Privacy Policy

1. Who We Are

Wild Vision Ltd (Company No. 12941438) ("Wild Vision," "we," "us," or "our") is a content syndication and creator management company registered in England and Wales. Our registered office is at Enterprise House Ground Floor, 21 Oxford Road, Bournemouth, Dorset, United Kingdom, BH8 8EY. We operate the Wild Vision OS platform accessible at wildvision.one (the "Platform"), which provides analytics, revenue tracking, content distribution, and management tools for content creators, partners, and our internal team.

References to "Wild Vision," "we," "us," or "our" in this Privacy Policy include Wild Vision Ltd and its subsidiaries, affiliated companies, and authorised partners (collectively, the "Wild Vision Group") unless the context requires otherwise. Each member of the Wild Vision Group may act as a data controller or data processor in respect of the personal data it handles, as described in this Policy.

For the purposes of the EU General Data Protection Regulation (GDPR), the UK General Data Protection Regulation (UK GDPR), and the Swiss Federal Act on Data Protection (FADP), Wild Vision Ltd is the data controller responsible for your personal data. For inquiries regarding data protection, please contact us using the details in Section 22.

2. Scope of This Policy

This Privacy Policy applies to all users of the Platform, including content creators who access the Creator Portal, vendor partners who access the Vendor Portal, team members who access the internal dashboard, and any visitors to our public-facing pages. It describes how we collect, use, disclose, and protect personal data in connection with the Platform and our services.

This Policy covers data processed through all features of the Platform, including but not limited to: analytics dashboards, revenue reporting, content management, platform authentication integrations, communication tools, and financial processing features.

3. Relationship to Individual Creator Agreements

Wild Vision enters into individual agreements with each creator and partner (each, a "Creator Agreement"). These Creator Agreements may contain additional or more specific terms regarding data collection, usage, revenue sharing, content licensing, and confidentiality obligations that are tailored to the specific relationship between Wild Vision and the creator.

Where a Creator Agreement contains provisions relating to privacy, data handling, or confidentiality that differ from or supplement this Privacy Policy, the terms of the Creator Agreement shall prevail to the extent of any inconsistency. This Privacy Policy establishes the baseline data protection standards applicable to all users; your Creator Agreement may impose additional obligations or grant additional rights beyond those described here.

If you are a creator or partner and have questions about how your individual agreement interacts with this Privacy Policy, please contact your account manager or reach out to us at the contact details provided in Section 22.

4. Information We Collect

We collect and process the following categories of personal data:

4.1 Account and Identity Information

When you register for or access the Platform, we collect information necessary to identify you and manage your account. This includes your full name, email address, profile photograph or avatar, user role and permissions, and any authentication credentials associated with your account (such as OAuth tokens issued by third-party platforms).

4.2 Platform and Channel Data

When you connect third-party platform accounts to the Platform, we collect data from those platforms in accordance with the permissions you grant. This includes channel identifiers and metadata (channel names, descriptions, subscriber counts, profile images), video and content metadata (titles, descriptions, publication dates, view counts, engagement metrics), analytics and performance data (views, watch time, audience demographics, revenue figures, impressions, click-through rates), and content monetisation data where available and authorised.

4.3 Financial and Payment Information

In connection with revenue tracking, payment processing, and financial reporting, we may collect or process bank account details and payment information (processed through secure third-party providers such as Mercury, Wise, and Xero), revenue and earnings data from connected platforms, tax-related information necessary for compliance with applicable tax laws, and invoice and remittance records.

4.4 Communications Data

We collect information generated through your use of communication features on the Platform, including messages sent through Telegram bot integrations, notifications and alerts, and correspondence with our team through the Platform's concierge or support features.

4.5 Technical and Usage Data

When you access the Platform, we automatically collect certain technical information, including your IP address, browser type and version, device type and operating system, pages visited and features used within the Platform, timestamps and session duration, and referring URLs.

4.6 CRM and Business Relationship Data

We maintain records related to our business relationships with creators and partners, which may include deal terms and contract status, onboarding information, performance metrics and targets, and notes and correspondence related to account management. This data may be synchronised with our customer relationship management systems (such as Zoho CRM).

5. How We Collect Information

We collect personal data through the following means:

Directly from you — when you create an account, complete forms, connect platform accounts, or communicate with us through the Platform.

From third-party platforms — when you authorise us to access your data on connected platforms through OAuth or API integrations (see Section 6 for details on each platform).

Automatically — through cookies, server logs, and similar technologies when you use the Platform (see Section 18).

From our business partners and CRM systems — in connection with managing our creator and partner relationships, we may receive or synchronise data from systems such as Zoho CRM.

6. Third-Party Platform Integrations

The Platform integrates with numerous third-party services to provide analytics, content management, and distribution capabilities. When you connect a third-party account, you authorise us to access and process data from that platform in accordance with the permissions you grant and the terms of this Privacy Policy (subject to your Creator Agreement). Below is a summary of the platforms we integrate with and the data we access.

Each platform integration is subject to that platform's own terms of service and privacy policy. We encourage you to review the privacy policies of any third-party platforms you connect to the Platform. We only access data within the scope of permissions you explicitly grant during the OAuth authorisation process or as otherwise agreed in your Creator Agreement.

7. How We Use Your Information

We use the personal data we collect for the following purposes:

Service delivery and platform operation — to provide, maintain, and improve the Platform and its features; to manage your account and authenticate your identity; to connect and synchronise data from third-party platforms; and to generate analytics, reports, and dashboards.

Revenue and financial management — to track, calculate, and report revenue across platforms; to process payments and manage financial transactions; to generate invoices and remittance records; and to facilitate tax compliance and reporting.

Creator and partner relationship management — to manage our business relationships with creators and partners; to monitor deal performance and contract compliance; to provide account management and support; and to facilitate onboarding and communications.

Content management and distribution — to manage content across multiple platforms; to track content performance and optimise distribution strategies; and to facilitate content syndication and publishing.

Communication — to send you service-related notifications and updates; to facilitate communication between creators, partners, and our team; and to respond to your enquiries and support requests.

Legal compliance and protection — to comply with applicable laws, regulations, and legal processes; to enforce our terms of service and agreements; to protect the rights, property, and safety of Wild Vision, our users, and the public; and to detect, prevent, and address fraud, security issues, and technical problems.

Analytics and improvement — to understand how the Platform is used and to improve our services; to develop new features and functionality; and to conduct internal research and analysis.

8. Legal Bases for Processing (EEA, UK & Switzerland)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process your personal data only where we have a valid legal basis to do so under the GDPR, UK GDPR, or FADP (as applicable). The legal bases we rely on are as follows:

Performance of a contract — processing that is necessary to perform our obligations under your Creator Agreement or other contract with you, or to take steps at your request prior to entering into such a contract. This includes providing the Platform services, processing payments, and managing your account.

Consent — where you have given clear, informed consent for us to process your personal data for a specific purpose. This includes connecting third-party platform accounts via OAuth authorisation. You may withdraw your consent at any time (see Section 12).

Legitimate interests — processing that is necessary for our legitimate interests (or those of a third party), provided those interests are not overridden by your rights and freedoms. Our legitimate interests include operating and improving the Platform, managing business relationships, ensuring platform security, and conducting internal analytics.

Legal obligation — processing that is necessary to comply with a legal obligation to which we are subject, such as tax reporting, financial record-keeping, and responding to lawful requests from public authorities.

9. How We Share Your Information

We do not sell your personal data. We may share your information in the following circumstances:

With service providers — we engage trusted third-party service providers who process data on our behalf to support our operations. These include cloud hosting and infrastructure providers, payment processors (such as Mercury and Wise), accounting and financial management services (such as Xero), customer relationship management systems (such as Zoho CRM), communication services (such as Telegram for bot notifications and Resend for email), and analytics providers. All service providers are contractually bound to process your data only as instructed by us and to maintain appropriate security measures.

