, or when you authorize campaign funding — we record which version you accepted, when, the IP address and browser the acceptance came from, and what it related to. We keep these records as evidence of the agreement, including to respond to payment disputes, and we retain them for as long as we may need to evidence the transaction they relate to. This record is kept separately from, and for a different purpose than, the rate-limiting use of IP addresses described above.

We use the information we collect to:

• Create and operate your creator account and verify that you are 18 or older
• Connect your social accounts, retrieve submitted-content metrics, and verify views
• Calculate earnings and process payouts and withdrawals through our payment partners
• Detect and prevent fraud, fake or bot views, and other abuse of the marketplace
• Send transactional and service-related email relating to your account and activity, and — unless you turn them off — product announcements and activity digests
• Comply with tax, accounting, and other legal obligations
• Operate, secure, measure, and improve our website and services

We do not sell your personal information. Most email from Metaswap is transactional and service-related — verification codes, receipts, and alerts about your account. We also send product announcements and activity digests, which you can turn off at any time in your notification settings without affecting transactional email.

We share information only with trusted providers who process it on our behalf to operate Metaswap, and only to the extent needed to deliver the service. Each maintains its own privacy practices.

• Clerk — account authentication and credential management.
• TikTok — connecting your TikTok account through its official Login Kit and reading your public profile and video metrics on a read-only basis.
• HikerAPI — retrieving public Instagram profile and post metrics for the Instagram accounts you connect.
• Google (YouTube Data API) — connecting your YouTube account through Google’s OAuth consent screen and reading your channel identity and public video statistics on a read-only basis.
• Stripe — creator payouts to a bank account (ACH and instant), the identity verification (KYC) required to enable them, United States tax onboarding and year-end tax forms, and brand billing.
• PayPal — creator payouts to a PayPal or Venmo account, and the account verification PayPal performs to enable them.
• Whop — hosted checkout for brand campaign funding (card and bank deposits made by brands). Whop does not process creator payouts.
• Resend — delivery of transactional email.
• Brevo — delivery of announcement and lifecycle email to the address on your account, where you have not opted out.
• Expo — delivery of push notifications to the Metaswap mobile app on your device.
• Neon and Vercel — database hosting and application hosting, located in the United States.
• Cloudflare — content delivery and protection against abuse and denial-of-service attacks for metaswap.xyz; it processes your IP address and request metadata in transit.
• Google Analytics — measuring website usage.
• PostHog — product analytics and error reporting for the service (events tied to your account id, such as sign-up, campaign, and payout milestones, and server error diagnostics).
• Firebase Storage (Google Cloud) — hosting of campaign media such as cover images and instruction videos uploaded by brands.

We may also disclose information where required by law, to enforce our terms, or to protect the rights, safety, and property of Metaswap, our users, or the public.

Metaswap uses YouTube API Services. When you connect a YouTube account, you authorize Metaswap, through Google’s OAuth consent screen, to access your account on a read-only basis using the youtube.readonly scope. We use this access solely to read your channel identity and the public performance metrics — such as view counts — of the videos you submit to campaigns, in order to confirm campaign deliverables and calculate your payouts. We do not request write access and cannot create, change, or delete your YouTube account or content.

By connecting YouTube you also agree to the YouTube Terms of Service. Metaswap’s use of information received from YouTube API Services adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google’s handling of any data it processes is governed by the Google Privacy Policy.

We retain YouTube-derived metrics only as long as needed to confirm the related campaign submission and payout, and we do not sell or transfer this data or use it for advertising. You can revoke Metaswap’s access to your YouTube account at any time from your Google Account security settings, or by disconnecting the account within Metaswap.

If you are located in the European Economic Area or the United Kingdom, we process your personal data under the following legal bases:

• Performance of a contract. Operating your account, connecting your social accounts, verifying views, and paying you for eligible content.
• Legal obligation. Meeting tax, accounting, and know-your-customer (KYC) requirements associated with paying creators.
• Legitimate interests. Preventing fraud and abuse, securing our services, and measuring and improving our website — balanced against your rights and interests.

Where we rely on consent (for example, non-essential analytics cookies for EU/UK visitors), you may withdraw that consent at any time.

We use essential cookies set by Clerk to keep you signed in and maintain your session; these are required for the service to function. We also use Google Analytics to understand how visitors use our website.

For visitors in the EU and UK, analytics cookies are consent-gated and are set only if you agree. You can also control cookies through your browser settings. Disabling essential cookies may prevent you from signing in or using core features.

Metaswap is operated from and hosted in the United States (our database and application infrastructure are provided by Neon and Vercel in the U.S.). If you access Metaswap from the EEA, the UK, or elsewhere, your information will be transferred to and processed in the United States. Where required, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (or equivalent UK mechanisms) to protect personal data transferred out of the EEA and UK.

We keep your personal information for as long as your account is active and as needed to provide the service. When your account is deleted, we remove your profile information as described below. However, records of completed financial transactions (campaign payouts and withdrawals) are retained in de-identified form for up to seven (7) years as required by applicable tax, accounting, and legal obligations. We retain other information only as long as necessary for the purposes described in this policy or as required by law.

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, email privacy@metaswap.xyz. We will not discriminate against you for exercising your rights.

Deleting your account. You can permanently delete your account at any time from the Metaswap mobile app under Settings → Delete account. When you do, we remove your profile information, disconnect your linked social accounts at our integration provider, and destroy your credentials. As noted above, records of completed financial transactions are retained in de-identified form as required for accounting, tax, and legal compliance. You can also request deletion by emailing privacy@metaswap.xyz.

Notice at Collection. We collect the categories of personal information described in “Information We Collect” above — including identifiers (email, name, social handles and account IDs), demographic information (date of birth, country), commercial and financial information (earnings, payouts, and withdrawals), internet activity (website usage), and geolocation data derived from IP addresses. We collect this information for the business purposes described in “How We Use Your Information,” and we retain it as described in “Data Retention.”

California residents may request to know, access, correct, or delete their personal information, and are entitled to be free from discrimination for exercising these rights. To make a request, email privacy@metaswap.xyz.

We take reasonable administrative, technical, and physical measures to protect your information. Authentication is handled by Clerk; payout banking details, payout identity verification, and tax information by Stripe and PayPal; brand deposit payment details by Whop; and hosting by Neon and Vercel — each under their own security and privacy commitments. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Metaswap is not directed to anyone under the age of 18, and we do not knowingly collect personal information from anyone under 18. Creators must confirm their date of birth during onboarding to verify they are 18 or older. If you believe someone under 18 has provided us personal data, contact us at privacy@metaswap.xyz and we will delete it.

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the effective date above. Continued use of the site or services after changes constitutes acceptance of the updated policy.

For privacy-related questions or requests, contact Metaswap LLC at privacy@metaswap.xyz. For general support, email support@metaswap.xyz.