Privacy Policy

Last updated: October 5, 2026

1. About This App

MVP Affiliate ("the App", "we", "us") is a SaaS tool used by individual content creators (Amazon influencers, YouTubers, bloggers and affiliate marketers) to create, publish and distribute product review content on their own websites, YouTube channels, Amazon storefronts and social accounts. The App is operated by Gominplanet Holdings Ltd, an exempted company incorporated in Anguilla, British West Indies under the Business Companies Act, 2022 (company no. A000003427), registered office: The Hansa Bank Building, 1st Floor, PO Box 886, Landsome Road, The Valley, AI-2640, Anguilla, BWI (team@mvpaffiliate.io).

2. Data We Collect

  • Account email address and name (provided at signup).
  • Brand profile information you enter (brand name, bio, logo, niche, social links, contact email) and your writing voice samples.
  • Photos you upload to create face models for your thumbnails and designs.
  • Videos you upload or produce in the App, and the products (Amazon ASINs, links) you work with.
  • Details of the accounts you connect (for example your YouTube channel ID and name, your WordPress site address), and their access tokens, stored encrypted.
  • Content the App creates for you and its publishing history (posts, designs, comments, schedules).
  • Usage of the App's features, counted to apply your plan's limits.
  • Billing details are handled by Stripe; we do not store your card number.

3. Google and YouTube Data

MVP Affiliate uses YouTube API Services. By connecting your YouTube channel you also agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy.

What we access. When you sign in with Google to connect your channel, you choose which access to grant:

  • https://www.googleapis.com/auth/youtube.force-ssl: to read your own channel and videos (title, description, tags, thumbnail, privacy status, schedule, view count and captions), to update the title, description, tags, thumbnail, playlist, privacy or schedule of your own videos, and to post and edit comments from your own channel on your own videos.
  • https://www.googleapis.com/auth/youtube.upload: to upload videos you produced or chose in the App to your own channel.

What we do with it, and when. The App acts only on your own channel, and only for the features you use:

  • Write titles, descriptions and tags for your videos, and apply them when you click Apply.
  • Upload the videos you add to a Bulk Amazon upload batch, at the time you scheduled, once you press Launch.
  • Post the first comment with your product link on your videos when they go public, and a comment when a product you reviewed goes on sale, if you turned these on.
  • Read your videos and their captions so the App can write accurate blog posts, descriptions and clips from what you said.

Some of these run in the background after you set them up (a scheduled upload, a comment waiting for a video to go public). Nothing is published that you did not create, choose or schedule, and the App never reads, posts to or changes any channel other than the one you connected.

What we store. Your channel ID and name, your encrypted access tokens, and for your videos: the video ID, title, description, thumbnail link, view count and transcript, plus the comments and changes the App made for you.

Who we share it with. We do not sell, rent or share YouTube data with third parties for their own use, and we never use it for advertising. To write your titles, descriptions, posts and clips, the relevant text (for example a video's title, description or transcript) is processed by the AI providers listed in section 9, who act for us only to produce your content. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How long we keep it. YouTube data stored about your videos is refreshed from YouTube at least every 30 days, or deleted. When you disconnect YouTube in the App, we revoke our access at Google and delete your tokens and the stored YouTube data about your videos straight away. If you revoke access from your Google account instead, the stored YouTube data is deleted within 30 days.

How to revoke access. Disconnect YouTube from the App's Settings at any time, or remove MVP Affiliate on Google's security settings page at security.google.com/settings/security/permissions.

4. Pinterest Data

When you connect your Pinterest business account, we use Pinterest's OAuth flow and request the minimum scopes needed for the features you use:

  • boards:read: to list the boards on your own Pinterest account so you can choose where new Pins are saved.
  • boards:write: to create a new board, only when you ask for one inside the App.
  • pins:read: to show you metrics (impressions, saves, outbound clicks) for Pins the App published for you.
  • pins:write: to create Pins for your content when you publish one or schedule one for a time you choose.
  • user_accounts:read: to show which Pinterest account you connected.

We do not sell or share your Pinterest data, use it for advertising or to train AI models, interact with other accounts, or store your Pinterest password. Tokens are stored encrypted. You can disconnect Pinterest in the App at any time, which deletes the stored token, or revoke access from your Pinterest account settings under "Apps".

5. Facebook and Instagram Data

If you connect a Facebook Page or an Instagram professional account, we request only the scopes needed to list your Pages and accounts and to publish the posts, Reels and Stories you publish or schedule in the App. We do not read personal profile data and do not use Facebook or Instagram data for advertising. You can disconnect at any time from the App; we delete the stored access token on disconnection.

