Privacy policy

Last updated 5 November 2026

DT OS is Double Tap's internal tool for managing inbound brand partnership deals with the creators we work with. This page explains, in plain language, what personal data DT OS holds, why, how long it's kept, who inside Double Tap can see it, and how to ask us to change or delete it. It covers creators we work with, and the people at brands who email us, not visitors to this page itself, which sets no cookies and tracks nothing.

What we collect, and why

Eleven kinds of data pass through DT OS. Each is collected for a specific, narrow reason: nothing here is collected speculatively.

Creator profile and platform statistics

What: Name, handle, category, nationality, city, languages, and follower/engagement statistics per platform (Instagram, TikTok, YouTube), plus audience demographics for creators who've connected an account for that. For a connected Instagram account, we also read the account's username and profile picture, and save a copy of that picture as the creator's profile picture in DT OS.
Why: To evaluate whether a creator is a fit for a brand offer, to support rate negotiation, and to report real campaign performance back to brands.
How long we keep it: Kept while the creator is on Double Tap's active roster. If an admin permanently deletes a creator's profile, their platform stats, audience data, and platform handles are deleted with it. A creator's name may still appear on a campaign report already delivered to a brand: that's the record of work already done, not a live profile.

Campaign post content and metrics

What: For creators taking part in a brand campaign, the individual posts submitted for it: a link to the post, its caption, when it was posted, and its performance (views, likes, comments, saves, and shares). For Instagram posts, we also save a copy of the post's thumbnail image, since Instagram blocks other sites from displaying its images directly.
Why: To build the campaign report a brand receives, showing real performance for the specific posts made under that campaign.
How long we keep it: Refreshed automatically once a day for a post's first 30 days, then once a week after that, until the campaign is marked complete. Kept as the record of a campaign already delivered to a brand, so a post's data stays on that report even if the creator's own profile is later deleted.

Daily campaign post figures

What: A day-by-day record of each campaign post's views, likes, comments, shares, and saves, as the campaign report showed them that day. For each figure, we note where it came from (the creator's connected Instagram account via Meta, the post's public page, or entered by Double Tap staff) and when it was last read.
Why: Platforms only show a post's figures as they stand now, with no history. Recording them each day is what lets a campaign report show how a post's performance built up over the campaign, rather than a single final number.
How long we keep it: Recorded once a day until the campaign is marked complete. Kept as part of the record of a campaign already delivered to a brand. Figures that came from a creator's connected Instagram account are deleted from this record if the creator asks us to delete their Instagram history, if they ask Instagram to delete the data DT OS holds about them, or if their profile is permanently deleted. A creator can ask us to delete those figures by writing to info@doubletapcontent.com. We can act on that request directly, without deleting the rest of their profile. Figures read from the post's public page, or entered by Double Tap staff, stay with the campaign's record. Removing a post from a campaign deletes its daily record.

Comments on posts, written by the public

What: Comments members of the public have left on posts, as anyone viewing the post can see them, collected through Apify. For each campaign post, up to 50 of its comments are read and sent to Anthropic, which sorts each one into positive, negative or neutral. We keep the counts and recurring themes, plus up to three comments of each kind: each one's text, the commenter's username and its like count. The other comments read aren't stored. For each post a social listening search finds, the comments read with it are kept (text, the commenter's username and like count), along with up to three of each kind for the search as a whole.
Why: To show a brand how audiences reacted to its campaign's posts, and to show the team how people are talking about a topic, a brand or a creator. The counts and themes say how many people reacted which way; the examples show that reaction in people's own words.
How long we keep it: A campaign post's comments are part of that campaign's record. They're deleted when the post is removed from the campaign or the campaign is deleted, and replaced whenever the post's comments are analysed again. They stay if the creator's profile is deleted, as the rest of a delivered campaign's record does. A report sent to a brand can include the example comments' text, never the commenter's username: the username stays inside DT OS, where Double Tap staff use it to check a comment is real. A social listening search's comments are kept until the search is deleted; they aren't linked to any creator's profile, so deleting a creator doesn't affect them. Anyone who wants their comments removed from DT OS can write to info@doubletapcontent.com with their username and the platform. We can act on that request directly, removing every comment of theirs we hold.

Daily platform and audience history

What: A day-by-day record of creators' platform statistics: every day for each creator who has connected Instagram and for each roster creator with a YouTube channel, and on any day a member of staff refreshes a creator's public Instagram or TikTok figures. It includes follower counts, follows and unfollows, reach, and views, plus, for Instagram accounts connected via Meta, audience demographics (country, city, age, gender) and a breakdown of reach and views by content type and by follower/non-follower split. Meta's own untouched response is stored alongside the derived numbers for each day.
Why: Instagram's own API only exposes a rolling window: 90 days for some figures, no history at all for demographics. Without a daily capture, that history is permanently lost once it ages out. This is what makes trend and growth reporting to brands possible over time, not just a single point-in-time figure.
How long we keep it: Disconnecting a creator's Instagram account stops future collection and removes the live audience snapshot; days already captured are retained. There is no fixed limit on how long this history is kept today. A creator can ask us to delete it by writing to info@doubletapcontent.com. We can act on that request directly, without deleting the rest of their profile. There's no self-service tool for a creator to do it themselves yet, so an admin runs it on their behalf once they ask. Everything is deleted if a creator's profile is permanently deleted.

