Privacy policy

What this service is

Hard Carry Media licenses the name, image and likeness of real people to brands, and produces content in their image under those licenses. If you have an account here, you are one of those people. This policy describes what we hold about you, why, and how to make us delete it.

What we collect

What you tell us. Your email and a hashed password, the name you go by, your legal name, your phone number and your city, region and country. Your date of birth, which we use to confirm you are over 18. If you choose to state your gender or ethnicity, we store what you stated.

If you joined the waitlist. The waitlist has its own privacy notice, which says what it keeps and how to have your entry deleted.

What your connected channels tell us. When you connect a platform, we read your public profile — handle, profile image, bio, follower count, post count — and a sample of your most recent posts, including their captions, thumbnails, and like and comment counts. We store an access token so we can refresh this; it is encrypted at rest with AES-256-GCM.

What you upload. If you complete identity verification, the photo you submit.

What we work out. From your bio and captions we generate a description of what you make, the categories you make it in, and a brand-safety assessment. This is done by a large language model operated by Anthropic. Every stored attribute records where it came from and how confident we are, and anything you have declared yourself always overrides anything we inferred.

What we never do

We do not infer race, ethnicity, skin tone or national origin from your photographs or videos. There is no code path in this product that does it. Ethnicity is stored only when you state it yourself.

We do not post as you. Connecting a channel grants read access only. We do not request publishing permissions when you connect, and your channel page shows exactly what each connection allows.

We do not use your likeness without an active, signed grant covering that specific use. Every use is checked against the agreement you signed, as it stood on the date of use. Your rights page shows what is currently permitted.

We do not name other people in your posts. Descriptions we generate refer to anyone who is not you by their role, never their name, and never describe children in identifying detail. They did not agree to any of this; you did.

Meta platform data

Where you connect Instagram or Facebook, we receive your profile and recent media through Meta’s APIs, with the permissions you approved on the consent screen. We ask for the minimum needed to build your profile.

If you remove Handstand from your Meta settings, or ask Meta to delete the data we hold, we delete that connection, its stored tokens, the posts we had sampled and its profile image — and we record that we did. You receive a confirmation code you can check at any time.

Who sees your information

Staff at Hard Carry Media can see your profile in order to run the roster. Brands see the profile you have shaped — what you make, your audience size and the categories you have agreed to work with — when they search for someone to work with.

We use Anthropic to generate profile descriptions, Neon to host our database, Amazon S3 to store images, and Vercel to host this site. We do not sell your data, and we do not share it with advertisers outside the licensing relationship you have agreed to.

Deleting your data

You can disconnect any channel at any time from your channels page, which deletes that connection and everything derived from it.

You can end your agreement with us. On termination we delete your likeness models and the source material behind them within 30 days — from our production systems, from our vendors, and from our backups — and an officer of the company certifies that it was done.

Deletion here means deletion. We do not hide records behind a flag and call it removed. What we keep afterwards is the record that the deletion happened, which is how we can prove to you that it did.

How long we keep things

Your profile and connections are kept while your account is open. The record of what you permitted, and when, is kept permanently and cannot be edited — only added to. That record is what protects both of us in a dispute about what was allowed on a given day, and it survives the deletion of everything else.

Age

You must be 18 or over. You tell us your date of birth when you apply, and an application from anyone under 18 is refused outright rather than held — nothing is stored and there is no path onward from it. A person also reviews every application before it is approved. We do not knowingly hold accounts for anyone under 18.

Contact

Questions, requests and complaints: privacy@hardcarrymedia.com.