6. TikTok Data

When you connect your TikTok account, we use TikTok's OAuth flow and request the minimum scopes needed for the features you use:

  • user.info.basic: to show which TikTok account you connected (open_id, display name and avatar only).
  • user.info.profile: to show your TikTok profile link, bio and verified status in the App.
  • video.upload: to send a video to your TikTok account as a draft for you to finish in the TikTok app, when you publish it in the App.
  • video.publish: to publish a video directly to your TikTok feed when you publish it in the App, with the caption, privacy and audience you chose.

We do not sell or share your TikTok data, use it for advertising or to train AI models, interact with other accounts, or store your TikTok password. Tokens are stored encrypted and deleted when you disconnect. You can also revoke access in TikTok under "Manage app permissions". Your use of TikTok features is also subject to the TikTok Terms of Service and the TikTok Privacy Policy.

7. How We Use Your Data

  • To create your content: blog posts, video titles and descriptions, thumbnails, social designs, clips and comments.
  • To publish or schedule that content to the accounts you connected, when you publish it or for the time you chose.
  • To show your content history, usage and results inside the App.
  • To apply your plan's limits and bill your subscription.
  • To send account emails (sign-in, receipts, notices about your account).

We never publish anything you did not create, choose or schedule, and we do not sell your data.

8. Cookies and Data Stored on Your Device

The App stores and reads information on your device:

  • Sign-in cookies that keep you logged in. These are required for the App to work.
  • Browser storage (local storage) for your preferences, such as theme, menu layout and pinned features.
  • Meta Pixel cookies (_fbp, _fbc) on our public pages, to measure our own advertising.
  • Rewardful cookies, to credit a referral to the affiliate who sent you.
  • The optional SCOUT browser extension stores a link token in your browser (see section 12).

The App does not let third parties serve advertisements inside it. You can clear cookies and browser storage from your browser settings; clearing sign-in cookies signs you out.

9. Service Providers

We use these providers to run the App. Each processes data only to provide its service to us:

  • Anthropic, OpenAI, Google (Gemini), fal.ai and ElevenLabs: AI processing to write text, transcribe audio and create images and voice for your content.
  • Supabase: database and file storage (United States).
  • Vercel: web hosting.
  • Stripe: billing and subscriptions.
  • Resend: account emails.
  • The platforms you connect (YouTube, Pinterest, Facebook, Instagram, TikTok, WordPress and others), only to publish what you ask.

10. Data Storage and Security

Account data, content and integration credentials are stored in Supabase (PostgreSQL) on servers in the United States. Access tokens and other secrets are encrypted at rest. Access to production data is restricted to authorized personnel and protected by multi-factor authentication.

11. Data Retention and Deletion

We keep your data while your account is active, except YouTube data, which follows the timelines in section 3. To delete your account and all associated data, email team@mvpaffiliate.io from the address registered to the account. We delete your account and all associated data, including every access token we hold for you, within 30 days of the request.

12. Browser Extension (SCOUT)

The optional "SCOUT, MVP Affiliate" Chrome extension carries out, in your own signed-in browser, the steps the App cannot do through an API. It acts only on your own accounts and only for tasks you start in the App:

  • On Amazon Creator Connections and product pages: reads campaign and product details so you can choose campaigns and products to work with.
  • On Amazon's creator upload pages: uploads the videos you queued to your own Amazon storefront.
  • In YouTube Studio: uploads the videos you queued to your own channel, fills in their details, and posts and pins the comments you set up.
  • On YouTube: captures frames from your videos for your thumbnails.
  • Only if you grant the optional permission: prepares posts in your Facebook Groups for you to review. SCOUT never presses Post for you there.

It stores a link token in your browser (chrome.storage) to connect to your MVP Affiliate account; the token stays on your device and is only sent to mvpaffiliate.io. It sends to the App only the results of the tasks you started. It does not read your browsing history, passwords or payment details, does not use analytics or advertising, and does not sell or share data. Its permissions (activeTab, scripting, storage, tabs, downloads, alarms and the listed sites) are limited to these tasks, and its use is consistent with the Chrome Web Store User Data policy, including the Limited Use requirements. You can remove it at any time from Chrome, which deletes its stored token.

13. Children

MVP Affiliate is not directed to anyone under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

14. Changes to This Policy

We may update this Privacy Policy. The "Last updated" date at the top shows the most recent revision. Material changes are announced in the App or by email.

15. Contact

For privacy questions, complaints, deletion requests or anything else, contact us at team@mvpaffiliate.io.