Instagram story archive

What: For each creator who has connected their Instagram account, a copy of every story they post while connected: the photo or video itself, its caption, when it was posted, and the figures Instagram reports for it (reach, views, replies, shares, interactions, follows, profile visits, profile activity, and how viewers moved through it: tapping forward, tapping back to watch again, exiting, or swiping to the next account). Collection starts when the account is connected. Stories posted before then can't be recovered, by us or by anyone else.
Why: Instagram deletes a story, along with its figures, 24 hours after it's posted, and offers no way to retrieve either afterwards. Keeping our own copy is the only way a creator's stories can appear in their performance history and in the media kits and reports we prepare for brands on their behalf.
How long we keep it: Kept in private storage, never publicly accessible: only signed-in Double Tap staff can view it, through links that expire after an hour. Disconnecting a creator's Instagram account stops collection; stories already archived are kept. There is no fixed limit on how long the archive is kept today. A creator can ask us to delete it by writing to info@doubletapcontent.com, and we delete both the stories and their stored photos and videos, without deleting the rest of the profile. Everything is deleted if a creator's profile is permanently deleted, or if the creator asks Instagram to delete the data DT OS holds about them.

Recovered Instagram highlights

What: For each creator on our roster with an Instagram username, a copy of the stories they've saved to Highlights on their public profile: each photo or video, the date it was originally posted, and the name of the highlight it sits in. These are collected from the public profile through Apify, a third-party data collection service, not through Instagram's own connection, so they're gathered whether or not the creator has connected their account. Only what anyone visiting the profile can already see is collected. There are no figures (reach, views or similar) for these: Instagram doesn't provide them.
Why: Stories posted before we started archiving a creator's stories can't be retrieved any other way, and the ones a creator chose to keep on their profile are part of their track record. They appear in the creator's story history and in the media kits and reports we prepare for brands on their behalf.
How long we keep it: Kept in private storage, never publicly accessible: only signed-in Double Tap staff can view it, through links that expire after an hour. Collected again only when a creator's Instagram username is added or changed, when they connect Instagram, or when we refresh the roster. Removing a story from a highlight on Instagram doesn't remove our copy, so if a creator wants something we recovered removed, they can write to info@doubletapcontent.com and we delete it, without deleting the rest of the profile. Everything is deleted if a creator's profile is permanently deleted, or if the creator asks Instagram to delete the data DT OS holds about them.

Inbound email content

What: The full text of brand outreach emails arriving in inboxes a Double Tap staff member has connected: sender, subject, and body.
Why: To detect brand partnership offers automatically and score them. The original text is kept specifically so scoring can be re-run later, as the process improves, without needing to re-fetch it.
How long we keep it: Kept indefinitely alongside the offer it produced, unless deleted on request. DT OS only ever reads email, it has no ability to send, reply, or delete anything in the connected inbox itself.

Commercial data read from HubSpot

What: Deal values, pipeline stage, contract terms, and revenue figures for brand relationships, read from Double Tap's separate HubSpot CRM.
Why: HubSpot, not DT OS, is the team's system of record for this. DT OS's assistant answers commercial questions by reading it live rather than keeping its own copy.
How long we keep it: Not stored. Read live from HubSpot at the moment a question is asked, held in memory for at most five minutes to avoid repeat lookups within the same conversation, then discarded.

OAuth tokens for connected Google and Meta accounts

What: The access and refresh tokens issued when a Double Tap staff member connects a Gmail inbox, or a creator connects their Instagram account for insights.
Why: To read brand emails and read Instagram performance data on an ongoing basis without asking for sign-in again each time.
How long we keep it: Stored encrypted, never in plain text, for as long as the connection stays active. Never shown to any user, used only by the server to make the relevant API call.

Creator personal details, including contract and identity information

What: Nationality, city, languages, and commercial rate terms entered by Double Tap staff, plus contract summaries and flagged clauses where a contract exists for a specific deal.
Why: To run and track partnership negotiations and commercial agreements.
How long we keep it: Kept while the creator relationship is active, or as needed for an ongoing or completed deal's own records. Deletable on request, subject to the caveat under Your rights below.

Who inside Double Tap can see what

Access follows role, and is enforced by the database itself, not just by what the app's screens show.

Admin: full access to everything on this page.
Partnerships: deal, contract, and payment detail; creator profiles; and brand emails and offers, but only from the inboxes they themselves connected. One partnerships account cannot see another's connected inbox unless an admin reassigns it to them.
Viewer: campaign reports and creator/campaign lists only, read-only. No access to deal value, contracts, payments, brand emails, or account settings.

Where your data lives

DT OS's database runs on Supabase, hosted in the EU (Frankfurt). A small number of specialist services process specific data on our behalf, each scoped to one job:

Anthropic: reads offer and email text to parse and score brand offers, powers the in-app assistant that answers staff questions, and sorts public comments into positive, negative and neutral.
Apify: fetches public social media statistics for creators from Instagram and TikTok, collects public comments on campaign posts and on posts found by a social listening search on Instagram, TikTok and YouTube, and recovers the stories creators have saved to Highlights on their public Instagram profile.
HubSpot: Double Tap's separate commercial CRM; DT OS reads deal and revenue data from it live, as described above.
Google: provides read-only Gmail access to inboxes a staff member connects, and public statistics for creators' YouTube channels and videos through YouTube's Data API.
Meta: provides Instagram Insights data for creators who connect their account.
Sentry: receives error reports if something in DT OS breaks, so we can fix it. Email content, commercial figures, tokens, and anything from our secrets store are stripped out before a report is ever sent.

Your rights

If DT OS holds data about you, as a creator we work with, or as someone at a brand who's emailed us, you can ask what we hold about you, ask us to correct it, or ask us to delete it.

Write to info@doubletapcontent.com. We'll get back to you and handle the request directly: there's no automated self-service flow for this yet.

One honest caveat: some records tied to a completed commercial agreement, such as a paid invoice or an outstanding balance, may need to be kept for our own accounting and legal obligations even after a deletion request, in which case we'll tell you plainly what we kept and why rather than silently keeping it.

Double Tap: this policy covers DT OS specifically, not doubletapcontent.com or any other Double Tap product.