legal

Creator Terms (Data, Email & Instagram Auto-DM)

Last updated: October 27, 2026

These terms are part of the Terms of Service. They apply when you use tools that touch other people's data: email/phone capture, audience export, Mailchimp/Kit forwarding, product link fetching, and Instagram auto-DM.

1. Roles

  • You decide why you collect your audience's data and how you use it. You are the one responsible for the legal basis, notices, and consent.
  • oddgecko stores and processes that data on your behalf and only on your instructions (as your processor), to provide the Service. We don't use your audience's data for our own marketing and we don't sell it.

2. Email and phone capture

You must:

  1. Have a lawful basis and clear consent before collecting. Tell visitors what they're signing up for, who you are, and how to contact you. Don't pre-tick boxes.
  2. Collect only what you need. Don't collect data from children, or sensitive data (health, financial, government ids).
  3. Use the data only for what you told people.
  4. Include a working unsubscribe in every marketing email and honour opt-outs and deletion requests promptly.
  5. Follow anti-spam and privacy laws that apply (DPDP Act in India, GDPR/UK GDPR, CAN-SPAM, PECR, CASL, TCPA for texts/calls).
  6. Never sell, rent, or share the list with others without consent.
  7. Delete signups when asked, using the dashboard, or ask us to.

You can view and export your list as CSV at any time. We may remove or limit a form if it is abused or if we receive a credible complaint.

3. Mailchimp / Kit connections

If you connect them, new signups are sent to your account there at your direction. Their terms apply. You are responsible for those accounts and for disconnecting if you stop.

4. Third-party embeds

YouTube, Spotify, SoundCloud and similar players load from their own providers. Those providers may collect data when the embed loads. You must follow their rules and any notice or consent rules that apply to your audience. oddgecko does not currently inject third-party advertising or analytics pixels into creator pages; if that changes, we will update these terms and the Privacy Policy first.

5. Instagram auto-DM

By connecting Instagram you confirm that you are the account owner and you agree to:

  1. Follow Meta's Platform Terms and Instagram policies (we are a Meta developer app and Meta can limit or revoke access).
  2. Send messages only in response to people who commented or messaged you, and only what Meta allows. No spam, no unsolicited promotions, no misleading content.
  3. Honour STOP or opt-out requests immediately (we help by blocking further messages to that person).
  4. Not send sensitive content or collect sensitive data through DMs.
  5. Understand rate limits: we send at a limited pace and at most one auto-DM per person per day by default.

We store your Instagram access token so we can send messages for you. You can disconnect at any time (deletes our copy). Meta may expire or revoke tokens independently; tell us if you think your account is compromised.

We aren't responsible for Meta suspending, limiting, or banning your Instagram account because of your messages. You use auto-DM at your own risk.

6. Product link fetching

When you paste a product URL, oddgecko may fetch that page to read its title, image and price. You confirm you have the right to link to that product, and you'll check the information before publishing. Some websites don't allow automated fetching; if a site blocks it, enter the details manually. Don't use the tool to scrape or copy a site's content in bulk. We may block domains that object.

7. Custom domains

When custom domains are enabled, if you attach one you confirm you own or control it. You're responsible for the DNS and for content served under your domain. We may remove it if the content breaks our policies or if ownership is disputed.

8. Security and breach

If you discover or suspect a breach affecting your audience data or your account, tell us within 24 hours at privacy@oddgecko.com. We'll tell you without undue delay if we discover one that affects your data. You are responsible for any notification you owe your audience and regulators.

9. Our commitments to you (as processor)

  • We process audience data only to provide the Service and on your instructions.
  • Access is limited to people who need it.
  • We use the sub-processors listed in the Privacy Policy §4 (Cloudflare, email sender, etc.).
  • We help you answer rights requests (access, export, deletion).
  • We delete your audience data when you delete the page or account, subject to backup cycles and legal duties.
  • We'll tell you if we get a legal demand for your audience data unless the law forbids it.

10. If you break these terms

We may disable forms or Instagram features, or suspend the account. You'll indemnify us as set out in the Terms (§12) for claims arising from your use of audience data, messages, or embeds.