Skip to content

Privacy policy

Last updated 4 October 2026

1. Who we are

Patryk (getpatryk.com) is run by Moonfield Labs, Inc., a Delaware corporation. For anything about your personal data, write to privacy@moonfield.ai. Our representative in the European Union (GDPR Article 27) is Josef Schalumov, Theas Afroditis, Plage Residence 40, 8204 Geroskipou, Paphos, Cyprus, reachable by email at the same address. You can also write to us at 2810 North Church Street, Wilmington, Delaware 19802, USA.

We act as controller for our website, waitlist, account and billing administration, security, creator database and market insights. For campaign content processed on a business customer's instructions, that customer is the controller and we act as processor under the applicable data processing agreement. The customer's own privacy notice governs its outreach and use of that content. You may contact us for help identifying the responsible customer or routing a request.

This policy covers three groups of people:

  • Customers: people who use Patryk for their business.
  • Creators: people whose public channels are in our creator database, or who are contacted by our customers through Patryk.
  • Visitors to our website and people who join our launch waitlist or contact us.

2. What we collect about customers and visitors

  • Account: your name, email address and, if you sign in with Google or Microsoft, your basic profile from that provider. Sign-in is handled by Clerk for us.
  • Your work in Patryk: chats, briefs you upload, campaigns, outreach messages and creator replies, campaign terms, contracts, deliverables and payment records. A brief attached in chat is stored privately and deleted with that chat.
  • Mailbox connection: outreach is sent from your own mailbox through our outreach provider, Woodpecker, which holds the connection to your mailbox; we do not store your mailbox password or tokens.
  • Billing: your plan and payment status. Card details go to Stripe and never reach us.
  • Usage and security records: which searches, reveals and exports you ran, sign-in events and technical logs, used to run, secure and limit the service.
  • Waitlist and enquiries: your email address, messages you send us and, where recorded, the sign-up source and submission time. We use waitlist addresses to send the launch notification you requested, not to enrol you in unrelated marketing.
  • Website visits: page views, referring sites, browser and device information and approximate location derived from network information. We use Vercel Web Analytics to understand aggregate website use without advertising cookies. Hosting and security services also process technical request information, including IP addresses, to deliver and protect the site.

3. What we collect about creators, and where it comes from

Our creator database helps businesses find creators to work with. For each creator it can hold: name or channel name, channel links, platforms, languages, country, channel statistics (followers, views, engagement, how often they post), topics and a short description of the channel, brands mentioned in public videos, audience statistics (the share of viewers by age group, gender and country, never data about individual viewers), whether the creator shows their face on camera, a business contact email and greeting, the creator's own rate card, and a reliability label based on completed collaborations.

This information comes from:

  • public channel pages and platform statistics (for example the YouTube Data API);
  • partners who license creator data to us, currently softstory, an influencer-marketing agency, which gathered it from public sources and from its own collaborations with creators;
  • our own analysis of public channel content, done with AI models;
  • our customers' campaigns, as described in section 5.

If our customers contact a creator through Patryk, the messages, replies, offers and agreements in that conversation are stored for that customer.

4. How we use personal data, and why we may

  • To administer accounts and provide support. Where you contract with us personally, processing necessary to supply the service is based on that contract. For people acting on behalf of a business, we rely on our legitimate interest in providing and administering the business relationship. Campaign content processed on a customer's instructions is governed by its purposes and lawful basis, and our data processing agreement with that customer.
  • To keep a creator database that helps businesses find relevant creators and contact them about paid collaborations. Legal basis: our legitimate interest, and our customers', in finding creators for relevant business collaborations. We assess necessity, reasonable expectations and the effect on creators' rights; public availability alone does not remove those rights or permit every use. Every creator can object at any time.
  • To create market insights about creator rates and campaigns (section 5). Legal basis: our legitimate interest in giving businesses and creators a fair picture of market prices, balanced by the safeguards in section 5.
  • To secure and improve the service, prevent misuse, understand aggregate website use, handle enquiries and establish or defend legal claims. Legal basis: our legitimate interests in operating a safe and effective business. We retain tax and other legally required records to comply with legal obligations. Where consent is required for a particular technology or use, we obtain it.
  • To send a requested launch notification or other marketing you opt into. Legal basis: your consent. You can withdraw it by writing to privacy@moonfield.ai or using an unsubscribe link in an email. Withdrawal does not affect earlier lawful processing or necessary account and service notices.

