Privacy

What we collect

• Your account. Your email address, and — if you sign in with Google — your name and profile picture. Nothing else from your Google account.
• What you publish. Listings, spots, prices, brand names, logos, images and proof of delivery.
• Deal records. Bids, amounts, refunds, payouts, disputes and ratings.
• Reach numbers you connect. Follower counts, subscriber counts, visitor counts, revenue figures — the single number each connector reads, and when it was read.

What is public by design

This is the part worth reading twice, because a marketplace built on trust cannot hide it. The leading bid on every spot is public, along with the leading brand’s name and logo. Seller profiles are public: the track record, completed deals, accepted proof images, disputes, refunds and ratings. Verified reach numbers are public, and so is the platform they were read from and the date.

Your email address is not public. Neither is your card, your bank details, or any bid that never led.

Connected accounts

When you connect X, YouTube, Google Analytics or Search Console, we ask for read-only access and we read exactly one number from each. We do not post, we do not read your messages, and we do not pull anything beyond the metric shown on your profile.

The access tokens are encrypted before they are stored, and the table holding them is not readable by the application’s ordinary database access — only the server-side code that refreshes a number can decrypt one. You can disconnect an account at any time.

Numbers you type in yourself are shown as self-reported and are never added to a verified total — not on your profile, not on a listing, not on the leaderboard.

Who else processes your data

• Stripe — payments and payouts. Card details go to Stripe directly from your browser and never reach our servers. Stripe verifies seller identity and holds bank details.
• Supabase — the database, sign-in, and file storage.
• Vercel — hosting.
• Resend — transactional email (outbid, proof posted, funds released, and the rest).
• Google and X — only when you connect them, and only to read the number described above.

We do not sell your data, and we do not share it for advertising.

Email

We email you about your own deals — you have been outbid, proof has been posted, your review window is closing, funds have been released. These are part of the service and you cannot turn them off while you have money or a deal in flight. Anything that is marketing is separate and you can opt out of it.

Your data

Ask us at support@onsimba.com for a copy of your data or to delete your account. Two honest caveats: completed deal records stay on the public track record, because a reputation you can delete after a bad outcome is not a reputation; and we keep what we must for tax and payment records.