Privacy policy

Get Stoked is run by [Your full name], a sole trader based in the United Kingdom, of [Business postal address] (“we”, “us”). Get Stoked isn’t a company yet; if we form one, we’ll update this policy and tell account holders before it takes over.

For privacy questions or requests, email privacy@stoked.tech.

We are the controller for information about people who visit our own website, create an account (brands, their team members and creators) or contact us. This policy explains how we handle that information.

We are a processor for information our customers collect with Get Stoked: visits and conversions on their websites, measured by our tracking script, and contacts they add. The customer (the website owner) is the controller and decides how that information is used; we process it only on their instructions, under the data processing terms in our Terms. If you visited a website that uses Get Stoked, please contact that website’s owner about your data. We’ll help them respond.

We don’t collect payment card details. When paid plans launch, payments will be handled by our payment provider, who will hold your card details.

When a website uses the Get Stoked tracking script, we record on the owner’s behalf: the pages visited, the referring site, campaign (UTM) tags, the browser’s user agent, an anonymous visitor ID stored in the visitor’s browser, a creator code if they arrived through a creator’s link, and conversions the site reports (for example a purchase, its value, currency and order reference). We work out the visitor’s country from their IP address and don’t store the IP address itself.

Website owners can use our consent mode so nothing is recorded or stored until their visitor agrees. Customers may also store contacts (such as names and email addresses) in Get Stoked.

AI launch campaigns are generated with Claude, provided by Anthropic. To write a campaign we send Anthropic your campaign brief and facts from the product page you give us. We don’t send your analytics data, your contacts or your creators’ personal details.

Anthropic processes this data to provide the service to us. Under Anthropic’s commercial terms, API data is not used to train its models. If you use your own Anthropic API key (when available), we use it only for your own work.

We don’t sell personal information and we don’t use it for advertising. We share it only with service providers that help us run Get Stoked, under contracts that require them to protect it:

Brands and creators in the same programme see each other’s programme information: brands see their creators’ profiles and the visits, conversions and earnings they drove; creators see the terms and their own results. We may also disclose information if the law requires it, or to protect people’s rights and safety.

Some of our providers (such as Cloudflare, Resend and Anthropic) are based in, or process data in, the United States. Where personal information leaves the UK or the European Economic Area, we rely on adequacy decisions (such as the UK–US data bridge and the EU–US Data Privacy Framework) or standard contractual clauses with the UK addendum.

• Analytics events (page views and conversions): 12 months, then deleted. Data over a plan’s monthly allowance is kept for 90 days so it can be shown after an upgrade. Visits that arrive through a creator’s link are kept for 13 months, so a creator is still credited for a sale near the end of the longest attribution window (a year).
• Account information: while your account is open, and deleted within 30 days after it’s closed, apart from what we must keep (below).
• Creator earnings records: as long as the brand and creator need them for their own records, and at least as long as the programme runs.
• Security and audit logs: [audit log retention period].
• Financial records (once paid plans launch): as long as the law requires, usually six years.
• Your cookie choice: 12 months, then we ask again.

You can ask us to give you a copy of your personal information, correct it, delete it, restrict or object to how we use it, or send it to you or another company in a portable format. Where we rely on your consent, you can withdraw it at any time, for example with Cookie settings.

Email privacy@stoked.tech. We’ll reply within one month. If your request is about a website that uses Get Stoked, we’ll pass it to that website’s owner.

You can also complain to a data protection authority: in the UK, the Information Commissioner’s Office (ico.org.uk); in the EU, the authority where you live.

We encrypt data in transit, store social account tokens encrypted, keep each customer’s data separate from every other customer’s, restrict staff access and keep audit logs of administrative actions. No service is perfectly secure; if a breach affects your personal information, we’ll tell you and the regulator as the law requires.

Get Stoked accounts are for people aged 18 and over. We don’t knowingly collect personal information from children for accounts.

If we make important changes we’ll tell account holders by email or in the app before they take effect. The date at the top shows when this policy last changed.