Privacy notice.

Who to contact

Bountain is operated by Valuehalla Ltd, which is responsible for the personal information described in this notice. For questions, account deletion or a privacy request, email hello@bountain.co.uk.

When you choose Google sign-in

Google provides your account identifier, email address and verification status, name and profile picture, where available. We use these details to authenticate you, create or link your Bountain account, and maintain your account profile. They are stored with our authentication provider, Supabase. Your Google password is never shared with us.

This sign-in option requests basic identity, email and profile access. It does not request your Gmail messages, Drive files, contacts or calendar. We do not use Google account data to target advertising or sell it to data brokers. Choosing email sign-in instead gives you the same Bountain account features.

You can remove Bountain’s access in your Google Account’s third-party connections settings. This stops the Google connection; it does not automatically delete data already saved in Bountain. Contact us to request account deletion.

Information you provide and create

• Account information: your email, account identifier, selected Brand or Creator role, and profile or onboarding details you submit.
• Workspace information: campaigns, briefs, participation records, content links and activity you save. Published campaign information is visible in the marketplace; participating brands and creators can see information needed to manage their campaigns.
• Technical and attribution information: requests can include IP address, browser information, timestamps and campaign or click identifiers. A tracked referral can be associated with account creation, onboarding or campaign activity to measure the referral and detect invalid activity.
• Support: information you include when contacting us. Please avoid sending passwords or unnecessary sensitive information.

Why we use it

We process account and workspace information to provide the service you request. Our legitimate interests include keeping accounts secure, investigating errors and abuse, answering support requests and measuring campaign referrals. Where processing depends on your consent, you may withdraw it. We may also retain or disclose information where required by law.

An email address and account identifier are needed for an account. You can explore the public website and interactive demo without creating one. Demo funds, orders and payouts are simulated and are not financial transactions.

Services that help run Bountain

Supabase provides authentication and the account database; Cloudflare serves the website and processes web requests; Purelymail delivers account emails and handles our support mailbox. Google processes the Google sign-in you choose under its own privacy terms. Authorised operators may access information to provide support and maintain the service.

The primary Bountain database is hosted in London. Our providers operate internationally, so support, network delivery and other processing may take place outside the UK. Contact us for details about the providers and applicable transfer arrangements for your information.

Cookies, storage and retention

Sign-in uses cookies to keep your session and complete secure redirects. Browser storage can remember the account role selected during signup and stores the interactive demo’s progress on your device. Tracked links can also set first-party campaign attribution cookies. Clearing site data removes locally saved demo progress and may sign you out; it does not delete your server-side account.

We retain account and workspace data while needed to provide your account. Retention after a deletion request depends on outstanding support issues, security or fraud investigations, disputes and legal record-keeping requirements. Removing Google access or signing out does not itself erase these records. Contact us to request deletion or details of the information retained about you.

Your choices and rights

Depending on the circumstances, you can request access, correction, deletion, restriction or a portable copy of your personal information. You can withdraw consent where it is the basis for processing. We may need to verify your identity before acting on a request.

You can object to processing based on legitimate interests. Send privacy requests to hello@bountain.co.uk. You may also complain to the UK Information Commissioner’s Office.

We will update this notice when our data practices change and explain material changes where appropriate. The date above identifies the current version.