Privacy Policy

Effective Date: May 23, 2026 · Last Revised: May 23, 2026

This Privacy Policy (“Policy”) describes how StyleHaul, Inc. (“StyleHaul,” “we,” “us,” or “our”) collects, uses, shares, and safeguards personal information when you use stylehaul.net and the creator commerce tools and workspace offered through it (the “Platform”).

We built StyleHaul to run creator programs at a precision that didn't exist before. That requires data. This Policy explains exactly what we collect, why we collect it, and what controls you have. We don't sell your personal information. We never have.

“Personal Data” or “Personal Information” means any information that, alone or in combination, can reasonably identify a living person — including anything treated as PII under applicable law.

When we make material changes to this Policy, we'll notify you through the Platform or by direct communication, and comply with any additional requirements under applicable privacy law.

1. Who We Are

StyleHaul, Inc. is a creator commerce platform. We give brands and creators a unified workspace to manage partnerships, generate trackable links, attribute revenue, and process payouts. The Platform is operated from the United States.

Data controller: StyleHaul, Inc.
Contact: privacy@stylehaul.net

2. Scope of This Policy

This Policy applies to all visitors of stylehaul.net, individuals who apply to join the creator network, approved creators using the Studio, and brand representatives who interact with our partnership platform. It does not apply to third-party websites or services that we link to — those are governed by their own privacy policies.

3. Information We Collect and Why

3.1 When You Browse the Website

Information we collect:

• Cookies, pixels, and similar tracking technologies
• Log file data: IP address, browser type, operating system, referring URL, pages visited, time and date of visit
• Aggregated usage and performance metrics transmitted by your device

Why we use it: To administer and improve the Website; to analyze trends and user navigation patterns; to detect and prevent abuse; to generate aggregated statistics; and, where you have consented, to serve relevant advertising on third-party platforms.

Legal basis (GDPR): Legitimate interest for essential operations; consent for non-essential cookies where required by law.

If you don't provide it: Certain Website features may not function correctly, and we will be unable to analyze usage trends or improve the product.

3.2 When You Submit a Form or Contact Us

Information we collect: Full name, email address, social media handle(s), message content, and any other details you voluntarily include.

Why we use it: To respond to your inquiry; to provide technical support; to send transactional communications; and to customize your experience.

Legal basis (GDPR): Legitimate interest (responding to queries sent by you); consent for marketing where required.

3.3 When You Apply to Join the Creator Network

Information we collect:

• Full name, email address, phone number (optional), country
• Social media handles and channel URLs (YouTube, TikTok, Instagram, etc.)
• Publicly available channel statistics you provide or authorize us to retrieve (subscriber/follower count, average views, engagement rate, content niche)
• Invite or referral code, if applicable
• Any information you voluntarily add in free-text fields

Why we use it: To evaluate your application; to verify eligibility; to communicate the outcome; to onboard you if accepted; and to match you with relevant brand partnerships.

Legal basis (GDPR): Pre-contractual steps at your request; legitimate interest in operating a curated creator network.

3.4 When You Use the Studio as a Creator

Information we collect:

• Account credentials — name, email, password (stored as a secure hash), profile photo (optional)
• Connected accounts — when you link YouTube, TikTok, Instagram, or other platforms, we receive OAuth tokens and the public and authorized data from those accounts (posts, videos, engagement metrics, audience demographics where permitted by the platform)
• Content planning activity — drops you create or schedule, links you generate, campaign notes
• Attribution and conversion data — clicks and purchases attributed to your trackable links
• Payout information — when earnings payouts are enabled, bank account or payment routing details processed via a regulated third-party payment provider
• Support communications — messages and attachments you send to our support team
• Usage metadata — features used, session duration, error logs, and device/browser info

Why we use it:

• To create and manage your account and authenticate your identity
• To provide the Studio features: drop planning, link generation, earnings tracking
• To match you with relevant brand partnership opportunities
• To generate performance reports and insights for your content
• To process and send earnings payouts
• To send transactional notifications (account alerts, campaign updates)
• To send product and feature updates you have opted into
• To improve the Studio, train AI models on aggregated and de-identified data, and develop new features
• To detect fraud, policy violations, and abuse
• To comply with legal obligations

Legal basis (GDPR): Performance of a contract; legitimate interest; your consent (for optional features and marketing).

Marketing communications: With your consent, we may send newsletters, product updates, and promotional emails. You can unsubscribe at any time via the link in any email or by emailing support@stylehaul.net. Withdrawing consent does not affect the lawfulness of prior processing.

3.5 When You Interact With Us as a Brand or Agency

Information we collect: Full name, business email, job title, company name, phone number, billing address, financial account details for payments, and any materials you upload in the context of campaign collaboration.

Why we use it: To establish and fulfill our commercial relationship; to match you with suitable creators; to process payments; to communicate about active or prospective campaigns; and to improve our services.

Legal basis (GDPR): Performance of a contract; legitimate interest.

Note: In the context of campaign collaboration, brands and agencies may upload information (including personal data of third parties) to the Studio. StyleHaul processes such data as a processor on your behalf. You, as the brand or agency, remain the responsible controller for that data and must ensure you have obtained all necessary consents and permissions.