5. Deal and rate information

Collaborations involve prices. When customers use Patryk to negotiate and manage deals, the service processes what creators ask for and what is agreed: rate cards and prices a creator shares, offers and counter-offers, agreed fees, deliverables, dates and whether the collaboration was completed.

  • For the customer's own campaign. The service reads this information from the conversation, with AI models, so it can keep offers within the customer's budget, prepare the contract and invoice, and remind both sides what is due. We do this for our customer, on their instructions.
  • For market insights. We also combine deal information from many campaigns into statistics: typical price ranges by platform, audience size, niche, market and deliverable, and typical response and completion rates. A creator's own rate indication (for example "integrations usually $1,000 to $1,500") is shown only when it combines at least three deals from at least two different customers. Amounts are rounded into ranges. Other campaign-derived figures combine deals from at least two different customers. We never show an individual deal, a contract, a message, or which brand or customer paid what, and suppress figures where the context could reveal that information. Contract text, confidential terms and deals marked confidential or reported to us as confidential are excluded from shared insights. An indication linked to an identifiable creator remains personal data, even when it does not identify a customer.
  • Rate cards. A creator's published rate card, or one shared with permission for wider disclosure, may be shown to customers as the creator's asking price, with its date. A rate card shared privately for one campaign is not automatically permission to publish it to other customers.
  • Reliability label. We may show a label such as "reliable" based on how many collaborations a creator completed on time. Only the label is shown, never the deals behind it.

Creators can ask us at privacy@moonfield.ai to stop showing rate indications, a rate card or a reliability label about them, or to see what we hold. We act on it without asking for a reason, unless the law requires us to keep something.

6. AI processing

Patryk uses AI models (currently Anthropic's Claude, through Vercel's AI Gateway, and Perplexity for web search) to answer in chat, search, draft messages, read replies and invoices, and review content against briefs. Our providers process this data to give us the answer and do not use it to train their models under the terms applicable to our business use. AI can produce estimates and labels and, where a customer enables automation, send messages or negotiate within the customer's instructions. Customers remain responsible for those instructions and their decisions. You can ask us to correct inaccurate personal data or request human review of a creator label or estimate at privacy@moonfield.ai.

7. Who we share data with

We do not use personal data for targeted advertising or share it for cross-context behavioural advertising. We provide creator profiles and business contact information to paying customers as part of the service. Some privacy laws may treat that access as a sale of personal information; the choices in section 10 apply to that disclosure. We do not sell private customer campaign content. We disclose data to the following recipients for the purposes described in this policy:

  • Our customers: creator data as described above, within the limits of their plan and our terms, which forbid reselling it or using it for anything but collaboration outreach.
  • Service providers who process data for us: Vercel (hosting, analytics, file storage and the AI Gateway), Neon (database), Clerk (sign-in), Stripe (payments), Anthropic and Perplexity (AI), Woodpecker (sending outreach from customers' mailboxes), Documenso (e-signatures), Resend (email notices), Apify (video transcripts) and Slack (internal alerts to our team). We use Resend, Slack and other contracted service providers, as applicable, to manage the waitlist and notify our team of sign-ups. Providers receive data needed for their role under applicable contractual restrictions. Some, such as payment providers, also process data as independent controllers for their own legal and security obligations.
  • softstory, as a customer of Patryk for its own work. We do not give softstory other customers' data.
  • Authorities or others when the law requires it, or to protect rights and safety.
  • A buyer or investor, under confidentiality, if our business is sold or merged.

