Privacy Policy
Effective 2026-11-14 · Last revised 2026-11-14
Prscnt is a talent-management tool, operated by Prscnt Group LLC, 121 Spectacle, Irvine, CA 92618 at app.prscnt.com. Agencies use it to track brand deals for the creators they represent, and creators can connect their own Instagram, TikTok and YouTube accounts to see and manage their own posts and performance in the Prscnt Studio, alongside the manager they authorise. This page says what each connection collects, what it is used for, how long it is kept, who else handles it, and how to end it.
Two different relationships
Two kinds of people give us data and they are never mixed together.
- Agency users sign in to run their own workspace. We hold the email address and name their sign-in provider gives us, and the business records they enter, upload or have their assistant report: brands, contacts, deals, rates, drafts, invoices and payments, including invoice and payment files they export from their own accounting software. Rows in such a file that do not match an invoice in Prscnt are discarded when the file is processed and are not kept. A workspace can also record what a creator earns on a platform that Prscnt cannot read, such as TikTok Creator Rewards, TikTok Shop affiliate earnings or YouTube ad revenue: an agency member uploads the earnings statement the creator downloaded from the platform (a spreadsheet, a PDF or a screenshot), a person checks what it says, and only then do we keep the figures, labelled “creator-reported”, and the statement file itself. Nothing is kept from a statement nobody confirms. Prscnt does not read these figures from the platform, and no statement or figure is sent to an AI model. Only members of that agency's workspace who handle its money, and only for creators in their own book, can see them; the creator, other workspaces and other customers do not.
- Creators may connect a social account. That grant belongs to the creator and is stored in the creator's own Prscnt account, or, for a creator connecting through an agency's link without a Prscnt account, in that agency's workspace. No workspace can read the credential itself. A creator may share a connected account with an agency they work with, one platform at a time, by pressing a button under a line that names the agency and says what it will see; they can stop sharing, or leave the agency, at any time. A creator who shares Instagram with an agency decides separately whether that agency may read their direct messages, read the comments on their posts, and run automatic replies the agency sets up, each from and until dates the creator picks. The creator can revoke any of these at once on their Connections page; access stops at the agency's next request. Prscnt records each change and each time the agency uses one of these permissions. A creator who joins an agency on Prscnt and shares an account with it also lets the people that agency authorises see, in Prscnt, the answers the creator gave in Prscnt's onboarding: their name, pronouns, business email and phone, how and when to reach them, country, time zone and turnaround, platforms and links, bio and content topics, brand wishlist, brands and categories to avoid, red lines and exclusivities, rates, gifting and affiliate preferences, preferred payment method and the business they invoice through. Their sizes and fit notes, pets, preferred airports and legal name are shown to that agency only for a campaign or contract that needs them (a fashion send sees sizes, a travel campaign the airport, a contract the legal name). Their minimum rate is not shown. The agency cannot change these answers. This stops when the creator stops sharing every account with that agency, or leaves it.
Details you choose to give us during onboarding. You can add details brands sometimes need: your date of birth, mailing or shipping address, passport status, preferred airports and travel limitations, loyalty program names, whether and how family members or children appear in your content, skin, hair and shade details, allergies or sensitivities, and your W-9 tax form. Every one is optional. We keep them private in your account, use each one only for the purpose it was asked for (for example, your address only to ship products, your W-9 only for payment paperwork), share one with your manager or a brand only when a specific campaign needs it, and never use them for advertising, profiling or AI training. You can change or delete them at any time. Your date of birth, home or shipping address, passport details, allergies and other health details, and your W-9 are never sent to an AI assistant connected to Prscnt, yours or your agency's. They stay in the Prscnt web app.
Payments are handled by Stripe on its own pages. We keep the plan, the invoices and Stripe's customer reference, never a card number. Stripe also tells us a card's fingerprint, an identifier Stripe derives from a card that is not the card number. We keep only a one-way, keyed hash of it, use it only for the plan-fit check, and delete it after at most 12 months.
Who at Prscnt can see your account. The people who run Prscnt can see account, workspace, subscription and usage records (who belongs to a workspace, its plan and payment status, when it was last used, and counts of what it holds) to operate, support and secure the service. They do not read your messages, videos or other content except with your permission for support, for security, or where the law requires.
What a connected social account gives us
When a creator connects Instagram, TikTok, or YouTube, we ask the platform for exactly the permissions listed below, and nothing else. Each permission is used by a page in the Prscnt Studio that the account holder, and the manager they authorised, can open. The data is used to show the account holder their own account and performance, to let them (or that manager) answer comments and messages and publish posts they confirm, to report a sponsored post's results to the brand involved, to keep a history of the account's own numbers so they can see how it is doing over time (see what we keep from a connected account), and, for Instagram, to suggest what to post next (see content strategy). Prscnt also downloads and analyses a creator's own posted Instagram videos: under our Terms of Service for a creator with a Prscnt account, or with a separate permission for a creator who connects through an agency's link, as described under video analysis.
Sharing an account with an agency: pressing the button is your agreement
A creator with a Prscnt account shares a connected account with an agency they work with, one platform at a time. There is no box to tick. Where you share, the screen shows one line that names the agency, says what the agency and its AI assistant will see, and links this policy, directly above the button, and pressing the button is your agreement to exactly that. Prscnt records that you pressed it: which line you were shown (its version and a fingerprint of its exact text, with the agency's name), the agency, your account, the platform and the time.
- When you create an account from an agency's invitation. The first screen after you create your account shows a line that names the agency and ends with a link to this policy. Pressing “Agree and continue” on it is your agreement to share with that agency every account you connect afterwards, on Instagram, TikTok and YouTube, as described below, and to that agency's AI assistant reading the same figures. We record it for each platform when you connect it. Accepting our Terms of Service and this policy when you sign up is separate and is recorded as it always was.
- When you connect an account later. Your own Connect keeps the account in your own Prscnt account and shares nothing. For each agency you joined, the Connections page then shows “Share with” the agency, with a line above it that names the agency and the platform. Pressing it is your agreement to share that one account with that agency.
What each platform shares. The people the agency authorises in its Prscnt workspace see, in Prscnt, for as long as you share:
- Instagram: your profile, posts and insights, read live from Instagram, and the links, captions, dates, types and view, like and comment counts of your posts, which the agency may import into its content library (the agency's copy is deleted when you stop sharing); Prscnt's analysis of your posted videos, while the agency holds a seat for you, which the agency may quote when pitching you to brands and never receives as a copy; and the answers you gave in Prscnt's onboarding, as described under “Two different relationships”. Your direct messages, the comments on your posts and automatic replies are not part of this. They are separate permissions you give, from and until dates you choose, and revoke at any time.
- TikTok: your profile, your videos with their view, like, comment and share counts, and your account insights and audience percentages. Prscnt reads them live from TikTok each time and does not store them for the agency, and does not download or analyse your TikTok videos.
- YouTube: your channel's name, handle, picture and public statistics, your uploads with their public view, like and comment counts, and your YouTube Analytics reports for the last 28 days, including viewer age, gender and country percentages. Prscnt reads them from YouTube with read-only access, keeps some of these numbers for 30 days as described under what we keep from a connected account, does not send them to any AI model Prscnt uses, and does not use them to create scores or comparisons.
