This Privacy Policy describes how IWBL collects, processes, stores, and protects personal data when you use the IWBL website, application, online platform, and digital-services marketplace. It applies to all Service users, including musicians, label representatives, content creators, managers, and website visitors.
Last updated: 23 September 2026
The commercial Service operator, seller of digital services, and recipient of user payments is IWBL, LLC, a limited liability company registered in the State of Delaware, United States.
Privacy email: [email protected]
This Policy applies to registration and authentication, profiles and the catalog, offers and negotiations, chats and support, orders and attached videos, tracks, public and paid-by-views campaigns, payments, balances, refunds, payouts and withdrawal requests, subscriptions, ratings, recommendations, notifications, and IWBL analytics. Third-party websites and services are governed by their own policies.
We may process the following categories of data:
• Account and authentication: Firebase identifier, email, name, username, role, language, settings, verification status, and session data. Credentials and passwords are handled by Firebase; IWBL does not receive your password in plain text.
• Profile and professional activity: display or legal name, contact details, country, genres, description, photos and media, TikTok links and usernames, portfolio, rates, ratings, profile and video metrics, and details of accounts managed by a manager.
• Content and transactions: tracks, files, links, descriptions and requirements, budgets, offers, negotiations, chat messages, orders, campaigns, deadlines, statuses, published-video links, verification results, reviews, and transaction history.
• Payments and payouts: amounts, balances, fees, transaction statuses and identifiers from the selected payment provider, PayPal, and EasyStaff, refunds, and withdrawal requests. For payouts, we may store the details you provide, including a payout card number, cardholder name, PayPal email, SBP phone number, bank and recipient name, bank details (account number, BIK/SWIFT/BIC, bank name, tax identifiers, and other details required by the selected payment or payout provider), crypto wallet address and network, platform, owner name, country, and city. For payments through a payment provider, bank-card data, CVV/CVC, and 3-D Secure authentication are processed by the payment gateway and by banks/payment systems; IWBL does not receive CVV/CVC in plain text. For an EasyStaff payout, we may share the user's name, contact details, country and address, user and task identifiers, service description, amount and currency, deadlines, completion status, result, and supporting information. The payout recipient's identity is verified in Didit's external secure interface. IWBL does not accept document images through the withdrawal form. Didit processes document images, face photos or video, and biometric data for identity, liveness, and face-match checks. IWBL receives the verification response and uses extracted names and date of birth to compare recipient details and age; these values may also be displayed transiently to the payout-method owner and an authorized administrator to resolve mismatches. IWBL does not persist the full Didit report or document images in its database; it retains the result, dates, reasons, identifiers, identity fingerprints, and administrator decision.
• Communications: support requests, email and Telegram communications, notifications, and information required to review disputes.
• Technical and analytics data: IP address, device and browser information, server and security logs, cookies and local storage, Firebase and Meta identifiers, usage events, referral sources, and anti-fraud signals.
We obtain data:
• directly from you when you register, complete a profile, upload materials, communicate, pay, or request a payout;
• from a manager, managed creator, or other deal party to the extent needed for collaboration;
• from public TikTok profiles, posts, and statistics and other public sources you identify, including through Apify or another TikTok statistics provider;
• from authentication, payment, and communication providers, including Firebase, a payment provider, PayPal, and Telegram;
• automatically when you use the Service, including technical logs and analytics events.
We process data to:
• create and maintain accounts, authenticate users, and secure the Service;
• display profiles and the catalog, match participants, and operate manager workflows, offers, negotiations, chats, orders, tracks, and campaigns;
• receive and verify video links, obtain public statistics, and produce ratings, recommendations, reports, and analytics;
• account for payments, balances, and fees, accept online payments through a payment provider, create and accept EasyStaff tasks, and handle refunds, payouts, withdrawal requests, disputes, KYC, and anti-fraud checks;
• send service, status, and security notifications, answer requests, and resolve disputes;
• maintain, diagnose, and improve the Service and measure feature and marketing performance;
• comply with contractual, accounting, tax, payment, and other legal requirements and protect the rights of IWBL and its users.
We process personal data with your consent, to enter into or perform a contract or respond to your request, to comply with legal obligations applicable to IWBL, to protect the legitimate interests of IWBL and its users where permitted by law, and on other grounds provided by applicable law. Consent may be given during registration, by submitting a form, choosing a setting, or taking another unambiguous action in the Service. You may withdraw consent, but this does not affect prior lawful processing and may limit features that require the data. Data will not be deleted where retention is required for an unfinished transaction, payout, dispute, or by law.
Parts of profiles, TikTok accounts, rates, ratings, tracks, and campaigns may be publicly visible depending on the selected feature. Musicians, content creators, managers, and other participants receive only the data needed for an offer, negotiation, chat, order, campaign, publication, result verification, payment, or dispute. A manager may access linked accounts within the authority granted to that manager. Authorized IWBL staff and contractors receive access on a need-to-know basis. We do not sell personal data.
IWBL, LLC is registered in the State of Delaware, United States. To operate the Service, we may use providers including Google Firebase (authentication, analytics, and notifications), Meta Pixel (advertising measurement and advanced matching where used), a payment provider (internet acquiring and payment gateway), PayPal (payments), DigitalOcean Spaces (infrastructure and file storage), Telegram (bot, notifications, and support), Resend (email), Apify or another TikTok statistics provider (collection of public TikTok statistics), and security and professional-service providers.
