Privacy policy

Last updated 10 November 2026

MANA Creators is a service of MANA, a talent management agency run by Sheik Anam Milfer in Melbourne, Australia ("MANA", "we"). This policy explains what we collect, why, who sees it and how to have it deleted. Questions go to shei@manacreators.com.

1. What we collect

• Account: your email address and name. We sign you in with a one-time code, so we never hold a password.
• Creator profile: your Instagram and TikTok handles, city, country, content niches, turnaround time, a short bio and links to sample videos.
• Creator agreement: the name you type to sign, the time and the IP address, so there is a record that you agreed.
• Payout details: your legal name, country, payout method and the email address or PayID that method uses. We do not store card numbers, bank passwords or full bank account numbers.
• Instagram data, when you connect Instagram: your username, account type, profile picture, follower, following and post counts; account insights such as reach, views, accounts engaged, interactions, likes, comments, saves, shares, follows and profile link taps; audience breakdowns by age, gender, city and country; and your recent posts with their insights. We ask Instagram for two read-only permissions and nothing else.
• TikTok data, when you connect TikTok: your profile, follower and like counts and your public videos with their view, like, comment and share counts.
• Campaign content: videos you upload, notes, approvals, post links and ad codes.
• Brand users: your name, work email, company, campaign briefs, and any ads reports you upload.
• Technical records: IP address, browser type, sign-in times and a log of important actions such as approvals and payouts. We use them for security and to resolve disputes.

2. Cookies

We set only the cookies the service needs: one to keep you signed in and two for security. We do not use advertising cookies, tracking pixels or third-party analytics.

3. How we use it

• To run your account and show creators their own analytics.
• To vet creator profiles and match creators to campaigns.
• To run campaigns: briefs, uploads, quality checks, approvals, ad codes and results.
• To pay creators and keep the records tax law requires.
• To send service emails: sign-in codes and updates about your own campaigns and payouts.
• To keep the service secure and prevent abuse.

4. What we never do

• We never post, comment, message or change anything on your Instagram or TikTok account. Our access is read-only.
• We never sell personal data or share it for advertising.
• We never use your data, your likeness or your videos to train AI models.

5. Who sees what

• MANA: the people who run the service see creator profiles, connected numbers, uploads and payout details.
• Brands: a brand you work with sees your first name and the first letter of your last name, the videos you made for that campaign once they pass our quality check, your post link and that post's results. Brands do not see your email, your payout details, your full analytics or your earnings.
• Other creators: see nothing about you.
• Service providers: our server host, our email provider (Google Workspace), a file storage provider where we use one, and the payment provider used for your payout (Wise, PayPal or your bank through PayID). They process data only to provide their service to us, and some of them store data outside Australia.
• The law: we disclose information when a law or court order requires it.

6. Instagram and TikTok connections

When you connect an account, the platform gives us an access token. We encrypt it, keep it on our server and use it once a night to refresh your numbers. Your dashboard reads our saved copy, not the platform live.

You can disconnect at any time from Connections in your dashboard, or by removing MANA Creators inside Instagram or TikTok. Either way we delete the token and every stored number for that account. See Delete my data.

7. How long we keep it

• Account and profile: while your account is open. Ask us and we delete it within 7 days.
• Instagram and TikTok data: until you disconnect, then deleted straight away.
• Videos: for the usage period on the campaign brief, so the brand can use what it paid for.
• Payout and invoice records: for as long as tax and accounting law requires.
• Security logs: up to 24 months.

8. Security

The site runs over HTTPS. Access tokens are encrypted at rest. Sign-in uses one-time codes, and admin access needs a second code. Access to data is limited by role: brands cannot see other brands, creators cannot see each other. No system is perfectly secure; if a breach affects you we will tell you and the regulator as the law requires.

9. Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it by emailing shei@manacreators.com. We answer within 30 days. If you are in Australia and are unhappy with our answer you can contact the Office of the Australian Information Commissioner. If you are in the UK or the EU you also have the rights your local data protection law gives you, including the right to complain to your regulator.

10. Age

MANA Creators is for people aged 18 and over. We do not knowingly collect data from anyone younger.

11. Changes

If we change this policy in a way that matters we will email account holders before the change takes effect. The date at the top shows the latest version.