Privacy Policy

Onsite helps creators working brand activations at live events keep track of their content items, share drafts for review, and report how their posts perform. This policy explains what we collect when you use the Onsite app and website, and the choices you have.

• Account details: your name, email address and sign-in identifiers.
• Your work in Onsite: activations, checklist items, captions and notes you write, and the photos and videos you upload as drafts.
• Connected accounts (optional): if you connect Instagram or TikTok we receive your account identifier, username, account type and the permissions you granted, and we store the access tokens the platform issues. Tokens are encrypted before they are stored.
• Post analytics: for posts you publish or link in Onsite, and only while your account is connected, we collect public performance numbers such as views, likes, comments, shares, saves and reach.
• Device and usage data: a push notification token for your phone and basic logs we need to keep the service secure and reliable.

We do not read your messages, your followers, or content you have not chosen to post or share through Onsite.

• To run Onsite: show your checklist, send reminders, and let you submit drafts and post links.
• When you ask, to post to Instagram or to send a video to your TikTok inbox on your behalf. Onsite never posts without your explicit confirmation.
• To show performance numbers to you and, on activations you share, to the brand you work with.
• To keep the service secure, prevent abuse and meet our legal obligations.

We do not sell your personal information.

• Brands you share an activation with see that activation’s checklist, the drafts you submit for review, your post links and their performance numbers. They never see other activations or your connection tokens.
• Service providers that host and operate Onsite (database and authentication, web hosting, payments) process data for us under their own security commitments.
• Instagram and TikTok receive the requests you ask us to make (for example, publishing a post). Their own privacy policies apply to what they hold.
• We may disclose information if the law requires it.

Drafts are kept until you delete them; deleting a draft removes the stored file. Connection tokens and analytics we collected from Instagram or TikTok are deleted when you disconnect the account in the app, when you remove Onsite from your Instagram or TikTok settings, or when you ask us to delete them. The links to your posts stay in your activations because you added them.

If you submit a data deletion request through Instagram or Facebook, we delete the data we hold for that connection and give you a confirmation code. You can check its status at any time on the deletion status page linked from that confirmation. To ask for deletion of your whole Onsite account, contact us through the app.

Access to data is limited by account and by activation. Provider tokens are encrypted at rest and are only usable by our servers. No system is perfectly secure, so please use a strong sign-in and tell us promptly if you suspect misuse.

• Connect or disconnect Instagram and TikTok at any time from the app.
• Turn off notifications in your phone’s settings.
• Ask us to access, correct or delete your information by contacting us through the app.

Onsite is intended for adults who work with brands. It is not directed to children under 13, and we do not knowingly collect their information.

We will update this page when our practices change and revise the date above. Questions about this policy or your data: contact us through the Onsite app.