Your work. Your data.
This first version of TunkEnvoxa Creators stores the information needed to create creator pages and receive business inquiries. This page explains how the app currently works.
Creator accounts
Creators can sign in with Google or a one-time email code. Existing pages that use ChatGPT sign-in stay with their current owner; connecting one to a new sign-in requires approval from the signed-in owner and verification of the same email. We use an account identifier to keep drafts, inquiries and uploads separate. Your sign-in email is not automatically published. Google sign-in requests only your basic name, email and profile information; it is separate from optional YouTube channel access.
You can try the editor as a guest. That draft stays in this browser on this device until you sign in and choose to import it. Do not rely on guest storage as a backup. Images can be uploaded after sign-in.
One-time sign-in codes expire after five minutes. The email sending provider receives your address and code to deliver the message. We use essential session cookies and store sign-in, verification and rate-limit records to protect accounts and limit abuse. Session records can include your network address and browser information; email and network identifiers used for our additional code-request limits are hashed.
What is public
Publishing makes the chosen profile content visible to anyone with its link when public access is enabled. This includes your uploaded profile and work images, optional business contact details, and any enabled platform-reported counts. Keep personal addresses, private phone numbers and sensitive information out of your page.
Public social counts
When you enable counts, we send your pasted channel or profile identifier to the official platform API and store its returned account information, count and successful-update time. YouTube public counts can be fetched without your Google sign-in and are rounded by YouTube. Instagram public counts depend on eligible professional accounts and approved platform access. A pasted link does not establish ownership.
The intended refresh is daily; it is not active until the background service has been configured and tested. Visitors do not trigger API requests. Failed refreshes keep the previous successful-update time. Counts become hidden after 48 hours without a successful update. The maintenance service deletes API snapshots after 30 days without a successful refresh. Remove saved public counts in Socials, or disable their display and publish the change.
Optional account access
An optional YouTube connection can confirm access to the matching channel and allows this app to read the data you authorize. Existing social account grants remain removable. This does not verify your identity or audience quality. Tokens are stored encrypted on the server. You can remove a connection in the Socials screen. We remove its stored token and authorised counts immediately; separately fetched public counts can be removed using their own control and attempt to revoke the platform permission. You can also revoke access directly in the platform’s account settings.
YouTube data comes from YouTube API Services. YouTube’s Terms of Service and the Google Privacy Policy apply. Manage access in your Google permissions.
Business inquiries
When you submit an inquiry, your name, business, email, budget and message are stored in the creator’s inbox so they can respond. Do not include sensitive personal or payment information. The creator sees the details you submit. Creators can opt into enquiry alerts to their authenticated sign-in email after the sender service and recipient have been approved. The email provider receives that destination, a generic alert and a private Studio link; the email does not contain your enquiry message or contact details. A provider accepting an email does not guarantee delivery. Without approved setup, enquiries remain available in the inbox and the interface says alerts are unavailable.
Sharing & measurement
WhatsApp and device sharing only open when you choose them. You select the recipient and send the message yourself. This version does not use advertising trackers or audience profiling. Your interface language preference is saved on your device. Hashed network or email identifiers are stored to limit inquiry and sign-in abuse. The personal-domain gateway, when activated, must send only a signed pseudonymous visitor identifier, not identity cookies or account credentials. Replay markers are retained temporarily to reject repeated submissions.
Export and deletion
Creators can export their profile content, unpublish their page, disconnect accounts or delete their creator data in Settings. Deletion removes their profile, uploads, stored connections, public-count snapshots, notification preferences, queued alerts and inquiries from this app. Downloaded share cards and messages already sent to other people are outside the app’s control.
Before a wider launch
This release is a pilot. For support or a privacy request, contact support@tunkenvoxa.com. Guardian-managed accounts and final operating terms must be established before broader enrollment. It does not currently offer a guardian-consent workflow.
Back to your studio