Last updated: 12 September 2026
ContentVantage is a Canadian company. This policy explains what personal information we collect, why, who we share it with, and what rights you have over it.
Legal name: Tostado Media · Corporation number: [Corporation number] · Business Number (CRA): [Business Number] · Registered office: [Registered office] · Jurisdiction of incorporation: Ontario, Canada · Email: [email protected].
In line with PIPEDA's accountability principle, we have designated an individual responsible for our compliance with privacy obligations:
Title: Privacy Officer, Tostado Media · Contact: [email protected] · Mailing address: [Registered office]
PIPEDA requires publishing the name or title of the accountable person (Principle 8, Openness). We publish the title and a direct contact channel.
Where two frameworks grant different rights over the same data, we apply the more protective one.
We collect no more than each purpose requires, in line with the limiting collection principle.
Before we can pay you for acquisitions we verify your identity. That process involves images of your identity document, a live capture taken with your device camera while holding the document, and your name, date of birth, issuing country and document number.
PIPEDA requires express consent for sensitive information, and identity documents and facial images are sensitive. That consent is collected separately, before you submit anything, and you may withdraw it at any time by writing to [email protected]. Withdrawing it means we cannot verify you and therefore cannot pay you. If you live in the EEA, the facial image used to identify you is also special category biometric data (Art. 9 GDPR), on the basis of your explicit consent (Art. 9(2)(a)).
How it is stored: encrypted at rest with AES-256-GCM, outside the server's public folder, accessible only to the review team, which decrypts it on the fly. We keep a SHA-256 hash of each file to detect later tampering. It is never published or shared with other creators.
A person decides, not an algorithm. We make no automated individual decisions.
We will not use your information for a new purpose without telling you and, where required, asking for your consent again.
Only those needed to operate: payment providers (PayPal, Wise, Western Union, MoneyGram, banks), our email delivery provider, our infrastructure provider, and authorities where legally required. We do not sell personal information.
Transfers outside Canada: some of those providers process data in the United States and the European Union, so your information may be subject to the laws of those countries and accessible to their authorities. We remain accountable for it and require a comparable level of protection by contract. For transfers from the EEA we rely on the European Commission's Standard Contractual Clauses.
Account data while the account is active. After closure it is retained, blocked, for the legal periods applicable to accounting and tax records, then deleted. Verification images are deleted once verification is complete and any applicable legal period has elapsed; the outcome and date are kept as evidence of due diligence.
Write to [email protected] with proof of identity. We respond within 30 days at the latest.
If our answer does not satisfy you, you may complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca). If you live in the EEA, to your national supervisory authority. If you live in Brazil, to the ANPD.
We apply encryption in transit (HTTPS with HSTS), encryption at rest for payment data and identity documents, password hashing, HttpOnly and SameSite session cookies, and role-based access control.
If a breach occurred that posed a real risk of significant harm, we would notify you and report it to the Office of the Privacy Commissioner of Canada, as PIPEDA requires. We keep a record of all incidents for 24 months.
The Service is not directed at people under 18 and we do not knowingly collect their information.
If we change this policy materially we will tell you by email or by notice in the Service before it takes effect.
Template document pending legal review. Replace the bracketed details with those of the operating entity before publishing.
In the event of any discrepancy between language versions, the Spanish version prevails.
What is holding you back? Pick one and I will answer straight.
Sorted? Creating an account takes 2 minutes and costs nothing.
Create a free account