The agency's AI assistant. Pressing the button also lets the AI assistant the agency's people connected to Prscnt read the same figures when they ask it about you. For TikTok and YouTube Prscnt reads them live for each question and keeps no copy; the assistant receives them under the agency's own agreement with its provider, and we do not use them, or let them be used on our behalf, to train any model. For Instagram the assistant receives what it asks for of what the agency can see, under the same agreement. It reads only what the agency can see for you, for as long as you share.
How to stop. Press “Stop sharing” on an agency's card on your Connections page, for one platform, or “Leave” the agency to stop everything at once: the agency and its assistant lose access at the next request, and the agency's copy of anything we keep for it is deleted. Disconnecting the account in Prscnt, removing Prscnt in the platform's own settings (Instagram, TikTok, or your Google Account for YouTube), or writing to us at the address below also ends it. Stopping does not undo what the agency already saw while you shared. If you did not press the button, you have not shared.
Instagram (Instagram API with Instagram Login)
| Permission | What it lets Prscnt access | Where you see it |
|---|---|---|
instagram_business_basic | The account id, username, account type, profile picture, follower and post counts, and the account's own posts: id, caption, media type, date, link and thumbnail. | Studio › Instagram: the Profile panel and the Posts grid; and the roster, the creator's page and reports in Prscnt. |
instagram_business_manage_insights | Account insights for the last 28 days (reach, views, total interactions, accounts engaged, profile link taps, daily reach), follower demographics as percentages by country, age and gender, and per-post reach, views, likes, comments, saves and shares, and, for each Story while it is up, its link clicks (clicks on its link sticker), reach, views, shares, replies, follows, profile visits, total interactions and how people moved through it. | Studio › Instagram: the Insights panel and the line under each post, the Story link clicks section of the creator's Social metrics panel; and the roster, the creator's page and reports in Prscnt. |
instagram_business_manage_comments | Comments on the account's own posts (text, author username, time), and permission to reply to, hide or unhide one when a person confirms it, or to answer it with an automatic reply whose exact words the account holder approved in advance (see Replies from rules, below). | Studio › Instagram › Comments; rules in Studio › Instagram › Automation. |
instagram_business_manage_messages | Message threads other people have sent to the account (participants, sender, text, time), and permission to send a reply inside Instagram's 24-hour window when a person confirms it, or as an automatic reply whose exact words the account holder approved in advance (see Replies from rules, below). Prscnt never starts a conversation. | Studio › Instagram › Messages; rules in Studio › Instagram › Automation. |
The Studio reads Instagram live when a page is opened. What it shows is held only in server memory: profile, posts and insights are re-read after 10 minutes, comments and messages after 60 seconds, and nothing is kept in memory longer than 30 minutes. Comment and message text is never written to our database. When a person confirms a reply or a hide, we keep a single-use confirmation record that holds a fingerprint of the action, not its text.
Replies from rules. An Instagram account holder, or an agency they allow by pressing a separate button on their Connections page after sharing their Instagram with it, can set rules in Studio › Instagram › Automation that answer people who write to the account first: a keyword in a direct message, a keyword in a comment on posts they choose, a reply to or mention of their story, a first or unanswered message, a link to their messages that carries a code (a “ref” link, or its QR code), or one of up to four questions the account holder shows people before their first message (Instagram's “ice breakers”). The account holder can turn the agency's permission off at any time. Rules match fixed words and codes; no AI decides which rule applies. A rule's reply goes out in one of two ways:
- Suggested. Prscnt prepares the account holder's own reply, and nothing is sent until a person confirms that exact reply on Prscnt. A suggestion nobody confirms lapses when its window closes.
- Automatic. The account holder (or that agency) approved the reply's exact words in advance, on Prscnt. Only those words are sent, and editing them ends the approval. An approval lasts at most 90 days, and daily limits apply to each rule and to each account.
Either way, a reply goes only to a person who messaged the account, or commented on one of its posts, first, and only inside Instagram's reply windows: within 24 hours of the person's last message, or, for a comment, one private reply within 7 days of it (with a public reply under the comment, if the account holder wrote one). Prscnt never starts a conversation. A person who writes STOP gets no more replies from rules, suggested or automatic, unless they write START, and the account holder can pause one rule, one conversation, or all of them at once. Automatic replies are automated: no person types them at that moment. Following Meta's guidance, account holders should say so in the words they approve.
An account holder can also send one message to the people who tapped “notify me” in one of their replies and whose 24-hour window is open, and to no one else; a person approves the exact words and the number of people before it goes. If the account holder, or the agency they allowed, connects its own AI assistant to Prscnt, that assistant can read a conversation a rule handed to it, live from Instagram, and draft a reply; the draft is held in server memory for at most 30 minutes and is sent only when a person confirms it, or when it is word for word a reply approved in advance.
Replies from rules do not change what we keep of what people write: comment and message text is still never written to our database, except an email address or phone number a person types in answer to a reply that asked for it. To run them we keep the account holder's own rules, reply texts, questions and links with their settings, and:
- the ids Instagram gives the account, each person, and the message or comment being answered;
- for each person, their reply state: whether they wrote STOP, whether their conversation is paused, which step of a rule they reached and when the next one is due, when they last messaged (to keep to Instagram's windows), and whether a comment of theirs was already answered;
- labels the account holder's rules or team put on a person (tags, and custom fields such as “VIP” or a size): the account holder's own words, never the person's;
- each suggestion's state (waiting, sent, skipped or lapsed), when its window closes, and who confirmed or skipped it and when; and, for each automatic reply sent, the person's id and a fingerprint (a one-way hash) of the approved words, never the words;
- whether a person tapped “notify me”, and, for each message sent to many people, who it went to and whether it was sent (ids only);
- who on the team a conversation is assigned to, and the team's own internal notes on it, which the person never sees;
- where inbox sorting is switched on, facts Instagram gives about a person who messaged: their username, follower count, whether they are verified and whether they follow the account, whether they match a brand we know, and short topic codes (such as “collab” or “rates”) worked out from the message without keeping it. These are deleted after 90 days without an update. Someone on the team may save such a sender to the account holder's contacts as a prospect;
- an email address or phone number, only when a person types it in answer to a reply that asked for it, kept in the account holder's private contacts in Prscnt;
- daily counts: how often each rule ran, sent a reply or was completed, and how many times each short link in a reply was clicked, with no person, IP address or device behind a click.
The account holder can download these records (ids, labels, fields and captured contact details, never message text) as a file, or have Prscnt send chosen events (a captured email address or phone number, a finished rule, a day's link clicks, a sender sorted as a brand) to a web address they control. Prscnt sends only to the addresses they set up, and drops each event's content once it is delivered or has failed.
A person's labels, fields, “notify me” choices and undelivered events are deleted when they write STOP. All of it is deleted when the account is disconnected, Prscnt is removed in Instagram's settings, or a deletion request arrives, including a prospect saved from inbox sorting unless the team has since used it in a deal, outreach or draft. Two things are kept so the rules stay safe after a reconnect: the ids of comments answered that same day, so a comment is never answered twice, and that day's count of automatic replies, without the person's id, so the daily limit holds. The account holder's rules, links, questions and records of messages sent to many people stay, with every rule paused, until they delete them.
