Privacy policy

The Trifid Content Hub (the Hub) is operated by Trifid Media, a creative agency based in Dubai, United Arab Emirates (Trifid, we, us). We decide how and why your personal data is used in the Hub, so we are responsible for it.

This policy covers the Hub: this website, the application process and the creator and admin dashboards. It sits alongside our Terms and Conditions.

• Account data: your full name, username, email address, role (editor or producer), profile photo and account status. Your password is handled by our authentication provider and stored only as a secure hash. We never see it.
• Application data: phone number, country, city, timezone, languages, skills, years of experience, bio, social links, portfolio link, your application note, and any referral code you signed up with.
• Portfolio and work data: files you upload (video exports, scripts, assets and attachments), submission notes, review decisions and ratings, due dates and on-time records, warnings and your acknowledgements.
• Performance data: views, likes, comments and revenue of the published videos you worked on, taken from the YouTube Analytics of channels we manage, plus the rank score calculated from them.
• Payout details: your payout method (for example bank transfer, PayPal, Wise or Payoneer), the account details you provide, and your record of earnings, payouts and affiliate bonuses.
• Support messages you send us through the Hub.
• Usage and security logs: sign-in times, last activity, IP address, browser and device information, an audit log of actions taken in the Hub, error reports, and rate-limit counters that protect sign-in and registration.

We only use cookies the Hub needs to work:

• Session cookies that keep you signed in securely.
• A referral cookie (tch_ref) that remembers a referral code from a link you opened, for 30 days, so the right creator is credited if you apply.

We don't use advertising or cross-site tracking cookies.

• To review your application and decide whether to approve it.
• To run your account: assign projects, share scripts and assets, receive and review your work, and send you notifications.
• To calculate earnings, pay you, and keep financial records.
• To calculate ranks and run the affiliate program, including detecting fraudulent referrals.
• To keep the Hub secure, investigate misuse, fix errors and enforce our terms.
• To meet legal, tax and accounting obligations.

We process your data because it's needed to consider and perform our agreement with you (your application and the work you do through the Hub), because we have a legitimate interest in running a secure, fair platform, because the law requires it (for example financial records), or, where required, with your consent, which you can withdraw at any time.

We don't sell your personal data. We share it only with:

• Supabase, which provides our database, authentication and file storage.
• Vercel, which hosts the Hub and delivers it through its content delivery network.
• Our email delivery provider, to send account and notification emails.
• Banks and payment providers you choose for payouts, to send your money.
• Our team, on a need-to-know basis according to their role, and other creators on the same project, who see your name and username.
• Authorities or advisers, when the law requires it or to protect our rights.

We connect to Google's YouTube APIs only to read analytics for channels we manage. We don't send your personal data to Google through that connection. Clients receive the finished videos, not your personal data, unless you've agreed to be credited.

Hub data and uploaded files are stored with Supabase in the Asia Pacific (Mumbai, India) region, and the Hub's server functions run in Vercel's Mumbai region. Static pages are cached on servers around the world so they load quickly. Because our providers operate internationally, your data may be processed outside the UAE. When that happens we rely on providers with appropriate contractual and security safeguards.

• Active accounts: for as long as your account exists.
• Rejected applications: up to 12 months after the decision, so we can handle questions and reapplications, then deleted.
• Payout and bonus records: for as long as UAE accounting and tax laws require.
• Security, audit and error logs: up to 12 months, unless we need them longer to investigate an incident.
• Project files: for as long as the project and the client relationship need them.
• Deleted accounts: your profile and sign-in are removed. Records of work, reviews and payouts are kept without a link to your account where we need them for the reasons above.

• All traffic to the Hub is encrypted in transit.
• Access rules in the database mean creators only ever see their own data and the projects they're assigned to.
• Project files are private and shared through short-lived signed links.
• Staff access is limited by role, and sensitive actions are recorded in an audit log.
• Connected YouTube credentials are encrypted, and sign-in and registration are rate limited.

Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and other laws that may apply to you, you can ask us to:

• give you a copy of the personal data we hold about you;
• correct inaccurate data (you can edit most of your profile yourself in Settings);
• delete your data, where we don't need to keep it for the reasons above;
• restrict or object to certain uses of your data;
• send your data to you in a portable format; and
• withdraw consent you've given.

Email hub@trifidmedia.com from the address on your account. We'll reply within 30 days. If you're unhappy with our answer, you can complain to the data protection authority where you live.

The Hub is only for people aged 18 and over. We don't knowingly collect data from anyone younger.

We may update this policy. We'll change the date at the top of this page, and tell you in the Hub or by email about material changes.

Trifid Media, Dubai, United Arab Emirates. Email hub@trifidmedia.com with any privacy question or request.