With your creator or partner organisation — if you are a team member associated with a creator or partner, certain information may be visible to other authorised members of that organisation within the Platform.

As required by law — we may disclose your information where required by applicable law, regulation, legal process, or governmental request, including to meet national security or law enforcement requirements.

To protect rights and safety — we may disclose information where we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, or violations of our terms of service.

With subsidiaries and affiliated companies — we may share your personal data with members of the Wild Vision Group (including subsidiaries, parent companies, and affiliated entities) for the purposes described in this Privacy Policy, including operational management, financial reporting, analytics, and the provision of Platform services. All members of the Wild Vision Group are bound by this Privacy Policy and applicable data protection laws when processing your personal data.

With authorised business partners — where we work with authorised business partners to deliver services (such as content distribution, platform management, or revenue optimisation), we may share relevant data with those partners to the extent necessary for the performance of their services. Such sharing is governed by contractual obligations that require partners to protect your data and use it only for the agreed purposes.

In connection with a business transfer — if Wild Vision is involved in a merger, acquisition, reorganisation, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your personal data.

10. International Data Transfers

Wild Vision operates internationally, and your personal data may be transferred to and processed in countries other than the country in which you reside. In particular, data may be processed in the United States and other jurisdictions where our service providers operate.

Where we transfer personal data from the EEA, UK, or Switzerland to a country that has not been deemed to provide an adequate level of data protection, we implement appropriate safeguards to protect your data. These safeguards may include Standard Contractual Clauses (SCCs) approved by the European Commission, the UK International Data Transfer Agreement or Addendum (as applicable), binding corporate rules, or your explicit consent to the transfer.

You may request a copy of the safeguards we have in place by contacting us using the details in Section 22.

11. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. The specific retention period depends on the nature of the data and the purpose for which it was collected.

Account data is retained for the duration of your account and for a reasonable period thereafter to allow for account reactivation or to comply with legal obligations.

Platform and analytics data is retained for the duration of your use of the Platform and for a period necessary to provide historical reporting and analytics, typically aligned with the term of your Creator Agreement.

Financial and tax records are retained for the period required by applicable tax and financial reporting laws, which is typically six to seven years.

OAuth tokens and access credentials are retained only while the relevant platform connection is active. When you disconnect a platform, we revoke and delete the associated tokens.

When personal data is no longer required, we will securely delete or anonymise it in accordance with our data retention procedures.

12. Your Rights and Choices

Regardless of where you are located, you have the following general rights regarding your personal data:

Disconnect platform accounts — you may disconnect any third-party platform account from the Platform at any time through the Platform Authentications page. This will stop further data collection from that platform and revoke our access tokens.

Update your information — you may update your account information through the Platform's profile settings.

Request account deletion — you may request deletion of your account and associated data by contacting us at the details provided in Section 22.

Additional rights may apply depending on your jurisdiction, as described in Sections 13, 14, and 15 below.

13. Rights for EEA, UK & Swiss Residents (GDPR / UK GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following additional rights under the GDPR, UK GDPR, or FADP (as applicable):

Right of access — you have the right to request a copy of the personal data we hold about you.

Right to rectification — you have the right to request that we correct any inaccurate or incomplete personal data.

Right to erasure ("right to be forgotten") — you have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

Right to restriction of processing — you have the right to request that we restrict the processing of your personal data in certain circumstances.

Right to data portability — you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

Right to object — you have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis, including profiling based on those interests.

Right to withdraw consent — where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

Right to lodge a complaint — you have the right to lodge a complaint with your local data protection supervisory authority. In the UK, this is the Information Commissioner's Office (ICO) at ico.org.uk. In the EU, you may contact your national data protection authority.

To exercise any of these rights, please contact us using the details in Section 22. We will respond to your request within one month (or within the period required by applicable law). We may need to verify your identity before processing your request.

