Legal
What we collect, why we collect it, who can see it and how long we keep it. Written to match how the product works today.
Draft — pending review by counsel
This is an interim draft that describes how Stumpline works today. It hasn't been reviewed by a lawyer, it isn't legal advice, and anything in highlighted brackets is still to be filled in. Questions: hello@stumpline.org.
Last updated
Stumpline is run by Keenly Media, LLC, a New York limited liability company, at 66 Meserole Ave, Brooklyn, NY 11222 ("Stumpline", "we", "us"). This policy covers stumpline.org, the payer and creator dashboards, the public Disclosure Checker and the emails we send.
Stumpline is a marketplace: organizations ("payers") fund paid distribution campaigns, and identity-verified US creators post them on their own social accounts. Because the work is political and issue advertising, we keep more records than a typical consumer app. This policy says what those records are.
To find payers and creators, our team keeps an outreach list of organizations and public figures built from public sources: the organization's name and type, the public page we found it on, an organizational contact route, and our notes on outreach. We keep organizational contact routes only; personal webmail addresses are refused by the database. Only our admins can see this list. If you're on it and want to be removed, email hello@stumpline.org.
Creators can tell us which political alignments they're open to working with. It's optional. Without it you won't be matched to political campaigns, and you'll still see issue, media and non-political campaigns.
We don't sell personal information, and we don't use it for third-party advertising.
Every caption first goes through a deterministic check against our disclosure rules. If it passes and AI review is switched on, we send the caption, the required disclosure text and the platform name to Anthropic's API, which judges whether the disclosure is clear and conspicuous. The model can fail a caption but can never pass one the deterministic check failed. We record the verdict and the model used.
This applies to captions creators submit and to captions pasted into the public Disclosure Checker. We don't send names, email addresses or account details with the caption. Don't paste anything into a caption that you wouldn't post publicly.
Before any creator claims a campaign, payers see aggregate numbers only, and nothing about groups smaller than five. Once you claim or post on a campaign, members of that payer's team can see:
Payers can export their campaign's compliance record. The export includes, for each post: your legal name, handle, the post URL, the caption as submitted, the disclosure result, the payer's decision, the final view count and what you earned and were paid.
If we switch on manual creator selection, payers can also see a list of matched creators for their campaign (display name, handles, verified followers, content categories, tier and match score) and invite them.
Creators see a campaign's payer display name, payer type and verification status, and the campaign's brief, rates and how much of its budget is left. The payer's political alignment isn't shown to creators.
Stumpline admins can see account, campaign, post, verification, fraud and payment records to run and police the marketplace. They can't see social account tokens or a creator's alignment preference.
See What's public, below.
We use these providers to run Stumpline. Each gets only what it needs for its part.
Each provider handles data under its own terms and privacy policy. Where data is stored and processed geographically: [TO BE CONFIRMED BY COUNSEL].
We may also disclose information when we believe the law requires it, to protect people or the service, or as part of a sale or reorganization of the business: [TO BE COMPLETED BY COUNSEL].
Here's what the system does today. Retention periods that aren't set yet are marked for counsel.
Every database table has row-level security, so each person can reach only their own records and what their role allows. Server-only keys never reach the browser. Social account tokens are encrypted. Identity documents and bank details stay with Stripe. We store IP addresses only as salted hashes.
No system is perfectly secure. If you think your account has been compromised, email hello@stumpline.org right away.
Rights that apply to you depending on where you live, and how to exercise them: [TO BE COMPLETED BY COUNSEL].
Stumpline is for adults. You must be 18 or older to use it, and we don't knowingly collect information from anyone younger.
We'll update this page when our practices change and change the date at the top. How we'll notify you of material changes: [TO BE COMPLETED BY COUNSEL].
Questions or requests: hello@stumpline.org. Mail: Keenly Media, LLC, 66 Meserole Ave, Brooklyn, NY 11222.