Legal

Privacy Policy

Effective date: March 10, 2026

Infinite Ideas, LLC (“we”, “us”, or “our”) operates Cmark, a media hosting and monetization platform (the “Service”). This Privacy Policy describes what information we collect, how we use and share it, and the choices available to you.

By registering for or using the Service, you confirm that you have read and understood this Privacy Policy.

1. Who We Are

Infinite Ideas, LLC is incorporated under the laws of Idaho, USA with its registered address at 1391 Remington Rd, Pocatello ID 83201. For privacy inquiries, contact us at hello@cmark.media.

2. Information We Collect

2.1 Account and Registration Data

When you create an account, we collect:

• Email address — used for authentication, account communications, and security alerts.
• Display name — shown to other users within the platform.
• Role — whether your account is registered as a creator, sponsor, or other supported role.
• Authentication credentials — if you use email and password login, we store a securely hashed version of your password. If you sign in via a third-party identity provider, we receive a token and basic profile information from that provider.
• Multi-factor authentication (MFA) data — if you enable MFA, we store the configuration needed to verify your identity at login.

2.2 Media and Content Data

When creators upload content, we collect and store:

• Media files — images and videos uploaded to the Service, stored in our cloud storage infrastructure.
• Metadata — title, description, tags, category, content rating, and privacy settings assigned to each item.
• Thumbnails — generated automatically from uploaded files to support discovery and previewing.
• Brand mark data — logo files you upload, their grid position, opacity, scale settings, and the click-through URL associated with each mark.

2.3 Analytics and Event Data

The Service tracks how media is interacted with. For each recorded event we may store:

• Event type — views, brand mark clicks, and impressions.
• Timestamps — when an event occurred and when it was received by our servers.
• Session and anonymous identifiers — randomly generated identifiers that let us understand viewing sessions without requiring a login.
• Device and browser information — device category, operating system, and browser name, inferred from the request’s user-agent string.
• Geographic data — country-level location inferred from your IP address. We store a hashed representation of your IP address rather than the raw address.
• Referrer and page URL — the URL on which media was viewed or embedded.
• Consent state — a record of whether consent was given before an event was recorded.
• Sponsorship context — whether the event occurred within a sponsor campaign, and if so, which campaign.

2.4 Sponsor and Campaign Data

Sponsors who run campaigns through the Service additionally provide:

• Campaign configuration — name, objective, budget, start and end dates, and targeting parameters.
• Brand assets — logos and creative files uploaded for use in campaigns.
• Campaign performance data — impressions, clicks, conversions, and spend amounts aggregated at the campaign level.

2.5 Billing and Financial Data

For accounts with paid plan activity, we maintain records of invoices, payout schedules and amounts, and monthly financial summaries. We do not directly store full payment card numbers; card payments are handled by a third-party payment processor, and we receive only a transaction reference after a payment is completed.

2.6 Support and Communications Data

When you contact us, we retain a record of your inquiry and our correspondence. We also maintain logs of notification emails sent to your account (moderation decisions, campaign alerts, weekly digests), including delivery status.

2.7 Cookies and Similar Technologies

We and our technology partners use cookies, local storage, and similar tracking mechanisms to operate the Service and collect usage information. For full details and your choices, please read our Cookie Policy.

2.8 Technical and Error Data

We use an error-monitoring service to capture and diagnose application errors. This may include browser environment details, session context, and error message content. This data is used solely for debugging and service reliability.

2.9 Content Moderation and Admin Data

We maintain an audit log of administrative and moderation actions, including content decisions and account actions. If your content enters a moderation queue, information about that review is recorded.

3. How We Use Your Information

We use the information described above to:

• Provide the Service — operate your account, store and serve media, render brand mark overlays, generate shareable and embeddable links, and power creator and sponsor dashboards.
• Calculate and display analytics — compute views, clicks, and engagement metrics and present them to the creator or sponsor associated with that media or campaign.
• Manage billing and payments — track subscription status, generate invoices, schedule creator payouts, and maintain financial records.
• Maintain security and prevent abuse — detect and prevent unauthorized access, quota circumvention, and policy violations.
• Moderate content — review uploaded media for compliance with our Acceptable Use Policy.
• Send communications — deliver transactional emails and, where you have opted in, product updates and marketing digests.
• Improve the product — understand how the platform is used at an aggregate level to guide feature development.
• Comply with legal obligations — fulfill requirements under applicable law and enforce our Terms of Service.