If a workspace imports the account's posts into its content library (the “content discovery” tool), we store each post's id, link, caption, date, type and the account's handle, and the view, like, comment, reach, save and share counts read at that time. See how long we keep data for what a disconnect removes.
Content strategy. From the Instagram numbers we keep (see what we keep from a connected account), Prscnt writes suggestions of what to try next (for example, “try two more carousels”) from fixed templates, without an AI model, and then checks the creator's later posts to see whether each suggestion worked. Suggestions are kept in the workspace that holds the connection or the share, and are never combined with another workspace's data or another creator's. A suggestion is decided within 60 days and deleted 90 days after its result was decided, and all of them are deleted at once with the account's numbers. TikTok and YouTube are not used for suggestions.
Copies of your own posted videos. Prscnt downloads and analyses the videos you posted on your connected Instagram account in one of two ways, and no other:
- With a Prscnt account, under our Terms of Service. It is part of the Terms of Service you accept when you sign up, and again whenever they change: by accepting them you license Prscnt to download the videos you have posted on an Instagram account you connect to your own Prscnt account, and to analyse them. We record that the Terms were accepted, which version, and a fingerprint of their exact text. If you do not want this, do not connect Instagram, or disconnect it at any time.
- Through an agency's connect link, without a Prscnt account. You have not accepted our Terms, so the link shows a separate, unticked box asking for it, and nothing is downloaded unless you tick it. We record when you ticked it and the exact wording shown.
Either way, we download the videos you posted on that account, using the video link
instagram_business_basic returns, and analyse them as described under
video analysis. Nothing is downloaded from anyone else's
account, and never photos. A video Instagram returns without a download link is
skipped and counted, never fetched another way.
The copies and the analysis are held by Prscnt, not by any agency. You can see the analysis in your own Prscnt account if your plan includes video analysis. An agency can see it in Prscnt only while you share your Instagram with that agency, by pressing its “Share with” button, under a line that says that the agency will see Prscnt's analysis of your videos and may quote it when pitching you to brands; or, if you connected through that agency's connect link, while the permission you gave there stands. Either way, only while the agency's subscription and its seat for you are active. No agency receives a copy of your videos or of the analysis.
We delete the copies, and the analysis made from them, when you disconnect Instagram, remove Prscnt in Instagram's settings, or ask Meta or us to delete your data, and, if you gave the permission on an agency's connect link, when you withdraw it. Stopping sharing with an agency, or leaving it, ends that agency's access; it does not delete the analysis, which you and any other agency you share with can still see.
If you remove Prscnt in Instagram's settings, or ask Meta to delete your data for this app, Meta notifies us through our deauthorize and data deletion callbacks and we act on it without you doing anything else. The deletion callback returns a confirmation code and a status page you can check.
TikTok
A TikTok account connects through one of two TikTok products, and the consent screen shows which. Through TikTok Login Kit, with the Display API and the Content Posting API:
| Permission | What it lets Prscnt access | Where you see it |
|---|---|---|
user.info.basic | The account's open id, display name and avatar. | Studio › TikTok: the Profile panel; and the roster, the creator's page and reports in Prscnt. |
user.info.profile | The @username, profile link, bio and verified badge. | Studio › TikTok: the Profile panel; and the roster, the creator's page and reports in Prscnt. |
user.info.stats | Follower, following, like and video counts. | Studio › TikTok: the Profile panel; and the roster, the creator's page and reports in Prscnt. |
video.list | The account's own videos: id, title, description, date, cover, link, length, and view, like, comment and share counts. | Studio › TikTok: the Videos grid; and the creator's page and reports in Prscnt. |
video.upload | Permission to send a video the creator chose to their TikTok inbox as a draft, which they finish and post inside TikTok. | Studio › TikTok › Post a video › Send to TikTok drafts. |
video.publish | Permission to post a video directly, with the title, privacy level, interaction settings and content disclosure the creator chose on the form, after they confirm a preview. | Studio › TikTok › Post a video › Post now. |
Through TikTok API for Business (read-only, no posting):
| Permission | What it lets Prscnt access | Where you see it |
|---|---|---|
user.info.basic | Display name and profile picture. | Studio › TikTok: Profile. |
user.info.username | The @username. | Studio › TikTok: Profile, and the Studio Overview card. |
user.info.profile | Bio, verified badge and profile link. | Studio › TikTok: Profile. |
user.info.stats | Follower, following, like and video counts. | Studio › TikTok: Profile. |
user.account.type | Whether the account is a Business or a Personal account. | Studio › TikTok: Profile. |
user.insights | The account's daily insights for the last 28 days (video views, profile views, likes, comments, shares, and for a Business Account follower changes and audience reached), and follower age, gender, country and city as percentages. | Studio › TikTok: Account insights and Audience. |
video.list | The account's posts with views, reach, likes, comments and shares. | Studio › TikTok: Videos. |
video.insights | Per-post average watch time, full-watch rate, new followers and top traffic source. | Studio › TikTok: Videos, the Post insights table. |
The Studio reads TikTok live when the page is opened and holds what it shows only in server memory, for at most 30 minutes. Separately, Prscnt keeps the account's own numbers listed under what we keep from a connected account, and the @username on the creator's profile in Prscnt. TikTok data is shown to the account holder and the manager they authorised, and never aggregated across creators for discovery or ranking. To post, the video you choose is written to a temporary file on our server for at most 30 minutes and deleted after it is sent to TikTok. Your use of TikTok remains governed by TikTok's Terms of Service.
A Pinterest account connects through Pinterest's own sign-in, with read-only access to the account, its boards and its Pins: user_accounts:read, boards:read and pins:read. Prscnt never creates, edits or deletes a Pin or a board. Prscnt keeps the account's own analytics: impressions, saves, Pin clicks, outbound clicks and, for video Pins, views, starts and watch time, for the last 90 days, read once a day. Pinterest data is shown to the account holder and the agency they shared it with. It is never pooled across creators, used for brand matching or benchmarks, or sent to any AI model Prscnt runs. When you ask your own AI assistant about a creator, it can show you this data, as it can show you any other number on your account. Your use of Pinterest remains governed by Pinterest's Terms of Service.
Twitch
A Twitch channel connects through Twitch's own sign-in, with read-only access to the channel's follower and subscriber totals: moderator:read:followers and channel:read:subscriptions. Prscnt never posts, edits, moderates, clips or deletes anything on Twitch, and never asks for your email address. Prscnt keeps the channel's own numbers: its follower and subscriber totals, the views and length of its recent past broadcasts and clips, how many streams are on its schedule in the next 7 days and, when the channel is live as we look, how many people are watching, read once a day. We keep numbers and Twitch's own ids only, never titles, descriptions, thumbnails, game names, or the names of your followers or subscribers. Twitch data is shown to the channel owner and the agency they shared it with. It is never pooled across creators, used for brand matching or benchmarks, or sent to any AI model Prscnt runs. When you ask your own AI assistant about a creator, it can show you this data, as it can show you any other number on your account. Your use of Twitch remains governed by Twitch's Terms of Service.
