Privacy policy

Who we are

Goodbird runs creator marketing campaigns end to end: finding creators, agreeing terms, checking content and handling payment. This policy covers the data we collect about businesses using Goodbird, creators using Goodbird, and creators we've identified as possible matches for a campaign but who haven't joined Goodbird.

Goodbird is in private beta, running a small number of pilot campaigns. Some of what's below describes practice that's still forming as we run our first campaigns — where that's the case, we say so plainly rather than overstate what's settled.

Account data

If you create a Goodbird account — as a business or as a creator — we collect what you give us directly: name, email address, company details for business accounts, and whatever you tell Kest or Wren about your campaign or your work. We use this to run your account, operate the campaigns you're part of, and contact you about them.

Public platform data

To find and evaluate creators for a campaign, Goodbird checks publicly available information from YouTube and TikTok about creator accounts: channel or profile information, public posts, public engagement counts (views, likes, comments, shares), and public comments. This applies to creators actively using Goodbird and to creators we've found through search or discovery who haven't joined Goodbird — the index of creators exists independently of signup, because gating it on signup would leave it empty.

Each field we hold about a creator is tracked with where it came from and when it was last checked — we call this provenance. Creator-facing and admin surfaces show this as an "observed" or "verified" label with a source and a date, rather than presenting a single unexplained number. This record grows over time as we check the same public sources again; older observations aren't deleted, only superseded for current display.

We also compute metrics from this public data — engagement ratios, view trends, posting frequency, and similar — to help us judge whether a creator's work fits a given campaign. These computed values are recorded with the model or method version used to produce them.

Data from connected accounts

If a creator accepts a Goodbird campaign, they connect their YouTube and/or TikTok account before that campaign begins. Connecting is a condition of accepting a campaign on Goodbird, regardless of how the deal is structured — we ask every creator to connect at that point rather than only some, so the same rule applies to everyone. Public discovery and shortlisting never require a connected account.

Once connected, Goodbird receives first-party data through the platform's own API on the creator's behalf: private analytics such as impressions and reach where the platform exposes them, and more reliable delivery figures for campaign content. This is what turns an "observed" field (estimated from public data) into a "verified" one (confirmed from the connected account) — that distinction is shown on the creator's own profile and in campaign reporting.

We use this connected data to track delivery on campaigns the creator is part of, and — in aggregate, not tied back to identifying an individual creator in outputs — to improve how we estimate reach for creators who haven't connected yet.

Use of YouTube API Services

Goodbird uses YouTube API Services. By using Goodbird where YouTube data is involved, you're also agreeing to be bound by the YouTube Terms of Service.

Google's own handling of information collected via the YouTube API is described in the Google Privacy Policy.

For creators who connect their YouTube account, Goodbird requests read-only access to profile, upload and analytics data (the youtube.readonly and yt-analytics.readonly scopes) in order to verify content and track delivery on campaigns they've accepted. A creator can revoke Goodbird's access to their YouTube account at any time from their Google account security settings. Revoking access stops new data from being pulled in; it doesn't delete records already collected for campaigns already run.

Use of TikTok's platform

Goodbird also integrates with TikTok, using TikTok's Login Kit and Display API for creators who connect their TikTok account, and public TikTok data for discovery and shortlisting. Use of TikTok's platform and APIs is governed by TikTok's Terms of Service and TikTok's own privacy practices are described in the TikTok Privacy Policy.

As with YouTube, a creator who connects their TikTok account can revoke Goodbird's access at any time from their TikTok app settings. Public TikTok data used for discovery and shortlisting is sourced through a third-party data provider — see "Who we share data with" below.

Who we share data with

We use a small number of named processors to run Goodbird. None of them get to use creator or business data for their own purposes beyond providing their service to us.

• Google (YouTube Data API, YouTube Analytics API, Google OAuth) — public YouTube data, and private analytics for creators who connect their YouTube account.
• TikTok (Login Kit, Display API) — account connection and first-party data for creators who connect their TikTok account.
• Scrape Creators — public TikTok data, transcripts, and delivery metric polling.
• Social Blade — historical growth data, used until Goodbird has accumulated enough of its own history to rely on that instead.
• Supadata — transcript retrieval supporting content review.
• LLM providers — used to classify content (for example, identifying sponsored segments or the tone of comments) and to help draft shortlist reasoning. We use a cheaper model tier for routine classification and a stronger model only where the output is customer-facing.

We haven't finalised a single published list of the exact LLM vendors and models in use, since we actively vary these as the product develops. If you'd like specifics for your own due diligence, contact us using the details below.

How long we keep data

Account data is kept for as long as your account is active, and for a reasonable period after closure to meet our legal and accounting obligations.

Public platform data about creators — including creators who haven't joined Goodbird — is kept as an append-only history: each time we check a public source, we record a new observation rather than overwriting the old one, so we can show when a value was last checked and how it's changed. This is what lets us show honest "checked N days ago" labels instead of presenting stale data as current. We don't yet have a fixed deletion schedule for this history; a creator or member of the public can ask us to stop processing their data and we will act on that request (see "Your rights" below).

Data from connected accounts is kept for as long as needed to run and report on the campaigns it relates to, and is deleted or anonymised once it's no longer needed for that purpose, campaign records and legal retention requirements aside.

Your rights

If you're in the UK, you have rights under UK GDPR over personal data we hold about you, including the right to:

• ask what personal data we hold about you, and get a copy of it;
• ask us to correct inaccurate data;
• ask us to delete data, in some circumstances;
• object to or ask us to restrict certain processing;
• ask for your data in a portable format, where that applies;
• complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), if you think we've got something wrong.

This applies whether you have a Goodbird account or you're a creator we've included in our public creator index without having signed up — we treat both as valid requests. To exercise any of these rights, contact us using the details below.

The wider legal groundwork behind our handling of public creator data — including the formal assessment of our legal basis for that processing — is an active, ongoing piece of work at Goodbird, not something we're treating as settled and closing the book on. We're not pretending otherwise here.

Changes to this policy

We'll update this page as our practices change, particularly as we move from pilot campaigns towards a wider launch. The date at the top of this page shows when it was last updated.

Contact us

For any question about this policy or your data, email privacy@goodbird.ai.

You can also read more about how Goodbird works on our About page.