14. Rights for California Residents (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

Right to know — you have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which the information was collected, the business or commercial purpose for collecting the information, and the categories of third parties with whom we share the information.

Right to delete — you have the right to request that we delete the personal information we have collected from you, subject to certain exceptions.

Right to correct — you have the right to request that we correct inaccurate personal information we maintain about you.

Right to opt out of the sale or sharing of personal information — we do not sell or share (as defined by the CCPA/CPRA) your personal information for cross-context behavioural advertising purposes.

Right to non-discrimination — we will not discriminate against you for exercising any of your CCPA/CPRA rights.

Right to limit the use of sensitive personal information — to the extent we process sensitive personal information (as defined by the CPRA), you have the right to limit its use to purposes necessary for providing the services.

To exercise your rights, please contact us using the details in Section 22. We will verify your identity before processing your request and respond within 45 days (or as otherwise required by law).

15. Rights for Residents of Other US States

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana (MCDPA), and other US states with comprehensive privacy laws may have similar rights to those described in Section 14, including the right to access, correct, delete, and opt out of certain processing activities. To exercise your rights under any applicable state privacy law, please contact us using the details in Section 22.

16. Google API Services — Limited Use Disclosure

Wild Vision OS's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we limit our use of data obtained through Google API Services (including the YouTube Data API and YouTube Analytics API) as follows:

We only use the data to provide and improve user-facing features of the Platform that are prominent in the application's user interface. We do not transfer data to third parties except as necessary to provide or improve user-facing features, for security purposes, to comply with applicable laws, or as part of a merger or acquisition with the user's prior consent. We do not use data for serving advertisements, including retargeting, personalised, or interest-based advertising. We do not allow humans to read user data unless the user has given affirmative consent, it is necessary for security or legal purposes, or the data is aggregated and anonymised for internal operations.

17. YouTube API Services

The Platform uses the YouTube API Services to access and display YouTube channel and video data. By connecting your YouTube account to the Platform, you are agreeing to be bound by the YouTube Terms of Service.

We access YouTube data using OAuth 2.0 authorisation. The specific data we access includes channel metadata (name, description, subscriber count, profile image), video metadata (titles, descriptions, view counts, publication dates), YouTube Analytics data (views, watch time, audience demographics, revenue metrics), and content management data. You may revoke our access to your YouTube data at any time by disconnecting your YouTube account from the Platform or by visiting Google's security settings page.

For information about how Google collects and processes your data, please refer to the Google Privacy Policy.

18. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate and improve the Platform. The types of cookies we use include:

Essential cookies — these are necessary for the Platform to function and cannot be switched off. They include session cookies for authentication, security tokens, and user preference cookies.

Analytics cookies — these help us understand how the Platform is used so we can improve it. We use privacy-respecting analytics to collect aggregated usage data.

We do not use cookies for advertising or cross-site tracking purposes. You can control cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the Platform.

19. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include encryption of data in transit using TLS/SSL, secure storage of OAuth tokens and credentials, role-based access controls limiting data access to authorised personnel, regular security reviews and monitoring, and secure cloud infrastructure with industry-standard protections.

While we strive to protect your personal data, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security, but we are committed to maintaining and improving our security practices.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours (as required by GDPR) and will notify affected individuals without undue delay where the breach is likely to result in a high risk to their rights and freedoms.

20. Children's Privacy

The Platform is not directed at children under the age of 16 (or under 13 in the United States). We do not knowingly collect personal data from children. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us using the details in Section 22, and we will take steps to delete such information.

21. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make material changes, we will notify you by posting the updated policy on this page with a revised "Last Updated" date. Where required by applicable law, we will provide additional notice (such as an in-platform notification or email) and, where necessary, obtain your consent to the changes.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

22. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For data protection enquiries from EEA, UK, or Swiss residents, please include "Data Protection Request" in the subject line of your email. We will endeavour to respond to all legitimate requests within one month.