YouTube and Google services
Prscnt uses YouTube API Services. By connecting a YouTube account you agree to be bound by the YouTube Terms of Service, and Google's own handling of your information is described in the Google Privacy Policy.
| Permission | What it lets Prscnt access | Where you see it |
|---|---|---|
https://www.googleapis.com/auth/youtube.readonly | Your channel's name, handle, picture and public statistics, and your latest uploads with their titles, dates, thumbnails and public view, like and comment counts. | Studio › YouTube: the Channel panel and the Videos grid; and the roster, the creator's page and reports in Prscnt. |
https://www.googleapis.com/auth/yt-analytics.readonly | YouTube Analytics reports for your own channel over the last 28 days: views, watch time, average view duration, subscribers gained and lost, top videos, top countries, and viewer age and gender percentages, and for each video how many times its thumbnail was shown to viewers and what share of those showings led to a view (impressions and click-through rate). | Studio › YouTube: the Analytics panel; and the creator's page and reports in Prscnt. |
https://www.googleapis.com/auth/yt-analytics-monetary.readonly | Your channel's estimated YouTube revenue for each day: estimated revenue, estimated ad revenue, gross ad revenue, CPM, playback-based CPM and monetized playbacks. | Studio › YouTube: the Revenue panel; and Money in Prscnt, to you and to the members of the agency you shared your channel with who handle your money. |
Connecting YouTube asks Google for read-only access to your channel and nothing else. With it the Studio shows you, and the manager you authorised: the channel's name, handle, picture and public statistics; your uploads with their titles, dates, thumbnails and public view, like and comment counts; and YouTube Analytics reports for your channel (views, watch time, average view duration, subscribers gained and lost, top videos, top countries, and viewer age and gender percentages). Prscnt does not upload, edit, delete or comment on anything on YouTube.
If you also choose to share your YouTube revenue, Prscnt asks Google for one more read-only permission, for YouTube Analytics revenue reports, and with it shows you, and the members of the agency you shared your channel with who handle your money, your channel's estimated revenue. You can connect YouTube without sharing revenue, and you can stop sharing it at any time in Prscnt or in your Google Account. Revenue figures are never made available to any AI model or AI assistant, including an assistant a workspace connects to Prscnt.
The Studio fetches that YouTube data live when you open the page and holds it only in server memory, for at most 30 minutes. Separately, while your channel is connected, Prscnt keeps the channel's own figures listed under what we keep from a connected account, and deletes each one 30 days after it was read. YouTube data is not made available to unrelated customers, and not used for benchmarks or scores built across creators.
Who receives Google user data. We do not sell Google user data or disclose it to advertisers, data brokers, or unrelated customers. We disclose or transfer Google user data only: (1) to the Google account holder, including to an AI assistant the account holder connected to Prscnt and asked about their own channel, and, when that creator shares the channel with an agency by pressing the “Share with” button for YouTube, the manager or managers that creator authorised in that agency's workspace; (2) to service providers acting on Prscnt's behalf to host, secure, and operate the service, only to the extent necessary to perform those functions and subject to confidentiality and data-protection obligations; and (3) when required by law or reasonably necessary to protect users, the service, or our legal rights. Those recipients may not use Google user data for their own advertising, profiling, or general-purpose AI or ML training.
An agency can also connect its own Gmail mailbox, so that a message a person approves in Prscnt lands in that mailbox as a draft to send from Gmail:
| Permission | What it lets Prscnt access | Where you see it |
|---|---|---|
https://www.googleapis.com/auth/gmail.compose | Permission to create a draft in the connected mailbox when a person approves a message in Prscnt. Prscnt does not read, send, change or delete any message in the mailbox. | Settings › Mailbox (connect), and the approval queue, where an approved message becomes a Gmail draft. |
https://www.googleapis.com/auth/userinfo.email | The email address of the Google account that consented, used once to check it is the mailbox being connected. | Settings › Mailbox: the connected address. |
The Gmail credential is encrypted as described below. Prscnt receives no message content from Gmail: the only Google data it reads for the mailbox is the consenting account's email address.
An agency can also connect its own Google Drive, so that when a creator uploads a campaign file into a Drive folder the agency has bound to that deal, Prscnt records it as the deliverable's submission:
| Permission | What it lets Prscnt access | Where you see it |
|---|---|---|
https://www.googleapis.com/auth/drive.metadata.readonly | Notice that something in the agency's Drive changed; for each changed file, its identifier, the folder it is in, its type and the checksum Google computes for it; and the name of a folder when an agency member binds it to a deal. Changes outside the folders the agency bound are discarded without being stored. | Settings › Drive (connect, bound folders, files to sort), and the deal's deliverables, where a file in a bound folder becomes that deliverable's submission. |
https://www.googleapis.com/auth/userinfo.email | The email address of the Google account that connected Drive. | Settings › Drive: the connected account. |
Prscnt watches only the folders an agency member binds to a deal on Settings › Drive. Google tells Prscnt when something in the Drive has changed; Prscnt then asks Google which files changed and discards every change outside the bound folders. For a file directly inside a bound folder, Prscnt keeps the file's Drive identifier, the identifier of its folder, the checksum Google reports, a link to the file in Drive and when it changed; for a bound folder, its name as shown when it was bound. It keeps nothing about files in folders that are not bound, and never downloads, reads, copies, moves, shares or changes a file. The Drive credential is encrypted as described below. Unbinding a folder stops Prscnt from reading it; disconnecting Drive on Settings › Drive deletes the stored credential, stops Google's notifications and revokes Prscnt's access with Google.
You can revoke Prscnt's access at any time from the connections page (YouTube), or for YouTube, Gmail and Drive alike from your Google Account's third-party access page, security.google.com/settings/security/permissions.
Prscnt's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. That covers YouTube, the Gmail access an agency grants so it can create drafts in its own mailbox, and the Drive access an agency grants so Prscnt can record the files uploaded to the folders it bound.
Data received from Google APIs is used only to provide the features described on this page to the person who connected it. We do not use it for advertising, we do not sell it, and we do not use it to develop, improve or train generalised or non-personalised AI or machine-learning models. Prscnt's own server does not send it to any AI model. It reaches an AI model only if you connect Prscnt to an AI assistant of your own (through Prscnt's MCP connector) and ask that assistant about your own YouTube channel: Prscnt then reads your channel live from YouTube for that answer and returns it to your assistant, holds that copy in server memory for at most 30 minutes, and never writes it to our database. Your assistant receives it under your own agreement with its provider. We send it to an assistant someone else connected only when you have agreed, when sharing your channel with an agency, that your manager's AI assistant may read your YouTube stats: the manager or managers you authorised in that agency's workspace can then ask their own assistant about your channel, read live the same way, never from the figures we keep. Otherwise we do not send it to an assistant anyone else connected, and we do not use it, or let it be used on our behalf, to train any model. No person at Prscnt reads it, except with your permission for support, for security, or where the law requires. From Drive, the identifiers and links of files recorded as a deliverable's submission appear in that deal's records, which an AI assistant the agency connected to Prscnt can read; no file content is involved, and Prscnt's own server sends nothing from Drive to any AI model.
