Legal
Effective 16 August 2026 · Last updated 16 August 2026
The Everyday Face is a two-sided directory. Creators list the beauty products they actually use; beauty brands search that list to find people to hire for user-generated content. This policy explains exactly what we hold, who can see it, and how to get rid of it.
The Everyday Face is operated by Mission Hub. For any privacy question, or to exercise any right described below, email privacy@missionhub.ink.
The Everyday Face connects creators with paid commercial work. It is not for children. You must be 18 or over to create a profile, and we ask you to confirm this at sign-up. We do not knowingly collect information from anyone under 18. If you believe a profile belongs to a minor, email us and we will remove it.
| Data | Why | Who can see it |
|---|---|---|
| Email address | Sign-in, and to tell you when a brand wants to work with you | Only us, until you are the subject of a contact request (see below) |
| Display name or alias, bio | Identifies you to brands | Any signed-in brand account |
| Instagram / TikTok handles and follower counts | Lets brands assess reach and content fit | Any signed-in brand account |
| Location, skin type, skin tone, content style | Lets brands filter for casting fit | Any signed-in brand account |
| Minimum rate and availability | Avoids wasting your time on bad-fit briefs | Any signed-in brand account |
| The products in your kit, how often you use them, holy-grail flags | This is the core of the service | Any signed-in brand account |
| Contact requests sent to you | Record of who asked for your details | You and the requesting brand |
Beyond what is set out under Money below, we do not collect payment details, government ID, precise location, or anything from your social accounts beyond the handle and follower count you type in yourself. We do not scrape your posts. We have no access to your Instagram or TikTok account.
The Everyday Face sets no advertising or tracking cookies. We use your browser's local storage to hold your sign-in session so you are not emailed a link on every visit. Fonts are served by Google Fonts, which will see your IP address as part of delivering them.
Your email address is never shown in search results and is not visible to brands browsing the index. It is released to a specific brand only when that brand submits a contact request against your profile, and only if you have marked yourself open to paid work. Every request is logged, and you are notified by email that it happened and by whom. Brands are rate-limited to 100 contact requests per day.
Creators never pay. Listing your kit, being searchable, posting videos and being contacted by a brand are all free, and we take no share of anything a brand pays you.
Brands pay us a flat monthly subscription for access to search this directory: Scout at $49 a month, Studio at $149 a month, or Agency at $399 a month, with founding rates for early accounts. That fee buys search access and a set number of contact unlocks. It is the same whether or not a brand ends up hiring anyone, and we never take a percentage of a booking.
When brand billing goes live, card details will be handled entirely by our payment processor. We will receive the billing contact, the plan, the amount, the last four digits and the country for tax and accounting. We will never see or store a full card number. Until billing is live we hold no payment details from anyone, and this policy will be updated with the processor's name before the first payment is taken.
If you post a video we store the file, a still frame taken from it, your caption, which of your products you tagged, and whether it has been approved. Videos are reviewed by a person before they appear publicly. Delete a video and we remove it from the live site immediately; backup copies may persist up to 30 days before being overwritten. What we may do with your video is set out in section 11 of the Terms, and the short version is that we can host and display it and we cannot sell it.
Filing a report or takedown request stores your name, email, company, the page complained about and what you wrote, so we can act on it and reply. A copy is emailed to the site owner. We keep reports for two years as a record of what was actioned and when, which is also what the copyright rules expect of us. Reports are never published and never shown to the person you are reporting, though we will describe the substance of a complaint to them so they can respond.
The Everyday Face runs on Supabase (database and authentication) and Vercel (hosting), with transactional email sent through Resend. These providers process data in the United States. If you are outside the US, your information is transferred there.
Your profile and kit are kept until you delete them. Contact-request records are kept for two years so both sides have a record of what was agreed. Deleted profiles are removed from our live database immediately; encrypted backups roll off within 30 days.
California residents: we do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not use your data for cross-context behavioural advertising. You will never be discriminated against for exercising a privacy right.
For anything in this policy, including a request to see, correct or delete your data, email sophiafriedman23@gmail.com or use the report form.
Access is enforced at the database level with row-level security and column-level grants, not just in the app. Creator emails and account credentials are not readable through the public API under any query. Passwords are hashed by Supabase Auth and never stored or seen by us in readable form.
If we change this policy materially we will email registered creators before it takes effect.