The payment provider may process payment data, card data, 3-D Secure authentication, payment statuses, and technical transaction identifiers as needed for online payment acceptance, verification, refunds, anti-fraud controls, and compliance with Visa and Mastercard payment-system rules. Card data is entered on the payment gateway side; IWBL does not receive CVV/CVC in plain text.
SQUADS CLOUD F.Z.C (UAE, registration number 47764) is IWBL's contractual provider for task documentation, contractor engagement, and payouts through EasyStaff / Squads.Cloud. Affiliated operators may participate in the approved workflow; the operator contracting with and paying a recipient is identified by the relevant payout documents. IWBL shares the necessary profile, task, and payout data. Those operators may independently determine mandatory payment, tax, and sanctions checks and act as independent controllers for that processing.
Didit verifies identity on IWBL's instructions as a data processor; it may also act as an independent controller for security and fraud-prevention purposes specified in its terms. Documents and biometric data are processed by Didit. IWBL does not download copies into its own storage or transmit document images to EasyStaff. IWBL staff access to checks in the Didit console is limited to operational need.
IWBL and its providers, including DigitalOcean and EasyStaff, may process data in the United States, the European Economic Area, and other countries outside the user's country. Cross-border transfers are limited to what is necessary for the stated purposes and use a legal basis and safeguards required by applicable law. We may disclose data to public authorities or other persons where required by applicable law or necessary to protect lawful rights.
We retain data while an account is active and for as long as it is needed for the purposes described in this Policy. IWBL does not retain document images shown to Didit during payout-recipient verification; IWBL retains the result, dates, reasons, operational identifiers, identity fingerprints, and administrator decisions. Names and date of birth received from Didit for comparison are not persisted as a separate report copy; recipient data supplied by the user is stored with payout details. Approval does not automatically delete the session or materials in Didit: their retention is governed by retention settings, applicable Didit terms, and lawful processing grounds. A saved payout method and its reusable copy of full payout details are retained while the user keeps that method on an active account for future payouts requested by the user. Deleting the payout method or closing the account deletes that saved copy. An already-created withdrawal request is a separate transaction record: its encrypted payout-details snapshot may be retained with restricted access where needed to evidence the payout, resolve a dispute, meet accounting or tax requirements, comply with law, or preserve a legal hold, and is deleted or anonymized after those grounds expire. After account closure, other data is deleted, anonymized, or restricted, except for order, payment, payout, accounting and tax records, proof of consent, dispute materials, and security logs that must be retained for applicable mandatory periods or to protect rights. Backups are deleted through their rotation cycle. Public display of profiles and materials ends or is restricted unless continued publication is required for an active transaction, by law, or to resolve a dispute.
We use access controls, authentication, encryption in transit, logging, backups, and organizational controls appropriate to the nature of the data and risks. Users are responsible for securing their accounts and devices. No method of storage or transmission is completely secure. Report a suspected incident to [email protected].
The Service uses cookies and browser local storage for authentication, security, language, preferences, cart, and interface state. Firebase Analytics and Meta Pixel may measure visits, events, and advertising conversions; where Meta advanced matching is used, normalized contact details may be transmitted according to settings and applicable consent. Optional analytics and marketing technologies are used with consent where required by law. Restricting them through consent or browser settings may affect analytics but should not disable strictly necessary functions.
To the extent provided by applicable data-protection law, you may:
• know whether and how your data is processed, including purposes, sources, methods, categories, retention periods, and possible cross-border transfers;
• access your data and obtain confirmation of processing;
• request correction of inaccurate or incomplete data;
• request deletion, blocking, or restriction of processing where the law provides such a right;
• withdraw consent subject to statutory exceptions and outstanding obligations;
• object to processing or to an automated decision that applies to you and request human review where the law provides such a right;
• complain to a competent supervisory authority or a court.
To submit a request, email [email protected]. We may ask for information needed to verify your identity and protect the account.
IWBL may automatically calculate statistics, ratings, recommendations, order and campaign statuses, and indicators of fraud or technical violations. We do not intend to make solely automated final decisions that by themselves create, change, or terminate your legal rights. If an automated result materially affects access to an order, payment, or payout, you may request an explanation and human review through support.
The Service is intended for persons with legal capacity. A minor may provide personal data and use the Service only with the consent and involvement of a legal representative where required by law. If you believe a minor's data was obtained without a proper basis, contact us so that we can investigate and take appropriate action.
We may update this Policy when the Service, providers, or laws change. The current version and update date are published on this page; we will provide notice of material changes through available channels where required or reasonably practicable. For privacy questions and rights requests, contact: IWBL, LLC; email: [email protected].
When processing withdrawal requests, we may account for the requested amount, IWBL fee, amount after the IWBL fee, selected payout method, payout statuses, and provider technical identifiers. IWBL does not calculate or withhold intermediary fees charged by banks, payment systems, or payout providers, and does not determine the tax regime of the recipient's country. The recipient is responsible for taxes, reporting, and other obligations related to the income received. The amount actually received may be lower than the amount sent for payout because of intermediary fees, conversion, or the selected provider's requirements.