What we keep from a connected account, and for how long
While an account is connected, Prscnt keeps a copy of the account's own numbers, so the account holder, and the people a workspace they share the account with authorises, can see how it is doing over time. Prscnt reads them once a day in the background (an Instagram Story's numbers about every two hours while the Story is up), with the permissions listed above, and when someone asks for a refresh, and shows each number with the date it was read and the platform it came from. It keeps:
- Instagram: the username; follower, following and post counts; the last 28 days' reach, views, total interactions, accounts engaged and profile link taps; follower demographics by country, age band and gender, as a total for each group (Instagram withholds them for small accounts); and, for each of the latest 25 posts, the post record a content import keeps (id, link, caption, date and type), the link Instagram gives to each post's preview image (never the image itself), with its views, likes, comments, reach, saves, shares and, for reels, average watch time.
- Instagram Stories: for each Story, while it is up (Instagram shows a Story's numbers for 24 hours only), its Instagram id and the time it was posted, and about every two hours its link clicks (clicks on its link sticker), reach, views, shares, replies, follows, profile visits, total interactions and how people moved through it (taps forward, taps back, exits and swipes forward). We read them while the Story is up so you can see how a Story's traffic changed over time. Instagram does not give a number below 5; we keep that as “under 5”, not as zero. Never the Story's image or video, its preview image, its caption or a link to it.
- TikTok (an account connected through TikTok Login Kit): the username, display name and verified badge; follower, following, like and video counts; and, for each of the latest 20 videos, its id, link, date and length and its view, like, comment and share counts. No title, description, cover image or comment, and no audience demographics. None of these numbers is kept for an account connected through TikTok API for Business. We also keep the creator's TikTok @username on their profile in Prscnt when that field is empty, as we keep an Instagram handle.
- YouTube: the channel's title and handle; its subscriber count (unless the channel hides it), total views and video count; for each of the latest 24 uploads, its id, link and date and its public view, like and comment counts; and, from YouTube Analytics if you granted it, the last 28 days' views, minutes watched, and subscribers gained and lost, viewer percentages by age group and gender, views by country, and the average view duration and watch time of any of those uploads that is among the channel's 10 most-viewed videos in that time; for each of those uploads, from YouTube's daily reach reports, how many times its thumbnail was shown and its click-through rate; if you shared revenue, the channel's estimated revenue, ad revenue, gross ad revenue, CPM, playback-based CPM and monetized playbacks for each day; and the link YouTube gives to each upload's thumbnail image (never the image itself). No title, description, caption or comment.
We never keep a story itself (its image, video, preview image or caption, or a link to it), a comment, message or media file from these reads, or anything about a follower or viewer as a person. For a Story we keep only the numbers described above. Where we keep a link to a post's preview image, your browser loads the image from Instagram or YouTube when the page is shown; we do not copy it. We replace each link at every read and delete it 7 days after it was read at the latest. TikTok cover images are not kept. We keep one copy of a connected Instagram or YouTube account's own profile picture so the creator's photo shows in Prscnt; it is replaced when the account refreshes and deleted when the account is disconnected.
The creator's own workspace keeps its own copy. An agency keeps its own copy only while the creator shares that platform with it, and only the people that agency authorises see it. These numbers are never combined with another workspace's or another creator's in a benchmark or other aggregate. Instagram and TikTok numbers we keep can reach an AI assistant the account holder, or that agency, connected to Prscnt, when they ask it about the creator. YouTube figures we keep are never returned to an AI assistant or sent to any AI model, and never used in benchmarks or other aggregates.
Each Instagram and TikTok reading is deleted 150 days after it was read, and so are an Instagram Story's numbers, and a TikTok video's record with its last reading; an Instagram post record stays, like an imported one, until the account is disconnected. Each YouTube reading is deleted 30 days after it was read, so YouTube history covers at most 30 days, and a video's record goes with its last reading. Everything we keep from an account is deleted at once when the account is disconnected, Prscnt is removed in the platform's settings or its access is revoked, or a deletion request arrives; for YouTube, within 7 days of the access ending at most. An agency's copy is deleted as soon as the creator stops sharing that platform with it or leaves it, or the agency ends the link or removes the creator from its roster. The @username on a creator's profile stays until someone changes it or the profile is deleted.
What connecting does not give us
- No automatic publishing. The product can publish a post, or hide a comment, only when a person confirms that exact action on a preview. A reply to a comment or message is sent only when a person confirms it, or as an Instagram automatic reply whose exact words the account holder approved in advance. Prscnt never publishes a post on its own and never starts a conversation.
- No downloading your videos or photos beyond what is described above. Being able to see a media URL is not permission to keep the file behind it, and we treat it that way: without the licence in our Terms of Service or the box on an agency's connect link, both described above, nothing is downloaded, on any platform. With one of them, we download only your own posted Instagram videos, for analysis by Prscnt, keep the copies in Prscnt's own media store (never in an agency's workspace), and delete them, and the analysis made from them, when the connection or the permission ends. Photos are never downloaded, and nothing is downloaded from TikTok or YouTube.
- No access to anyone else's account. Only the account that went through the consent screen.
- No data about your followers as individuals. Audience figures are the aggregate breakdowns the platform itself publishes. Inbox sorting, described above, keeps a few facts Instagram gives about a person who messages the account, never a list of followers.
A platform may hand back fewer permissions than we asked for if the person unticks a box on the consent screen. We record what was actually granted, not what was requested, and features that need a missing permission refuse rather than guess.
How the access credential is stored
The token a platform issues is encrypted with AES-256-GCM before it is written, and the encryption key lives in the server environment, never in the database. A copy of the database without that key cannot open a single token. Tokens are opened only in the process that is making a request to the platform, and are never written to logs, error messages, or API responses.
How we protect sensitive Google user data
- Encryption at rest. Google OAuth credentials are encrypted with AES-256-GCM before storage, and the encryption key is kept separately in the server environment rather than in the database.
- Encryption in transit. Browser traffic to Prscnt and requests between Prscnt and Google use HTTPS/TLS.
- Access controls. Google user data is available only to the account holder and, when the account holder shares the channel with an agency by pressing the “Share with” button for YouTube, to the people that agency authorises in its Prscnt workspace, while the share lasts. No other workspace can read it. YouTube data is never downloaded or sent to an AI model, and never used in video analysis; the channel figures we keep are kept only as described under what we keep from a connected account. Drive data is available only to the agency workspace that connected the Drive.
- Data minimisation. What the Studio reads from YouTube remains only in server memory for at most 30 minutes; apart from it, we keep only the channel's own figures listed above, each for 30 days after it was read. Gmail message content is not read by Prscnt. From Drive, Prscnt keeps only the identifiers, checksums, links and change times of files in folders an agency bound, and the names of those folders; it never reads file content.
- Credential handling. OAuth credentials are opened only in the server process making the authorised Google request and are never written to logs, error messages, or API responses.
- Revocation and deletion. A user can revoke Prscnt's Google authorization at any time. Disconnecting YouTube in Prscnt erases the stored YouTube credential and every YouTube figure we keep; revoking Prscnt at Google deletes those figures within 7 days at most. For Gmail, revoking Prscnt in the Google Account ends the Google authorization; the encrypted stored grant is erased when we complete a deletion request. The limited audit record described below contains no Google content or credential. Disconnecting Drive in Prscnt erases the stored Drive credential and revokes it with Google.