4. Legal Bases for Processing

Where data protection law requires a legal basis, we rely on:

• Performance of a contract — processing necessary to deliver the Service you have signed up for.
• Legitimate interests — security monitoring, fraud prevention, error tracking, and aggregate product analytics, where these interests are not overridden by your rights.
• Consent — optional analytics tracking by third-party tools and marketing communications. You may withdraw consent at any time.
• Legal obligation — where we are required to process or retain data by applicable law.

5. How We Share Your Information

We do not sell your personal information. We share it only as described below.

5.1 Infrastructure and Technology Providers

We use the following categories of service providers to operate the platform: a cloud database and authentication service (Supabase) for user accounts and records; cloud object storage and content delivery networks (Cloudflare R2, Supabase storage) for media files; a managed cloud hosting platform (Vercel) for the web application; an error-tracking service (Sentry) for debugging; and an email delivery service (Resend) for transactional and marketing emails. Each provider is bound by a data processing agreement.

5.2 Analytics Providers

If enabled, we share anonymized or pseudonymous usage signals with analytics services to understand aggregate traffic. Analytics cookies and your choices are described in the Cookie Policy.

5.3 Sponsors and Brand Partners

When a creator’s media is associated with a sponsor campaign, the sponsor can view campaign-level performance data (impressions, clicks, spend). Sponsors do not receive individual visitor profiles or personally identifiable information about viewers.

5.4 Legal and Regulatory Disclosure

We may disclose information if required by law, court order, or a lawful government request, or if we reasonably believe disclosure is necessary to protect the rights, property, or safety of us, our users, or the public.

5.5 Business Transfers

If we are involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

6. International Data Transfers

Our infrastructure may be operated in data centers outside your country of residence. By using the Service, you acknowledge that your data may be transferred to and processed in countries with different data protection frameworks. Where required by law, we apply appropriate safeguards such as standard contractual clauses.

7. Data Retention and Deletion

• Active accounts — we retain your data for as long as your account is active.
• Subscription lapse — media and data remain stored during a grace period. Some features (such as brand mark overlays on embeds or advanced analytics) may be restricted until the subscription is renewed.
• Account closure — personal information is deleted or anonymized within a reasonable period, unless retention is required by law. Aggregated analytics data that no longer identifies you may be retained indefinitely.
• Analytics events — event records containing device and geographic data are retained for a defined period then anonymized or deleted.
• Backups — data in system backups may persist beyond the deletion date before being overwritten in the normal backup cycle.

8. Your Rights

Depending on your location, you may have the right to:

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to correct inaccurate or incomplete information.
• Deletion — request deletion of your personal information, subject to retention obligations.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on our legitimate interests.
• Restriction — ask us to limit how we process your data in certain circumstances.
• Withdraw consent — where processing is consent-based, withdraw consent at any time.
• Marketing opt-out — opt out via your account’s email preferences page or the unsubscribe link in any marketing email.

To exercise any of these rights, contact us at hello@cmark.media. We will respond within the timeframe required by applicable law.

9. Third-Party Content in Media

Creators may upload media containing images of other people, third-party logos, or licensed material. Creators are responsible for obtaining any necessary rights or consents from individuals and rights holders whose content appears in their uploads. If you believe media on the platform infringes your rights, contact us at hello@cmark.media.

10. Children’s Privacy

The Service is not directed at children under 16 (or the applicable minimum age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at hello@cmark.media and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy periodically. When we make material changes, we will notify you by email or via a platform notice with advance notice before the changes take effect. Continued use of the Service after the effective date constitutes acceptance.

12. Contact

For privacy inquiries or to exercise your rights:

Infinite Ideas, LLC
1391 Remington Rd, Pocatello ID 83201
Email: hello@cmark.media