Spotlight Creator Network

Privacy Policy

Last updated: October 13, 2026

Spotlight (“Spotlight,” “we,” “us”) is a creator partnership platform operated by Hermes iMedia LLC. This policy explains what we collect, how we use it, and the choices you have — including how data from your connected Instagram account is handled.

Information we collect

• Your application. If you apply to the Spotlight Creator Network, what you enter on the form: your name, email, phone, city, social handles and links, follower range, the kind of content you make, and your pitch.
• Account & profile. Your username, email, hashed password, role, display name, phone number, Instagram handle, and avatar.
• Instagram & Facebook data (only if you connect). When you choose to connect your Instagram Business or Creator account through Meta, we access, via the Meta Graph API: your Instagram account ID and username, follower count, the linked Facebook Page’s name and ID, and your recent media (posts and reels) along with their metrics and insights (such as views, reach, likes, comments, saves, and shares). We store the access tokens needed to refresh this data.
• Payout information. If you receive payments, the payout contact details you provide (for example, a Zelle email or phone number).
• Platform activity. Bookings, event proposals, content submissions, and messages you send within Spotlight.

How we use your information

• To calculate and display your Composite Spotlight Score (CSS) from your engagement and content performance.
• To show your metrics and content to you and to the Spotlight team that manages the network.
• To operate bookings, events, payouts, and messaging.
• To maintain, secure, and improve the platform.

We do not sell your personal information, and we do not use your Instagram data for advertising.

How Instagram data is handled

Instagram and Facebook data is used solely to provide the features described above. Our use of information received from the Meta Platform follows the Meta Platform Terms and Developer Policies. We request only the permissions needed to read your account’s profile, your own posts and their insights; we never post, comment, or message on your behalf.

How we share information

• The Spotlight team and, where relevant to a booking or collaboration, partner restaurants and brands, see your profile and performance metrics.
• Service providers that host and run the platform (cloud hosting and our database provider) process data on our behalf under confidentiality obligations.
• We may disclose information if required by law.

How we store and protect it

Connections run over HTTPS. Your Instagram and Facebook access tokens are encrypted at rest (AES-256-GCM). Payout contact details are stored in our database, and only Spotlight administrators can see them. Access is limited to what is needed to operate the service.

Your choices & data deletion

To delete your Spotlight account and the personal data associated with it, open Settings and choose Delete account. If you can’t sign in, email info@hermesimedia.com from the address on your account. Full instructions are on our data deletion page.

Data retention

We keep your information for as long as your account is active or as needed to provide the service. Instagram tokens are deleted as soon as you disconnect. Short-lived sign-in and connection records expire automatically.

Cookies

We use a single, essential session cookie to keep you signed in. We do not use third-party advertising or tracking cookies.

Children

Spotlight is intended for adults (18+) and is not directed to children.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above.

Contact

Questions about this policy or your data? Email info@hermesimedia.com.