3.6 Additional Uses

• Detecting, preventing, and prosecuting fraud and other illegal activity
• Identifying and repairing errors and security vulnerabilities
• Conducting audits and internal compliance reviews
• Anonymizing or de-identifying data for research, analytics, and product improvement purposes (including AI model training)
• Complying with applicable laws, regulatory inquiries, and court orders

4. Use of Artificial Intelligence

The Studio uses AI-assisted features including brand-creator matching, content performance insights, and engagement analytics. These features process aggregated and de-identified metrics — they do not make legally binding automated decisions about you. Where an AI feature relies on your personal data (for example, linking your channel statistics to surface relevant campaigns), we rely on the lawful bases described in Section 3 above.

We may use anonymized or aggregated data to train, evaluate, and improve our AI models. This data cannot be used to identify you individually. We do not use your personal information to train AI models that are sold to or shared with third parties outside our service providers.

5. How We Share Information

5.1 We Do Not Sell Your Personal Information

We do not sell personal information to data brokers or third parties for their independent marketing purposes, and we do not share it for cross-context behavioral advertising.

5.2 Service Providers

We engage vetted service providers who process data on our behalf under contractual data processing agreements. Categories include:

• Cloud hosting and infrastructure providers
• Analytics and product intelligence tools
• Email delivery and CRM platforms
• Anti-fraud, security, and bot-detection services
• Payment processing and payout providers (regulated financial services)
• Customer support tooling

5.3 Brand Partners (Creator-Controlled)

When you, as a creator, opt into a campaign or generate an affiliate link associated with a specific brand partner, we share the minimum necessary identifiers with that partner to enable attribution, reporting, and payout. You control which campaigns you participate in.

5.4 Legal Disclosures

We may disclose personal information when required to do so by law, court order, subpoena, or governmental authority; to establish, exercise, or defend legal claims; to investigate potential fraud or illegal activity; or to protect the safety of any person.

5.5 Business Transfers

In the event of a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our assets, personal information may be transferred to the relevant successor entity. We will provide notice before personal information is transferred and becomes subject to a different privacy policy.

5.6 Affiliates

We may share personal information with our corporate affiliates (parent company, subsidiaries, or companies under common control) for purposes consistent with this Policy.

5.7 With Your Consent

We may share information with other parties when you have given us explicit consent to do so.

6. Your Privacy Rights and Choices

6.1 Rights Available to You

Depending on your jurisdiction, you may have some or all of the following rights (subject to exceptions permitted by applicable law):

• Access: request a copy of the personal information we hold about you
• Correction: request that we correct inaccurate or incomplete data
• Deletion / Erasure: request that we delete your personal data (note: we may be required by law to retain certain data)
• Restriction: request that we limit how we process your data in certain circumstances
• Portability: receive your personal data in a structured, machine-readable format and transfer it to another controller
• Objection: object to processing based on legitimate interest or for direct marketing purposes
• Withdraw consent: withdraw consent at any time where processing is consent-based (this does not affect processing that occurred before withdrawal)
• Non-discrimination: you will not receive discriminatory treatment for exercising your privacy rights
• Complaint: lodge a complaint with your local data protection supervisory authority

6.2 How to Exercise Your Rights

Submit a request by emailing privacy@stylehaul.net or support@stylehaul.net. We may need to verify your identity before processing your request (for example, by confirming your email address or account details). We will respond within the timeframe required by applicable law. In some cases we may charge a reasonable administrative fee where permitted.

You may designate an authorized agent to submit requests on your behalf. We will require written authorization and may verify your identity directly with you before honoring the request.

If you are unsatisfied with our response, you have the right to appeal by emailing support@stylehaul.net, or to lodge a complaint with the relevant supervisory authority in your jurisdiction.

6.3 Account Deletion

To delete your account and associated personal data, email support@stylehaul.net with the subject line “Delete My Account.” We will process the request within 30 days, subject to any legal retention obligations.

6.4 Marketing Opt-Out

You can unsubscribe from marketing emails at any time using the unsubscribe link in any email we send, or by emailing us. Opting out of marketing does not affect transactional communications (e.g., account security alerts, payout notifications).

7. How We Protect Your Information

We implement and maintain reasonable technical, organizational, and administrative security measures designed to protect your personal information, including:

• TLS encryption for all data in transit
• Encryption of sensitive data at rest
• Access controls based on the principle of least privilege
• Continuous monitoring and intrusion detection
• Regular security reviews and vulnerability assessments

No security system is impenetrable. While we work to minimize risk and respond promptly to incidents, we cannot guarantee that unauthorized third parties will never be able to defeat our security measures. You are responsible for protecting your account credentials and notifying us immediately of any suspected unauthorized access at support@stylehaul.net.

8. Data Retention

We retain personal information only for as long as necessary to provide the Studio, fulfill the purposes described in this Policy, and comply with legal, regulatory, tax, or accounting requirements. When data is no longer needed, we delete or anonymize it using a documented internal retention schedule.