Video analysis
Prscnt analyses a creator's videos to describe what is in them: what is shown and said, the brands that appear and how they appear, and patterns across the creator's content. It analyses only: a video file the creator uploads; a video file an agency uploads, which the agency confirms the creator authorised; and the creator's own posted Instagram videos, under our Terms of Service or the separate permission described above. We never download or analyse YouTube or TikTok content received through those platforms' connections. We never send YouTube or TikTok data to an AI model that Prscnt uses. YouTube figures reach an AI assistant only when the account holder, or a manager they shared the channel with, asks their own assistant through a Prscnt tool. TikTok figures reach an AI assistant only when the account holder, or a manager they shared the account with, asks their own assistant through a Prscnt tool.
The file is stored in Prscnt's own media store on our server, and a copy is sent to Google's Gemini API under Google's paid-service terms, which do not allow Google to use it to improve its products; Gemini returns the analysis and we ask it to delete its copy as soon as the analysis is done. Video analysis always runs on Prscnt's own Gemini account; a customer's own model key is never used for it.
Prscnt holds the analysis and is responsible for it. For this analysis, Prscnt is the controller of the personal data it contains. It is not stored in, or exported to, any customer's workspace. We analyse each video once and show the same analysis to everyone allowed to see it: the creator, if their plan includes video analysis, and each agency the creator shares their Instagram with, or allowed on its connect link, while that share or permission, the agency's seat for the creator and its subscription last. Each viewing is recorded. We do not sell the analysis, we do not use analysis of Instagram content in any aggregated or cross-customer dataset, and we do not use any of it to train a general-purpose AI model.
How long we keep data
| Data | How long |
|---|---|
| A connected account's access credential | Until the account is disconnected, removed in the platform's settings, or a deletion request arrives. At that moment it is erased. |
| What the Studio shows (all platforms), including comments and messages | Never written to our database. Held in server memory for at most 30 minutes. The account numbers we keep are listed separately below. |
| Instagram replies from rules: ids, each person's reply state, labels and fields, “notify me” choices, suggestions, records of automatic replies sent (the person's id and a fingerprint of the approved words), conversation assignments and internal notes, inbox-sorting facts, and an email address or phone number a person typed in answer | Deleted when the account is disconnected, Prscnt is removed in Instagram's settings, or a deletion request arrives; the ids of comments answered that day, and that day's count of automatic replies without the person's id, are kept so a comment is never answered twice and the daily limit holds. A person's labels, fields and “notify me” choices are also deleted when they write STOP, and inbox-sorting facts after 90 days without an update. Comment and message text is never written to our database. |
| Daily counts for rules and short links | Kept with the workspace. They name no person, and record no IP address or device. |
| Posts imported into a workspace's content library from a connected account | Deleted when the account is disconnected, removed in the platform's settings, or a deletion request arrives: the post records (id, link, caption, date, type), their view, like and comment counts, the history of each import, and any analysis made only from them. A post the workspace added itself (from its own list or the creator's own export) is not platform data and stays until you ask us to delete it. |
| Instagram and TikTok account numbers and post or video readings, including Instagram follower demographics (what we keep from a connected account) | Each reading 150 days after it was read; a TikTok video's record with its last reading, and an Instagram post record when the account is disconnected. All of it at once when the account is disconnected, Prscnt is removed in the platform's settings, or a deletion request arrives; an agency's copy as soon as the creator stops sharing that platform with it or leaves it, or the agency ends the link or removes the creator from its roster. |
| Instagram Story numbers (what we keep from a connected account) | Each reading 150 days after it was read. All of it at once when the account is disconnected, Prscnt is removed in Instagram's settings, or a deletion request arrives; an agency's copy as soon as the creator stops sharing Instagram with it or leaves it, or the agency ends the link or removes the creator from its roster. |
| Links to Instagram and YouTube post preview images (what we keep from a connected account) | Replaced at every read; deleted 7 days after they were read, and with the post's record (YouTube: 30 days), and at once when the account is disconnected, sharing ends, or a deletion request arrives. |
| Content strategy suggestions (Instagram) | 90 days after the suggestion's result was decided (a suggestion is decided within 60 days); all of them at once with the account's numbers. |
| A creator's TikTok @username on their profile in Prscnt | Until someone changes it or the profile is deleted. |
| Copies of a creator's own Instagram videos, downloaded under our Terms of Service or the creator's permission on an agency's connect link, and Prscnt's analysis of them | Kept by Prscnt only while the Instagram connection stands (and, on a connect link, that permission). Deleted, copies and analysis together, when the creator disconnects Instagram, removes Prscnt in Instagram's settings, asks Meta or us to delete their data, or withdraws a connect-link permission. The creator or the agency ending their relationship ends that agency's access, not the data. We ask Gemini to delete its copy as soon as each analysis is done. |
| A video staged for publishing to TikTok | At most 30 minutes, and deleted as soon as it is sent. |
| YouTube (YouTube API Services) | What the Studio shows leaves server memory within 30 minutes. The channel figures, video readings and audience percentages we keep: each deleted 30 days after it was read, a video's record with its last reading, and all of them when the channel is disconnected or the access ends, within 7 days at most; an agency's copy when the creator stops sharing YouTube with it. YouTube data is kept out of shared benchmarking and derived commercial scores. |
| Pinterest account analytics (what we keep from a connected Pinterest account) | Each reading 90 days after the period it covers ends. All of it at once when the account is disconnected, Prscnt is removed in Pinterest's settings, or a deletion request arrives. An agency's copy is removed as soon as the creator stops sharing Pinterest with it. |
| Twitch channel numbers (what we keep from a connected Twitch channel) | Each reading 90 days after the day it covers. All of it at once when the channel is disconnected, Prscnt is removed in Twitch's connections settings, or a deletion request arrives. An agency's copy is removed as soon as the creator stops sharing Twitch with it. |
| A connected Gmail mailbox | The encrypted credential and the mailbox address are kept while the mailbox is connected. Removing Prscnt at Google's third-party access page ends the credential at Google; write to us and we delete what we hold. |
| Video files uploaded for analysis, and Prscnt's analysis of them | Kept by Prscnt to provide video analysis, until the creator asks us to delete them (an agency or creator closing its account ends its access but does not delete them). For a creator who has no Prscnt account, a file their agency uploaded and its analysis are deleted 90 days after that agency's access ends, unless the creator joins Prscnt first. We keep only aggregated information from which no creator can be identified. We ask Gemini to delete its copy as soon as the analysis is done. |
| Account and workspace records | For as long as the workspace is open. On request we delete them, except what we must keep for accounting or legal reasons. |
| Daily activity records (which days a member used Prscnt) | 13 months, then deleted. |
| Product analytics records (PostHog) | 12 months from the event, then deleted. All of a workspace's records sooner, on request. |
| Billing records (Stripe: plan, invoices, Stripe's customer reference) | While the account is open, and then 7 years, as tax and accounting law requires. Prscnt never stores card numbers. |
| Sign-in records (Clerk: the email, name and sign-in method your provider gives us) | While the account is open. Deleted within 30 days of the account being deleted. |
| Creator-reported earnings figures (platform, program, period, amount and currency) and the earnings statements an agency uploaded for them | Kept in the agency's workspace until a member removes a figure; a statement is deleted when the last figure taken from it is removed. All of it is deleted when the creator is deleted from the workspace, and with the workspace when it is deleted. Amounts stay in the currency on the statement and are never converted. |
| Hashed IP address, network-block, device and email-domain signals (fraud prevention) | Up to 12 months, then deleted automatically. |
| Referral and affiliate records: who referred whom, activation and credits, the website checkup's source, affiliate videos and their review | While the account that holds them exists, and deleted with it, except what we must keep for accounting. |
| A person on a workspace's own imported contact list, and the business facts kept with them | Kept in that workspace until the customer deletes the record, or deleted when the person unsubscribes, unless the customer has already used the record in a deal, outreach or a brand's contact list. |
| Hashed platform account id and free-trial use (one free trial per account) | For as long as the free trial is offered, including after the account or the Prscnt account is deleted; never linked to a name or email address after deletion. |
After a disconnect we keep a record that the connection existed, when it ended, and what was deleted (counts, never content). That is the audit trail that lets us answer “what could this integration reach, on what date”, and it holds no credential.
Ending a connection, and deletion
You can disconnect at any time
An account holder can disconnect a connected platform from the connections page. Disconnecting ends our access at once: the stored credential is erased; the account's synced history, the post records imported from it and any copies of your videos downloaded under it are deleted; and we keep only a record that the connection existed, when it ended, and how much was deleted. TikTok and YouTube also let us revoke the access on their side, and we do. Instagram offers no way to do that from our side, so to remove Prscnt on Instagram itself, use Instagram's Settings, Apps and websites.
Removing the app on the platform works too
If you remove Prscnt from your Instagram or Facebook settings, Meta notifies us and we revoke the credential on our side without you doing anything else, and delete the post records, the numbers we keep and any copies of your videos we took under it. TikTok notifies us the same way when you remove Prscnt in TikTok. For YouTube, removing Prscnt at Google's third-party access page ends the credential at Google, and our next request fails and marks the connection for reconnection; we then delete the YouTube figures we keep, within 7 days at most.
Asking us to delete what we hold
If you ask Meta to delete your data for this app, Meta sends us that request and we return a confirmation code and a status page you can check. You can also write to support@prscnt.com and ask directly. The steps are on the data deletion page.
What we do not do with platform data
- We do not sell it.
- We do not use it for advertising.
- We do not use it to train a general-purpose model.
- We do not send connected-account data to analytics providers.
- We do not pool one creator's platform-derived numbers into a cross-customer benchmark. Aggregated information in the product is built from customer business records (next section), not from connected accounts.
- We do not let any agency keep a copy of Prscnt's analysis of a creator's content, and analysis made from Instagram content is never used in any aggregated dataset.
- We do not use Pinterest data for brand matching, benchmarks, video analysis or training any model.
- We do not use Twitch data for brand matching, benchmarks, video analysis or training any model.
Business information our customers provide
Our customers record information about their business dealings in Prscnt. This can include business contact and professional information about people they work with at brands, agencies and other companies, such as name, job title, employer, and the nature and timing of those dealings. We also collect similar professional information from our own business interactions and from publicly available sources.
A workspace's own list of business contacts can also be imported into its Prscnt workspace. For a person on such a list whom the workspace has not yet dealt with, we keep, besides the details above, the business facts that list gives: their other work email addresses, their function and seniority, a fit score and quality grade the list assigns, and facts about their employer (its parent company and web domain, its audience category and affinity score, and the number of creators and posts it has paid for in creator partnerships, with the date of the latest). These facts stay in that workspace: we never show them to another customer or use them for anyone else, and we keep no phone number from such a list. If the person unsubscribes from that workspace's email, from any of those addresses, we delete the record and these facts with it, unless the workspace has already used it in a deal, outreach or a brand's contact list; then it stays, and that person is never emailed from it again.
When you ask your own AI assistant to bring your email into Prscnt, once or as part of a regular inbox check, it sends Prscnt the messages it reads from your mailbox. These are brand replies, automatic replies, bounce notices and e-signature notices, and your own sent messages in those threads. Prscnt reads them by fixed rules, without an AI model, and from them keeps:
- facts about your brand deals: the brand, dates, amounts and the deal's stage;
- when a contract was signed;
- business contact details of the people in those threads: name, email address, job title, employer and agency, when someone has changed jobs, and when an address no longer receives mail;
- for each fact, the identifier of the message it came from, so you can find it in your own mailbox.
It also keeps copies of messages you wrote yourself, so drafts can follow how you write. Prscnt does not keep the text of other people's messages. Each change appears on your History page, where you can undo it. This is separate from Prscnt's own Gmail connection, which receives no message content.
We use this information to provide, maintain and improve Prscnt, including features that help users identify relevant business contacts and understand market activity. We may make professional information about a person (such as their name, title and employer) available to other users of Prscnt, and we may create aggregated or de-identified information from customer records and use it for any lawful purpose. We do not present one customer's records to another customer as that customer's.
Where the GDPR or a similar law applies, we rely on our legitimate interests, and those of our users, in operating a professional tool for business partnerships, and we limit what we make available to other users to professional information.
Your choices about this information
If your professional information appears in Prscnt, you can ask us to remove it at /privacy/directory-removal, with no account needed, or write to support@prscnt.com to access, correct or delete it, to object to our use of it, or to opt out of our making it available to other users. Customers can write to the same address to ask us to stop using their records to create new aggregated information.
Who else processes it
Named because the product actually calls them, not as a general disclaimer: the social platform a creator connects (Instagram, TikTok, or YouTube); Google, when an agency connects a Gmail mailbox to create drafts in it or a Google Drive to record deliverables; Google's Gemini API, for the video analysis described above and to index text so it can be searched; Google's Cloud Vision API, which reads on-screen text and detects logos in still frames from the videos we analyse; Stripe, for payment; Clerk, for sign-in; DocuSign, when a creator signs the agency pitching agreement (it receives their legal name, notice address, and email); PostHog, for product analytics (described below); Supabase, which hosts our database; Render, which hosts the service and its file storage; and Resend, which delivers our own operations alerts to our staff and the invitations a workspace member asks Prscnt to send. Each receives only what its job needs. Our database (Supabase) and our service and its file storage (Render) are hosted in the United States (Oregon, US West). PostHog processes analytics in its United States region.
Product analytics. To understand how Prscnt is used and where it falls short, our server sends PostHog (United States region) a short record when a workspace reaches a product milestone: for example that it finished a setup step, connected an assistant, ran its first search, sent or accepted a talent invite, connected a social account, accepted or overrode a suggestion, recorded a won deal, or changed plan. Each record names the event, the time, a few fixed labels (such as which step, which platform, or which kind of assistant) and a random-looking identifier derived from the workspace and, where a person acted, their seat. It never contains names, email addresses, handles, messages, captions, contract or deal content, amounts, links, account tokens or IP addresses. It is sent from our server only: Prscnt places no analytics cookies or scripts in your browser and records no sessions. PostHog processes these records for us under its data processing terms and may not use them for its own purposes. To have a workspace's analytics records deleted, write to support@prscnt.com.
Apollo works differently: Prscnt never calls it. Each workspace connects its own Apollo account to its own assistant, and the assistant uses it to find and check brand contacts, sending Apollo the company and person names involved under that workspace's Apollo account and Apollo's terms.
