Staff Confidentiality Notice

Merlin holds creators' identification numbers (such as SSNs), home addresses, bank and PayPal details, signed contracts, videos and private messages. You can see some or all of it. Creators trust us with it, and the law makes the company — and you — responsible for keeping it safe.

• Open a creator's information only when your work needs it.
• Use it only for our work with that creator: contracts, campaigns, feedback and payments. Never for anything personal, and never to contact a creator about something unrelated.
• Don't give the AI assistant more than it needs. It is built never to see ID numbers, addresses, phone numbers or payment details — don't paste them into it.

• Don't copy, download, screenshot, export or forward ID numbers, bank details or contracts unless a specific task needs it — for example, making a payment or sending a signed contract to our accountant.
• When you must take something out, send it only to someone who needs it, delete your copy when the task is done, and never send payment details by ordinary email or chat.
• Don't store creators' information on personal devices or personal accounts.

• Your account is yours alone. Never share your password or let anyone else use your session.
• Use a strong password you don't use anywhere else, and keep your computer locked.
• Sign out on any computer that isn't yours.

Tell [Who staff report incidents to, and how — to confirm] at once — the same day — if:

• a laptop or phone with access to Merlin is lost or stolen;
• you sent creator information to the wrong person;
• you think someone else has used your account, or you got a suspicious email or call asking for access;
• you see information you shouldn't be able to see.

Reporting quickly is what matters. The company may have to tell the Privacy Protection Authority and the creators involved, and that depends on knowing in time.

Merlin logs important actions — sign-ins, approvals, payments, changes to accounts — with who did them and when. This is how we keep the system secure and answer questions later. Your own information is handled as described in the Privacy Policy.

When you stop working with Magic Merlin Ltd., your access ends. Your duty to keep creators' information confidential does not: don't keep, use or share anything you saw in Merlin.