Privacy Policy — Armada | 100xs.com

Legal

Last updated: March 1, 2026 · Applies to all Armada members and visitors

The short version: we collect only what we need to run the payout network. We don't sell your data. We don't store your Instagram password. We don't share your earnings data with other members. Your banking details never touch our servers.

1. Who we are

Armada is a clipping affiliate network operated by 100xs (“we,” “us”). This Privacy Policy explains how we collect, use, and protect your personal data when you use the Armada platform at 100xs.com/armada.

2. What we collect and why

Data	Why we collect it	Stored where
Name, email address	Account creation and communication	Supabase (encrypted)
Instagram handle, follower count, account age	Eligibility verification and view verification	Supabase
Instagram access token	Read-only API access for view verification	Supabase (encrypted at rest)
Monthly verified view counts (from Loom recording review)	Payout calculation	Supabase
Stripe customer ID and subscription status	Billing management	Stripe (we store only the ID reference)
Wise email address (international members)	Payout processing	Supabase (encrypted)
Referral attribution	Override CPM calculation	Supabase
IP address and browser data	Security and fraud detection	Vercel logs (30-day retention)

3. What we do not collect

Your Instagram password or any login credentials
Your bank account or card details — these are handled entirely by Stripe and never transmitted to our servers
Your direct messages or private Instagram content
Location data beyond what is inferred from IP for fraud detection

4. How we use your data

We use your data to:

Verify your monthly Instagram account view counts via Loom screen recording
Calculate and process your monthly CPM payouts
Attribute recruits to your referral link and calculate override earnings
Send transactional emails (payout confirmations, reel verification results, account notices)
Detect and prevent fraudulent activity on the network
Display your handle (anonymized as initials) on the leaderboard to other members

5. Leaderboard and visibility

The Armada leaderboard shows the top 10 clippers by verified views each month. Your Instagram handle and earnings are visible to other logged-in Armada members on this screen. If you do not wish to appear on the leaderboard, you can opt out in your account settings — your payouts are not affected.

6. Data sharing

We do not sell your personal data. We share limited data with the following third-party services solely for the purpose of operating the platform:

Stripe — billing, subscription management, Stripe Connect payouts (US members)
Wise — payout processing for international members
Instagram — handle stored for submission matching only; no API connection
Supabase — database hosting (SOC 2 compliant, data stored in US-East)
Vercel — hosting and edge functions (SOC 2 compliant)
Resend — transactional email delivery

7. Instagram access token storage

At the end of each month, you submit a Loom recording (or video file) showing your Instagram Insights. We review and log your total monthly account views for payout calculation. We do not connect to Instagram via API, store access tokens, or access your account in any other way. Loom recordings and uploaded video files are retained for 12 months as compliance records.

8. Data retention

Active account data is retained for as long as your membership is active
If you cancel, your account data is retained for 12 months in case of disputes or tax reporting, then deleted
Payout records are retained for 7 years for tax compliance
Instagram handles are removed upon account deletion request
Vercel access logs are retained for 30 days

9. Your rights

You have the right to:

Access all personal data we hold about you — request via Telegram
Correct inaccurate data in your account settings
Delete your account and associated data (subject to the 7-year payout record retention for tax compliance)
Opt out of the leaderboard without affecting your membership or payouts
Remove your Instagram handle from your account at any time

10. Security

We use HTTPS for all data in transit, AES-256 encryption for sensitive fields at rest, and row-level security (RLS) policies on our database so members can only access their own data. Access tokens are never logged or exposed in error messages. We conduct periodic security reviews and update dependencies regularly.

11. Changes to this policy

We may update this Privacy Policy periodically. Material changes will be communicated by email with at least 14 days' notice before taking effect.

12. Contact

Privacy questions or data requests: t.me/armada100xs.