Privacy Policy
Yestra is a workspace where brands post content missions and creators make videos for them. This page says what Yestra holds about you, where it comes from, who else sees it, and how to have it deleted.
1. Who is responsible
Yestra is developed and operated by Christos Alexis Fantino, an individual in Switzerland. For the purposes of the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (nFADP), Christos Alexis Fantino is the data controller for the processing described below. Contact: legal.aveldo@hotmail.com.
2. The waiting list
If you join the waiting list on yestra.app, we store your email address and the date you joined. We use it for one purpose: to tell you when Yestra opens. It is not shared with anyone and not used for anything else. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time: write to legal.aveldo@hotmail.com and we will delete the address. Addresses are deleted once Yestra has opened and the announcement has been sent, or after 24 months, whichever comes first.
To stop the form being abused, each submission is counted against a salted, one-way hash of the sender's IP address. The IP address itself is never stored, the hash cannot be turned back into it, and the hashes are deleted after 24 hours.
3. Your account
To use Yestra you sign in. We store your email address, the name and handle you choose, your role (creator or brand), and your country if you give it. We do not store a password when you sign in by email link or with Apple.
4. What you do in Yestra
- Missions you claim, the hook you pick, and any script you write.
- Videos you submit. Only the finished video you send for review is stored. Raw footage you load into the editor stays on your device; when you export, it is used to render the final video and then deleted.
- Review decisions on your submissions, including any note a brand writes to you.
- Messages to the Creative Assistant and its answers, so the conversation is there when you return.
- Earnings records: what each video earned, what is owed and what a brand has recorded as paid. Yestra does not process payments and never sees card or bank details.
5. Your TikTok account
Connecting TikTok is optional. If you connect it, you approve the access on TikTok's own page, and Yestra receives a token that lets it read the following, and nothing else:
| What | Why |
|---|---|
| Display name, avatar, @username, verified status, profile link | To show which account is connected, to you and to the brands whose missions you work on. |
| Follower, following, total-like and video counts | So a brand can see the reach of a creator working on its mission. |
| Your public videos with their view, like, comment and share counts, title, posting date, link and cover image | To confirm that a video you marked as published is on your account, and to read its performance so your bonuses are calculated correctly. |
What Yestra does not do. It cannot post, edit or delete anything on your TikTok account, cannot read messages, drafts or private videos, and does not receive your TikTok password. It does not sell TikTok data, does not use it for advertising, and does not combine it with data from other sources to build a profile of you.
Performance figures are stored only for videos you submitted to a mission. Your other videos are shown to you when you pick which one to mark as published, and are not stored. Cover images are displayed, never saved.
Access tokens are kept on the server, are never sent to your browser, and are never shared with brands. Disconnect in Yestra revokes the token at TikTok and deletes it from our server at once. You can also remove Yestra's access inside TikTok (Settings → Security & permissions → Manage app permissions); Yestra then forgets the token the next time it tries to use it.
6. Who sees what
- The brand whose mission you claimed sees your name, handle, connected TikTok username and follower count, the videos you submitted to that brand, their performance, and what you are owed. A brand does not see your work for other brands.
- Other creators see nothing about you. Where Yestra shows what has performed well for a brand, it is an aggregate (for example a median per hook), not another creator's video.
- Service providers that run Yestra on our behalf: Supabase (database, file storage, sign-in), Vercel (website hosting), and TikTok (the source of the data in section 5). When the Creative Assistant is enabled, the text of your message and the mission's brief are sent to an AI model provider to produce the answer; they are not used to identify you, so please keep personal details out of those messages.
We do not sell personal data and do not share it with advertisers.
7. Cookies
Yestra uses only the cookies it needs to work: one that keeps you signed in, and a short-lived one (ten minutes) that protects the TikTok sign-in against forgery. There are no advertising or cross-site tracking cookies.
8. Legal basis
We process account, mission, submission and earnings data to perform the agreement you enter into by using Yestra (Art. 6(1)(b) GDPR). TikTok data is processed on the basis of your consent, given on TikTok's authorisation page, which you can withdraw at any time by disconnecting (Art. 6(1)(a)). Keeping records of amounts owed and paid rests on our and the brands' legitimate interest in accurate accounts, and on legal retention duties where they apply (Art. 6(1)(c) and (f)).
9. Retention and deletion
- TikTok tokens: until you disconnect, or for at most the token's lifetime (one year) if unused.
- Submitted videos: until you delete them or your account; a video may be removed from our storage earlier once it is published, since TikTok then holds the public copy.
- Performance figures and earnings records: for as long as your account exists; earnings and payout records may be kept longer where accounting law requires it.
- Account deletion: write to legal.aveldo@hotmail.com from the address you signed up with and we will delete your account and everything tied to it, other than records we are legally required to keep.
10. Transfers outside your country
Our service providers may process data in the European Union and the United States. Where data leaves Switzerland or the EEA, it is covered by the provider's standard contractual clauses or an equivalent safeguard.
11. Your rights
Under the GDPR and the nFADP you have rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent. Write to legal.aveldo@hotmail.com and we will respond. You also have the right to lodge a complaint with a supervisory authority; in Switzerland that is the Federal Data Protection and Information Commissioner (FDPIC).
12. Age
Yestra is for people aged 18 or over, because creators enter into paid work through it. We do not knowingly hold data about anyone younger; if you believe we do, tell us and we will delete it.
13. Changes
If this policy changes in a way that affects what we collect or who sees it, we will say so in Yestra before the change takes effect and update the date at the top.
Yestra is not affiliated with, endorsed by or sponsored by TikTok. TikTok is a trademark of its owner.