The same is true of a workspace's own AI assistant. A workspace can connect Prscnt to an AI assistant it chooses, such as Claude (made by Anthropic) or ChatGPT (made by OpenAI), through Prscnt's connector. That assistant receives the results of the Prscnt tools it calls, under the workspace's own agreement with that assistant's provider, and the provider's own privacy terms govern what it does with them. Prscnt receives only what each tool call sends it: the request and the details the tool needs. Prscnt does not receive, collect or store your conversations with the assistant. While the creator shares their Instagram with the agency, or has allowed it on the agency's connect link, those tools can return Prscnt's analysis of the creator's videos to the agency's assistant, a few items at a time. Data received from Google APIs is not returned by those tools, with two exceptions: the account holder's own assistant, and the assistant of a manager the account holder shared the channel with, both as described under “YouTube and Google services”. Those results can include the totals of a creator's confirmed, creator-reported earnings, labelled as such, for members who handle the workspace's money. They never include the statement file, and never a creator's YouTube earnings.
Creators on agency pitching have their name, handles, public statistics, and media kit shared with the roster platforms we use (MyKey and Beacons) and with brands we pitch them to. Nothing from a connected account's private data is shared this way. An agency may quote short parts of Prscnt's analysis in its own pitches to brands about that creator.
Fraud prevention
To stop our free video-analysis trial from being claimed over
and over, we keep a small amount of information about how you reach Prscnt. When you are
signed in, we record a one-way, keyed hash of your IP address, of the network block it
belongs to (the first three parts of an IPv4 address, or the first 48 bits of an IPv6
address), of a random device identifier stored in a first-party cookie on your browser
(combined with your browser and operating-system type), and of your email's domain. The
cookie is called __Host-prscnt_did, is used for nothing else, and lasts one
year. We store only these hashes, never the IP address, the cookie value or the domain
itself, and we cannot turn a hash back into the original.
We also check whether your IP address belongs to a published list of data-centre, VPN or Tor addresses, using a list we hold ourselves; we do not send your address to anyone to check it.
We use this information for one purpose only: to detect and prevent fraud and abuse of free offers, for example the same person or device claiming more than one free trial, or an account referring itself for a referral credit. We do not use it for advertising, profiling, analytics or to track you across other sites, and we do not sell or share it. It is deleted after at most 12 months.
To give each Instagram or TikTok account one free trial, we also keep a one-way, keyed hash of the connected account's platform id together with how much of the trial it has used. We keep this hash after you disconnect the account or delete your Prscnt account, so that the same account cannot claim the trial again; it does not contain the account id itself and is not linked to your name or email once your account is deleted.
We may hold a trial for review when these signals suggest it has already been claimed, and a person at Prscnt may then approve or refuse it.
Plan fit. A creator plan is priced for one creator's own business; someone who manages several creators belongs on an agency plan. To suggest one, Prscnt counts how many creator workspaces share any of these with yours: the same card (by its Stripe card fingerprint, never the card number) paying for two or more paid creator plans; the same email domain on the owner's account, when it is a business domain and not personal mail such as Gmail, on two or more paid creator plans; or one Instagram, TikTok or YouTube account connected in two or more creator workspaces. The check gives counts only, never another workspace's name, email, card or account. When a count reaches two, the only result is a suggestion on the workspace's Home and Billing pages, shown to the people who manage its billing, to move to an agency workspace. It never blocks or limits anything, and it is never shared with an AI assistant. It collects nothing new: Stripe already holds the card fingerprint, and we already hold the owner's email and the connected accounts to run Prscnt.
Referrals and the affiliate program
Referrals. When you sign up through someone's referral link or code (including one passed on from prscnt.com), we record, with the account that referred you, which account was referred, the code used, whether it came from a referral link or our website, when your account was created, when and how it became active (its first tracked deal, or its first SmartPitch match or rate read), when it first moved to a paid plan, and the credits each side earned or lost and when. Under the creator referrals in our Terms of Service, a referral counts when the new creator connects a social account instead, and we record which account it was, so one account counts only once. We use this only to run the referral program: to give each account what the program promises, and to stop self-referral. The referring account sees only counts and its own credits, never your name, email address or account details.
Preventing self-referral. Before a referral counts, we check, inside our own systems, whether the two accounts share a person or an email address, or a work email domain (a shared provider such as gmail.com does not count), whether the referred person was already counted through another account, and whether the two accounts were used from the same device, using the hashed device identifier described under fraud prevention. A referral that fails these checks earns nothing. These checks are never shown to the other account.
Where you came from. If you arrive from the checkup on our website, prscnt.com, we keep the plan it recommended, the need it identified, your role (creator or manager), the version of its questions, and the campaign tags in the link (utm source, medium and campaign). We do not keep what you typed into it.
Affiliate program. If you are invited to the affiliate program, we record when you became eligible and when you were invited, and for each video you submit we keep its link, the platform, the date you say it was posted, our review of it (accuracy, disclosure and brand safety, who reviewed it, when, and a note), the credit it earned, the dates of the 12-month licence described in our Terms of Service, how long it has been seen live and how that was checked (from your connected account or by looking at the public post), and any clawback and its reason.
How long. Referral and affiliate records are kept while the account that holds them exists, and are deleted with it, except what we must keep for accounting. If a referred account is deleted, the referring account's record keeps only the dates and credits above, never the referred person's name or email address.
Email drafts
Prscnt does not send email on anyone's behalf, with one exception: when a workspace member asks Prscnt to send an invitation, Prscnt emails that one invitation (who invited the person, to what, the link and when it expires), with the inviter's address for replies. Every other message a person approves in Prscnt is created as a draft in the agency's own connected Gmail mailbox, and a person sends it from Gmail.
Your choices and rights
- See or correct what we hold. Write to support@prscnt.com and we will tell you what we hold about you and correct what is wrong.
- Prscnt's analysis of your content. Prscnt does not offer exports of its video analysis to anyone. That does not limit your rights: if you are the creator, write to support@prscnt.com and we will give you a copy of the personal data about you that the analysis contains, and delete it on request, as the law where you live requires.
- Delete it. Disconnect an account, remove Prscnt in the platform's settings, or write to us, as described on the data deletion page.
- Withdraw a permission. Disconnecting, or removing Prscnt in the platform's own settings, withdraws every permission that account granted.
- Leave an agency. A creator with a Prscnt account can leave an agency at any time, from the connections page or Home: the link ends, and everything shared with that agency stops at once, on every platform, including its view of Prscnt's analysis.
- Depending on where you live you may have further rights, such as receiving a copy of your data or objecting to a use of it. Write to us and we will act on them as the law where you live requires.
We answer data questions from agency users and from creators directly, whether or not the creator holds the account that signed up.
Children
Prscnt is a business tool for creators and the people who manage them. It is not directed at children under 13 and we do not knowingly collect their data. If you believe a child's data is here, write to us and we will delete it.
If something goes wrong
If we learn of a security incident that exposes your personal information, we will tell the affected account holders and agencies by email without undue delay, and in any case within the time the law requires, along with what happened, what information was involved, and what we are doing about it. Where the law requires it, we will also notify the relevant regulator.
Changes to this policy
When this policy changes we update the dates at the top of this page, and we tell account holders when a change affects how their data is used.
Contact
Prscnt Group LLC, 121 Spectacle, Irvine, CA 92618 — support@prscnt.com.