8. International transfers

We are based in the United States and our providers mainly process data there. When personal data comes from the European Economic Area, the United Kingdom or Switzerland, we rely on the European Commission's standard contractual clauses (and the UK addendum) or on a provider's certification under the Data Privacy Framework where that certification covers the transfer. We use the relevant UK and Swiss safeguards where applicable and assess additional protections where required. You can request information about the relevant safeguards or a copy of applicable clauses at privacy@moonfield.ai.

9. How long we keep data

  • Customer accounts and their work: while needed to provide the account and service, then normally 30 days to request export after closure, followed by deletion or anonymisation. Cancelling renewal does not immediately close your account or delete data. An earlier valid deletion request may shorten the export period; we follow the applicable data processing agreement for customer-controlled data.
  • Audit records of searches, reveals and exports: normally 90 days. Records of unlocked contacts and usage needed to administer your account may remain for its duration. Billing records are kept for applicable tax, accounting and legal limitation periods.
  • Creator profiles: while relevant to business collaborations, subject to accuracy checks and objections. Creator-linked insights follow the same privacy rights; they are not retained indefinitely merely because several deals contributed to them. We may retain genuinely anonymous aggregate statistics.
  • Waitlist details: until we have sent the requested launch notification or you withdraw, unless you separately opt into further updates. Support correspondence: for as long as needed to handle your enquiry and related disputes. Minimal suppression records may be kept to honour opt-outs and prevent a removed profile or contact from being reintroduced.

We may retain limited records longer where necessary for legal obligations, security investigations or establishing, exercising or defending claims. Deleted data may remain in restricted backups until they are overwritten through the applicable backup cycle; it is not used for ordinary business purposes. Retention depends on the purpose, sensitivity of the information and applicable legal requirements.

10. Your rights and opt-outs

Depending on where you live, you can ask to see, correct, delete or receive a copy of your personal data, to restrict or object to how we use it, and to withdraw consent. Creators can object to being in our database at any time, and we then remove their contact details and stop showing their profile to customers. Where applicable, California and other US state laws also give rights to know the categories and specific pieces of data we hold, obtain a portable copy, correct or delete data, and opt out of sale, targeted advertising or certain profiling. We do not discriminate against you for exercising your rights. To opt out of disclosure of your creator data to paying customers, email privacy@moonfield.ai with "Do not sell or share my personal information" and your channel or profile link so we can find the right record. This option is available to creators regardless of where they live.

Send requests to privacy@moonfield.ai. We may request proportionate information to verify identity or an authorised agent's authority, but do not require an account to make a request. We respond within the deadline that applies to you, normally one month under the GDPR or 45 days under applicable US state laws, and explain any lawful extension or refusal. You can ask us to review a refusal at the same address and appeal where local law provides that right. You can also complain to your data protection authority, including in the EEA country where you live or work, or to the UK Information Commissioner. Where we act for a business customer, we assist that customer in responding to requests about its campaign data.

11. Security

Data is encrypted in transit and at rest with our providers. Access to creator contact details, pricing and customer campaigns is split between separate, restricted database accounts, and contact reveals and exports are logged. No system is completely secure, and we cannot guarantee absolute security. Keep your credentials safe and contact us promptly if you suspect unauthorised access. You can request account closure or deletion at privacy@moonfield.ai; subscription cancellation and data deletion are separate processes, as explained in the terms.

12. Cookies and analytics

We use necessary cookies to keep you signed in and secure. We do not use advertising or cross-site tracking cookies. The marketing website uses Vercel Web Analytics, which measures visits without cookies and without tracking visitors across websites. You can control cookies through your browser, although blocking necessary cookies may prevent sign-in or other account features from working.

13. Children

Patryk is for businesses and is not meant for anyone under 18. We do not knowingly keep creator profiles of children; if you believe we hold one, tell us and we will delete it.

14. Changes

We will update this policy when our processing changes and show the date at the top. For important changes we tell customers by email or in the service first.