Sourcing-stage companion to the creator privacy notice (Att. B). For buyer-side data handling see the buyer privacy notice; for the per-study consent + NDA shape every accepted creator signs, see the sample template (Att. C). This page covers public profile data Provider collects before a creator has opted in.

Sourced creator profiles — notice at collection

This is a voluntary notice at collection covering public profile data Offbrain Research collects about a creator beforethe creator opts in. Provider is not currently a "business" under California's CCPA/CPRA per §1 of the creator privacy notice; we publish this page as the at-or-before-collection equivalent so the same handling commitments apply regardless of statutory status. If Provider crosses the §1798.140 thresholds, the full CCPA/CPRA mechanics described in §7 of the creator privacy notice apply automatically.

Categories of personal information collected at sourcing

Identifiers: public account handle, public display name, public profile URL.
Internet or other electronic-network activity information: follower-count band, public bio text, public category tags, public profile snapshot URL, source-vendor identifier, snapshot timestamp.
Inferences for fit-evaluation only:a category- match score derived from the public bio and category tags. The score is study-scoped and is not retained beyond the study's §6 retention window in the creator privacy notice.

Provider does not collect sensitive personal information at sourcing as defined under CPRA §1798.140(ae) (no government IDs, no precise geolocation, no biometric data, no health information, no union membership, no genetic data, no financial account data, no contents of private communications). Sensitive personal information is not used in any inference at sourcing.

What we collect at sourcing

Public profile data permitted by the platform's API or by license: handle, display name, follower-count band, category tags, public bio, profile snapshot URL.
Source vendor identifier and timestamp of the snapshot.

We do not collect at sourcing: contact data (email, phone, DM channel), private posts, demographic inferences, government IDs, tax IDs, biometric data, or any non-public material.

Where we get it

Platform APIs. Instagram Graph API and the Instagram Basic Display API for opt-in connections, used only when the creator has authorized the connection through the platform.
Licensed creator-discovery vendors. Each vendor is contracted under a written license that prohibits resale, restricts retention, and requires the vendor to maintain rights from the underlying source platform. Provider records the vendor identity and license terms with every snapshot.
Opt-in pools. Creators who applied to Offbrain Research directly via the application form.

Provider does not scrape any platform. Provider does not buy data from open-web scraping vendors. The named-vendor list is published on request via privacy@get.offbrain.ai.

Why we collect it

Solely to evaluate creator fit for a specific research study and to contact the creator about that study. Sourced profile data is not used for advertising, scoring, modeling outside of fit-evaluation, training AI models, resale, or aggregation into a product offered to clients.

How long we keep it

Up to 12 months from the snapshot date, then deleted or refreshed under the vendor license. If the creator never opts in, the snapshot is purged at or before that 12-month boundary.

How a sourced creator opts out

Any creator can request that Offbrain Research delete its sourced profile data and add the creator to a permanent do-not-contact list, at any time, without giving a reason, by emailing privacy@get.offbrain.ai. We respond within 10 business days and complete the deletion + suppression within 30 days. The do-not-contact entry is retained indefinitely (in hashed form) so we can honor the request permanently.

Notice in the first contact

The first message we send to a sourced creator includes:

The name of the source vendor that produced the snapshot.
A link to this notice.
A one-click opt-out path that adds the creator to the do-not-contact list with no further interaction required.

Sale or sharing

Offbrain Research does not sell sourced creator data. Offbrain Research does not share sourced creator data with clients in any tier — clients receive only what the creator authorizes after the creator opts in and signs a per-study consent.

California rights

California residents may exercise the rights described in §7 of the creator privacy notice at any time, by contacting privacy@get.offbrain.ai. We honor verifiable consumer requests within statutory timelines. Provider re-assesses CCPA "business" threshold status quarterly per §1 of the creator privacy notice.

Version: v1.0.1 · Effective: 2026-05-07