We may retain data for longer periods where: (i) required by law or regulation; (ii) needed to maintain an accurate record in connection with disputes or legal claims; or (iii) we reasonably anticipate litigation.

For cookie retention periods, please see Section 10.

9. International Transfers

StyleHaul, Inc. is based in the United States. If you access the Studio from outside the United States, your personal information may be transferred to, stored in, and processed in the United States or other countries where our service providers operate. Privacy laws in those countries may differ from the laws in your country of residence.

Where we transfer personal data from the European Economic Area (EEA), the United Kingdom, or Switzerland to countries that have not been designated as providing an adequate level of protection, we rely on Standard Contractual Clauses (SCCs) adopted by the European Commission, the UK International Data Transfer Agreement (IDTA), or other approved transfer mechanisms. We continually monitor the circumstances of such transfers to ensure a level of protection essentially equivalent to that required under applicable law.

For more information about our transfer mechanisms, contact us at privacy@stylehaul.net.

10. Cookies and Tracking Technologies

We use the following categories of cookies and similar technologies:

• Strictly necessary: session tokens and security cookies required for the Studio to function. These cannot be disabled.
• Functional: remember your preferences (theme, language, saved state). Disabled by you in browser settings without breaking core functionality.
• Analytics: help us understand how visitors use the Website (e.g., Google Analytics). See Section 11 for details.
• Marketing / retargeting: used only with your explicit consent to show relevant ads on third-party platforms.

You can manage or delete cookies at any time through your browser settings or, where available, via our cookie preference center. Note that blocking certain cookies may limit Studio functionality.

11. Third-Party Services and Analytics

Google Analytics

We use Google Analytics to collect information about how users interact with the Website (pages visited, referral sources, session duration). This data is aggregated and not combined with personally identifiable information. Google's use of data is governed by the Google Analytics Terms of Service and the Google Privacy Policy. You may opt out via the Google Analytics Opt-out Browser Add-on.

Social Media Integrations

The Studio allows you to connect social media accounts (YouTube, TikTok, Instagram, etc.) via OAuth. When you authorize a connection, the relevant platform shares data with us according to the scopes you grant. We encourage you to review the privacy policies of each platform before connecting your account. Connecting your accounts is voluntary; some Studio features require it.

Payment Processors

Payout and payment processing is handled by regulated third-party financial service providers. We do not store full payment card numbers or bank account credentials on our servers. Their collection and use of your financial data is governed by their own privacy policies and applicable financial regulations.

Other Third-Party Tools

We may integrate additional analytics, customer support, email delivery, and infrastructure tools. We will update this section as material integrations are added. We reserve the right to add or remove analytic and operational tools as our business evolves.

Third-Party Links

The Website may contain links to third-party websites. We are not responsible for the privacy practices or content of such websites. We encourage you to read the privacy policy of any site you visit. Interaction with social media plugins on our Website may transmit identifiable information to the relevant platform; this can be prevented by disabling cookies in your browser settings.

12. Children

The Studio is not directed to individuals under the age of 16. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal data, we will delete it as promptly as possible. If you believe a minor has submitted information to us, contact us at privacy@stylehaul.net.

13. California Residents (CCPA / CPRA)

California Civil Code Section 1798.83 (the “Shine the Light” law) permits California residents to request information about our disclosure of personal information to third parties for direct marketing purposes. To make such a request, email support@stylehaul.net. We are required to respond to one such request per customer per year.

Under the California Consumer Privacy Act (CCPA) as amended by the CPRA, California residents have the right to:

• Know what personal information is collected, used, disclosed, or sold about them
• Request deletion of personal information (subject to certain exceptions)
• Opt out of the sale or sharing of personal information (we do not sell or share for cross-context behavioral advertising)
• Correct inaccurate personal information
• Limit the use and disclosure of sensitive personal information
• Non-discrimination for exercising their CCPA rights

To exercise your California rights, contact us at support@stylehaul.net. We will verify your identity before processing the request.

Do Not Track: We do not currently respond to Do Not Track (DNT) browser signals, as no industry-wide standard has been adopted for interpreting them.

14. EEA / UK Residents (GDPR)

If you are located in the European Economic Area or the United Kingdom, the following additional provisions apply.

The lawful bases we rely on for processing personal data include: (a) consent; (b) performance of a contract (or steps necessary to enter into a contract at your request); (c) compliance with a legal obligation; and (d) legitimate interests pursued by us or a third party, where those interests are not overridden by your rights and freedoms.

You have the right to lodge a complaint with your local supervisory authority. For EEA residents, this is the data protection authority in your country of residence. For UK residents, this is the Information Commissioner's Office (ICO) at ico.org.uk.

We ask that you first attempt to resolve any concerns directly with us before contacting a supervisory authority. Our GDPR contact: privacy@stylehaul.net.

15. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the “Last Revised” date at the top of this page and post a notice on the Website or send you a notification via email if you have an account. Your continued use of the Studio after the effective date of any changes constitutes your acceptance of the updated Policy.

16. Contact Us

If you have questions, concerns, or complaints regarding this Policy or our data practices, or wish to exercise any of your privacy rights, please reach out to us: