Privacy

1 Who is responsible for your information

CreatorCall is operated by TERCZA Limited, registered in England and Wales with company number 16716012 and registered office at 53 Ovington Street, London, England, SW3 2JA. We are the controller where we decide why and how personal information is used to operate CreatorCall, including our accounts, creator discovery and outreach, billing, service security and product improvement.

Contact support@creatorcall.io for questions, rights requests or a data-protection complaint. You can also write to the registered office, marked “CreatorCall privacy”.

This notice applies to website visitors; brand and agency users; creators and their representatives, including people without a CreatorCall account; people whose public social-media information is processed for campaign analysis; and the customers of brands' online stores whose orders we process to work out commission. It also covers business contacts, support correspondents and people identified in uploaded campaign material.

Where a customer determines the purpose of processing and we act solely on its documented instructions, the customer is the controller and we act as its processor under a data processing agreement. The customer's own notice explains its use. We also have independent purposes described here. A brand receiving a creator shortlist or exporting campaign records is responsible for its own subsequent use. Stripe, Shopify, social networks, identity providers and some signature services may act as separate controllers for parts of their services. Legal roles depend on the actual processing, not simply who owns an account.

2 Information we receive and where it comes from

Account and business information. We receive your name, business name, email address, account identifiers, profile and notification settings, subscription details and support correspondence from you or an authorised account administrator. If you use Google or Microsoft sign-in, we receive the account information authorised through that provider. Our authentication service handles credentials and session information.

Campaign information. Brands and agencies provide campaign names, briefs, product information, budgets, locations, channels, creator requirements, deliverables, usage rights, instructions, uploaded files, cover images and campaign history. These can identify employees, client contacts, creators and other people mentioned or depicted in the material.

Creator discovery and qualification information. We obtain professional profiles, handles, names, contact details, biographies, niches, locations, channel information, follower and engagement metrics, thumbnails and examples of work from public social networks, collection services and third-party creator-data providers.These can contain information about creators who have never used CreatorCall or contacted us. We may also receive creator details from a brand, agency, representative, prior business correspondence or the creator. The source and available information vary by platform and campaign. We do not treat inclusion in a purchased list as consent to our marketing or permission for every onward disclosure. Contact support@creatorcall.io for information about the source of your personal data.

Our team stores source spreadsheets locally on its computers. Information imported into CreatorCall is also processed through the platform and relevant providers described in section 7. Local storage of a source file does not mean all subsequent processing stays on that computer or in the UK. Local copies, exports and related backups remain subject to applicable retention limits and rights requests; retaining a separate spreadsheet is not a reason to ignore a correction, objection or valid erasure request.

Creator replies and evidence. A creator or representative may send interest or refusal, rates, availability, commission preferences, portfolio material, analytics screenshots and other qualification evidence. We process the correspondence, delivery metadata, attachments and, where needed to operate the email service, the underlying email message. We record objections so that we do not contact people contrary to their preferences.

Campaign communications and work. We process messages between brands and creators, attachments, contracts, legal names and addresses, signature and envelope records, invoices, submitted draft content, links, review comments, decisions, file hashes, previews and approval history. Creators may participate by email and secure links without creating an account.

Payments. Stripe processes subscription and service-credit card payments, creator bank payments, connected-account onboarding and payouts. If your account has a store linked through our public Shopify app, Shopify charges a campaign's launch fee and makes its refunds. Shopify bills you, handles your payment details and pays us. We receive the charge's reference, status, amount and currency, and which store it is for. Creator payments use Stripe's hosted Checkout with Pay by Bank for GBP and EUR and ACH Direct Debit for USD. We receive payment, customer and connected-account references, amounts, currencies, service fees, status, relevant billing or verification information, and refund or dispute records. Card entry, bank-payment authorisation and payout onboarding are handled through Stripe. We do not ask you to send complete card details or bank credentials in chat. Stripe's collection process does not mean that we receive no financial metadata.

Campaign performance and public engagement. We may obtain public post URLs, author handles, captions or excerpts, publication dates, thumbnails, views and other metrics, baseline posts, public comments and replies, and limited information from sampled public audience profiles. Where returned by a provider, full captions or transcripts may be processed transiently for campaign checks; stored excerpts and derived findings have separate retention. We derive campaign measurements and estimates such as comment sentiment, topics, intent, repeated engagement and audience summaries. Per-person audience analysis can include estimated country or region, language and interests, explicit-pronoun gender information, and profile or activity quality signals. These are estimates and may be wrong. This can involve information about commenters who have never visited CreatorCall. Brands or creators may also provide private insight screenshots, exports or typed metrics that they are authorised to share.

AI interactions. We process your Juno questions, relevant previous turns, responses, saved conversation titles and status, generated draft references, and information retrieved from your account to answer the question. We also process technical records of AI use, model routing, cost, errors and provenance. Account context can contain creator names, briefs, correspondence, contract status and terms, payments and campaign metrics. Authorised CreatorCall staff can read your Juno conversations, including archived ones and planner interviews, to give support and investigate a fault or complaint, and each time they open an account's conversations we record it.

Website and service use. Necessary service operations can process network and device information, session identifiers, authentication events, errors, timestamps, browser details, security signals and audit references. Vercel Speed Insights, which measures how quickly our pages load and respond, processes the address of the page without its query string and with record identifiers replaced, the timing values and the name of each measurement, the connection type your browser reports, the name of the page element a reading refers to, and the browser, device, operating system and country worked out from the request; it sets no cookie and no identifier and does not ask first, as sections 3 and 6 explain. CreatorCall also uses PostHog for product usage analytics, but only after you allow it: we ask before anything runs, once in each browser you use without signing in and once per account when you are signed in, and no product analytics is collected until you choose. If you allow it, it processes page and interaction events, device and browser information and identifiers. Session replay is switched off in our configuration. Section 6 describes this in more detail. If you allow advertising measurement, a Google Ads tag on our public marketing pages processes the page address, ad-click details, device and browser information and cookies, as section 6 also explains. Identifiers and hashed identifiers can still be personal information. If you allow analytics, we also remember how you found our website, and keep it with your account if you create one, as section 6 explains.

Creator links and store orders. When someone follows a creator's link (go.creatorcall.io), we record the click (the link, the time, a shortened IP address and the kind of browser) for the brand whose link it is, to work out commission, and we delete it 14 days after the click stops counting. When a brand connects its online store, we receive its orders: each order's reference, status, amounts, currency, products, discounts, the codes used and refunds, with a scrambled customer reference that lets us spot duplicate orders. We do not keep customers' names, email addresses, postal addresses or phone numbers from those orders. We do all this as that brand's processor, and the brand's own notice explains its use. We never sell this information, and we use it only to work out that brand's commission.

Creator toolkit. If you use the video downloaders in the CreatorCall toolkit, we receive the video link you submit, your network address and the random identifier in our toolkit cookie. We keep only scrambled forms of these, for 7 days, as section 6 explains.

Free creator preview. If you use the free preview on our home page, we ask for your website address and your email address. We read your public website to work out what your brand sells so we can show relevant creators, and we use your email address to send a one-time code and to prevent misuse. When you make a free preview we email a link to it to the address you verified; we do not keep that address. We keep the preview result for up to 90 days and a protected marker of your email address for up to 24 months, so that the preview is used once per brand.

Information required by law. If applicable tax or platform-reporting rules require it, we may request verified legal identity, address, date of birth, tax residence, tax identification or registration numbers and relevant transaction information. We will explain the purpose at collection. This is not a statement that every such field is already collected from every creator.

Please provide only information needed for the task and ensure you are entitled to share it. Do not upload passwords, unrestricted identity documents, special-category information or information about children unless an expressly supported and lawful process requires it. A brand's instruction cannot waive another person's privacy rights.

3 Why we use information and our legal grounds

We use the grounds below under UK GDPR and, where applicable, EU GDPR. We select and document the ground for each processing activity. Accepting our Terms is not consent to every use.

Providing the service to an individual customer. Where you personally enter a contract with us, we use information necessary to create and operate the account, fulfil orders, respond to your requests and administer payment on the basis of that contract or steps you request before it. We do not use this ground merely because your employer or client has a contract with us.

Serving a business through its representatives. We process work contact details, account permissions, campaign instructions and relevant correspondence in our legitimate interests and those of the customer in obtaining and supplying a functioning business service. We limit access and use to the work involved.

Creator sourcing and qualification. Subject to our documented necessity and balancing assessment, we use relevant professional information to identify suitable creators, verify campaign interest and evidence, prepare a shortlist and keep accurate sourcing records in our and customers' legitimate interests in arranging genuine commercial collaborations. This does not automatically authorise marketing by email. Where a creator requests a service or enters a contract with us, processing necessary for that request or contract may use the contract ground instead.

Outreach and marketing. We use consent where electronic marketing law requires it. Where lawful without consent, we rely on a documented legitimate interest in relevant business communication and provide an objection route. We do not assume that a public email address or the word “business” means a sole trader has agreed to marketing. A soft opt-in is used only where its actual conditions are met. Consent to CreatorCall product updates is separate from necessary campaign correspondence and from analytics choices.

Campaign operation and analysis. We use relevant messages, evidence, creator submissions, public post and engagement information and derived reports to support campaign decisions and measure results. For independently determined activity we rely on assessed legitimate interests in providing accurate campaign services, with minimisation and objection safeguards. Where we act only for a customer's instructions, the customer's lawful basis and our processor agreement govern that processing. Public availability alone is not our legal basis.

AI assistance. Providing a requested assistant or document feature uses the same relevant contract, business-service or instructed-processing ground as the underlying task. We limit the account context to information relevant to the request. Using an AI provider is not a separate lawful basis and does not permit unrelated reuse.

Billing, accounting and compliance. We process financial records to perform applicable contracts and meet specific accounting, tax, court, regulatory and other legal obligations. Fraud investigation and the establishment, exercise or defence of legal claims may also rely on legitimate interests, with limited access and retention.

Security and support. We use proportionate authentication, rate-limiting, diagnostic and audit information in our legitimate interests in preventing abuse, protecting accounts, fixing failures and handling complaints. This includes scanning uploaded files for viruses before another person can open them. Where a specific law requires processing, we use the legal-obligation ground. This does not justify recording every page interaction as necessary security monitoring.

Product analytics. Optional usage analytics is distinct from necessary security and authentication. Accepting the Terms or reading this notice is not analytics consent. We rely on your consent: product analytics runs only after you allow it, and you can withdraw that choice at any time from Privacy choices at the foot of the website and the app. Section 6 explains what runs and how to change your choice. The record of how you found us, described in section 6, rests on the same consent.

Advertising measurement. We rely on your consent here too. Each advertising tool is its own choice, separate from product analytics and from each other: the Google Ads tag, and the sign-up we report to Google from our server, run only after you allow advertising measurement, and Meta advertising measurement, including the purchase we report to Meta from our server, runs only after you allow it. You can withdraw either at any time from Privacy choices at the foot of the website and the app. Section 6 explains what runs.

Page speed. We measure how quickly our pages load and respond on our legitimate interest in running a fast, reliable service, without asking first, because the measurement sets no cookie, stores nothing in your browser and carries no identifier for you, as section 6 explains. It is separate from product analytics and advertising measurement, which each rest on your consent. You can object by contacting support@creatorcall.io.

Creator toolkit. The toolkit cookie is strictly necessary to give each browser its daily download allowance, so we set it without asking. We prepare the download you ask for, keep scrambled records of each request and run the Cloudflare security check on our legitimate interests in offering a free tool and protecting it from automated abuse, as section 6 explains. You can object by contacting support@creatorcall.io.

When using legitimate interests, we assess the purpose, whether the information is necessary and the likely effect on the people concerned. You may object for reasons relating to your situation. Objections to direct marketing are honoured without requiring such reasons. We provide the applicable explanation without disclosing another person's confidential information.

If required account or payment information is not provided, we may be unable to supply that feature. Declining optional promotional messages does not prevent ordinary use. We will identify mandatory legal information and the consequences of withholding it when it is requested.

4 Creators and public social media information

You can appear in our professional sourcing records without having a CreatorCall login. We use the sources described above to assess relevance, contact eligibility and suitability for a genuine campaign. Where required, we provide this notice within the applicable period after obtaining the information, and no later than the first communication or disclosure if earlier. We identify the available source information as required by law, including when responding to a request.

If you express interest and qualify, relevant information can be shared with the requesting brand or its authorised agency, including professional profile details, the quoted rate, evidence relevant to the brief and contact information. A response is not agreement to unlimited unrelated marketing or public publication of private evidence. The outreach should make clear which brand and campaign the disclosure concerns.

Free creator preview. We may show a creator's public name, handle, profile picture, platform, follower count and content niche to a business that uses our free preview. To do that we keep a small copy of the public profile picture, which we delete if the creator opts out or asks us to. A service provider may read the public profile on our behalf to collect the picture.

You can ask us not to contact you or not to include you in future sourcing by using the opt-out in an email or contacting support@creatorcall.io. We keep a minimal suppression record to honour the objection. We do not require a CreatorCall account to exercise these rights. A campaign-specific chat stop can affect that communication route; you can also request a broader objection to future outreach.

We may analyse public comments or sampled profiles to understand campaign engagement. Where a public commenter cannot practicably receive an individual notice, we assess and document whether the law permits an exception, provide accessible information and safeguards, and limit collection. We do not treat public posting as consent or claim that every commenter has received this notice individually.

We do not intentionally infer an individual's health, ethnicity, religion, political views, sexual orientation or other special-category characteristics for creator selection or audience targeting under this policy. Any new processing that does so requires its own lawful condition, impact assessment and prior notice. Ordinary photographs are not automatically biometric identification data, but may still identify people or reveal sensitive information.

5 AI providers and automated assessments

CreatorCall uses AI service providers, currently Anthropic, Google and OpenAI, under their API terms, for supported assistance, extraction, classification, drafting and matching functions. Which provider handles a request depends on the feature, the customer's plan, the Juno model the customer chooses and our approved configuration, and it can change as we update the service; a request one provider cannot serve may be retried once with another. It is not accurate to say every request is sent to every provider. The requests these providers process include: Juno's conversations and the campaign planner's turns, with the account context those conversations retrieve, which includes the Creator Call a brand filled in, the names, quoted rates and profile text of creators delivered to that account, and the agreed terms, contract wording, payments and customised Creator Briefs of creators on its campaigns, when a conversation reads them; the planner's final recommendation and draft, and the Creator Brief; the classification of a creator's reply to an outreach, however it reached us, which sends the reply's text with the Creator Call's title, the brand's name and, on UGC Calls, its creator requirements; the first screening of creators for a sponsored or UGC Creator Call, which sends each creator's name, social handles, public profile text, platforms, follower bands, topics, stated location, whether they say they make UGC or take commission-based work, the domain of their email address and whether it names a role such as management, together with the Creator Call's search criteria; draft replies to creators' emails for our team to check, which can draw on earlier replies we sent with names and other details removed; a creator's submitted draft (an image or PDF as sent, frames sampled from a video, and the caption the creator typed) with the lines of the Creator Brief it is checked against, for a checklist only the brand sees; and the reference-search embedding behind Juno's retrieval, the campaign planner and the Creator Brief.

Requests to OpenAI are sent with storage switched off, so OpenAI does not keep them to continue a conversation; under its API terms it may retain request data for up to 30 days to monitor for abuse, and it does not use API data to train its models. Anthropic and Google process requests under their API terms.

When a question needs current public information, Juno on the Lite, Growth and Scale plans can run one web search at a time through OpenAI's search tool. The search query is written by Juno from your question and can include words you typed; it goes to OpenAI, whose search tool reads public web pages. The answer shows which sites it used. Juno does not search for information about a creator's private life.

Information sent can include the prompt, relevant conversation turns and the account or creator information needed for the task. Some tools process supplied evidence or public captions and comments. We minimise unnecessary identifiers and do not intentionally include credentials. Provider processing can involve service delivery, safety monitoring and limited retention under the relevant agreement.

We use automated processing to assist with relevance, requirement checks, fit scores, response classification and campaign metrics. The principal inputs include the campaign criteria, professional profile facts, creator responses and relevant supplied or public evidence. Outputs can affect whether a person is considered, contacted, excluded or shortlisted, as well as which results a customer sees. A fit score is an estimate against the campaign, not a universal assessment of a person's quality.

You can contact support@creatorcall.io to correct information, contest an assessment and request human intervention where applicable law requires it. We provide the explanations and safeguards required for the particular decision.

6 Cookies product analytics advertising measurement and session replay

We use authentication sessions and other necessary technology to sign you in, protect the service and provide features you request. Third-party login, payments, signing and embedded content can involve the relevant providers' own technology and notices when you use those features. Necessary service technology is separate from optional product analytics.

Product analytics. PostHog analytics starts only after you allow it, and never on the creator submission, unsubscribe, chat-stop and creator payment-onboarding pages. Your choice is stored in your browser as a necessary preference so that we do not ask on every page, and while you are signed in it is also saved with your account, as described below; the analytics itself uses memory-based persistence for its identifiers, so no analytics cookie or local-storage entry is written for tracking. Privacy choices, at the foot of the website and the app, lets you allow, decline or withdraw at any time. Withdrawing stops collection in that browser immediately, and in your other browsers the next time you open the app there, signed in. An email-notification setting is not an analytics choice.

Session replay is switched off in our PostHog configuration. If we ever offer it, we will explain the feature and its safeguards and ask for a separate choice before any recording starts.

Your choices are stored in the browser you made them in. While you are signed in, they are also saved with your account, so we ask once per account rather than once per browser: when you open the app (the signed-in part of CreatorCall) on another browser or device, your latest saved choices apply there too, including a withdrawal. A refusal given while signed out is carried to your account the next time you open the app signed in; an acceptance given while signed out is never carried to your account, because we cannot tell who gave it: it stays in that browser, unless your account holds a refusal that may be newer, in which case the refusal applies. On a browser shared with someone else, a choice made under their account never counts for yours: your saved choices apply, or we ask. We do not ask on the sign-in and sign-up pages; if your account has no choice yet, we ask once you are in the app. A browser where you have not signed in, a private window or cleared site data asks afresh, and none of these is collected until you answer. The saved choices are part of your account and are deleted with it.

Before this notice took effect, analytics collection ran from 11 September 2026 without a choice. Team activity can still be personal information, and this notice does not retrospectively supply consent or another lawful basis for that earlier collection.

Advertising measurement. We advertise CreatorCall on Google Search. If you allow advertising measurement, a Google Ads tag runs on our public marketing pages (home, pricing, how it works, about and the blog) so that Google Ads can tell us whether our ads bring people to CreatorCall. It is a separate choice: allowing product analytics does not allow it. It never runs before you answer, it does not run while you are signed in, and it is switched off as you leave a marketing page for any other part of the site, such as sign-in, sign-up, account, creator or payment pages, which then reload without it. Google sets cookies for it, including _gcl_ cookies on our domain that last up to 90 days, as well as its own cookies on Google domains. Ad personalisation is switched off, and we do not use it to build advertising audiences. The page address Google receives keeps only the parameters an ad click adds, and the page you came from is reduced to its website. If you then create a CreatorCall account in that browser, we keep the ad's click identifier from the _gcl_ cookie and, once you have confirmed your email address and only if your account allows advertising measurement, our server tells Google Ads once that the click led to a sign-up. It sends that identifier, the time you confirmed and a random reference number, never your name, email address or anything else about you. The identifier is deleted once it has been sent; if your account declines advertising measurement, or has not confirmed and answered within 14 days, nothing is sent and it is deleted then. Google receives this information and uses it under its own privacy policy and the terms that govern Google Ads. You can decline it in the same bar, or withdraw it from Privacy choices at the foot of the website and the app. Withdrawing stops it and clears the cookies and stored keys it set on our domain, reloading the page if it was running.

Meta advertising measurement. We advertise CreatorCall on Facebook and Instagram. If you allow Meta advertising measurement, Meta's pixel runs on our public marketing pages (home, pricing, how it works, about and the blog) so that Meta can tell us whether our ads bring people to CreatorCall. It is a separate choice: allowing product analytics or Google Ads measurement does not allow it. It never runs before you answer, it sends only a page view for each marketing page you open, it does not run on a page whose address carries a sign-in code or contact details, nor while you are signed in, and it is switched off as you leave a marketing page for any other part of the site, which then reloads without it. Meta receives the address of the page, including any parameters in it (our marketing page addresses carry no personal information), the page you came from, and your browser's details. It sets cookies on our domain for this: _fbp, and after an ad click _fbc, which lasts 90 days. It can also use its own cookies on Meta's domains. We switch off Meta's automatic collection of button clicks and page details, and its automatic advanced matching, and the pixel is never given your name or email address. While you allow it, we also remember the campaign details an ad adds to our address (its utm tags, the ad's identifiers and a Trybe code) in a first-party cookie for 28 days, so that a later purchase can be linked to the ad that brought you. Nothing is kept if you have not allowed it.

Purchases we report to Meta. If your account allows Meta advertising measurement when you pay at checkout for a plan, an upgrade, a switch to annual billing or credits, our server tells Meta about the purchase once Stripe confirms the payment. Meta receives: that a purchase happened, when our server saw it confirmed (normally within ten minutes of the payment), its amount in US dollars, a reference to the payment, the page on our site the purchase returns to, your browser's user agent, and the _fbp and _fbc values. We never send your name, email address, phone number or IP address. To do this we keep those browser values with the checkout until the purchase is reported or passed over, and delete them shortly after eight days in any case, or with the rest of the record if your account is being erased. We keep the campaign details with the purchase record until your account is erased. Automatic plan renewals and payments to creators are never reported. If you withdraw before the payment is confirmed, nothing is sent. Meta uses what it receives under its own privacy policy and the Meta Business Tools Terms. You can decline Meta advertising measurement in the same bar, or withdraw it from Privacy choices at the foot of the website and the app. Withdrawing stops it, clears the cookies it set on our domain and the remembered campaign details, and reloads the page if it was running.

Page speed. We measure how quickly our pages load and respond for visitors, using Vercel Speed Insights, so that we can find and fix slow pages. It sends readings from every page except the creator submission, unsubscribe, chat-stop and creator payment-onboarding pages and our team's internal pages. It does not ask first, because it sets no cookie, stores nothing in your browser and carries no identifier for you. Each reading sends Vercel the address of the page without any query string (a page for a particular campaign, contract or other record is reported under its general pattern, and any record identifier left in the address is replaced), the timing value, the name and type of the measurement, a random number identifying that reading alone, the version of the measuring script, the type of connection your browser reports, and the name of the part of the page the reading refers to, which on some campaign and tool pages includes the identifier of a record in your own campaign, such as a card, contract, draft or payment. Vercel works out the browser, device, operating system and country from the request, and states that it keeps nothing that could reconstruct your visit or identify you. It is neither product analytics nor advertising measurement, so allowing or declining those does not change it. You can object to page-speed measurement by contacting support@creatorcall.io.

Referral links. If you follow a referral or partner link, the code is in the address of the page you land on and is filled in on the sign-up form. We remember that code in a first-party cookie for 60 days ONLY if you allow analytics in the cookie bar; if you decline, or have not answered, the code lasts for that visit alone and nothing is stored. The cookie holds the code and nothing else, and it is cleared once an account has used it.

How you found us. If you allow analytics, our own code (no third party) remembers in a first-party cookie, cc_first_touch, for up to 90 days, how you first arrived on our website and how you last arrived: the page you landed on (without anything after a question mark in its address), the website that sent you and, where your browser shares it, the page on that website, the campaign tags in our address (utm source, medium, campaign, content and term, which for an ad can be the keyword it was shown for), an ad's identifiers and a Trybe code, which ad network's click marker it carried (never the marker itself), and the date. If you then create an account, we keep this with your account so we can count which pages and sources lead to sign-ups, and clear the cookie. We never keep your IP address or anything that looks like an email address. If you have not allowed analytics, nothing is stored and no source is recorded for your account. Withdrawing clears the cookie.

Referral fraud checks. When a code is attached to an account we store a one-way scrambled form of the network address it came from, and the same for the account whose code it is, so that we can see when somebody refers themselves. The address itself is never stored, the scrambled form cannot be turned back into it, and both are deleted after 90 days. We use them for nothing else.

Creator toolkit video downloaders. The video downloaders need no account and give each browser one download request every 24 hours. When you first ask for a download, we set cc_toolkit_visitor, a strictly necessary cookie holding a random identifier, for 30 days; only our download service receives it, and the page's scripts cannot read it. We keep scrambled forms of that identifier, your network address and its wider block, and the video link for 7 days, to apply the allowance and stop abuse, and never store the address or the link themselves. Our server sends the link to FastSaver to prepare the file, and a link can name someone else, such as the creator whose @handle is in a TikTok link. YouTube files download straight from FastSaver and Instagram files from Instagram's servers, run by Meta, so they receive your network address. TikTok files pass through our server without being stored, and our host's request logs can record their temporary download address with your network address. Each request also passes Cloudflare's security check, as section 7 explains.

You can contact support@creatorcall.io about analytics information, objections or other rights.

7 Who can receive information

We disclose information only for the relevant purpose and subject to an appropriate legal basis and safeguards.

• Brands, agencies and creators: campaign information needed for outreach, qualification, shortlisting, contracting, communications, draft review and payment. Access is limited to the relevant campaign and authorised participants.
• Supabase and Vercel: database, authentication, file storage, hosting, delivery, page-speed measurement and operational infrastructure.
• Google Cloud: a nightly backup copy of files uploaded to CreatorCall and the documents it generates, such as contracts and Creator Briefs, held in Google's London region; and virus scanning of files uploaded to CreatorCall, such as chat attachments, drafts, contracts and brief documents, before another person can open or receive them. Each file is checked in Google's London region for the seconds a scan takes and is not kept afterwards.
• FastSaver: prepares the downloads you ask for in the CreatorCall toolkit, as our service provider. It receives the video link you submit from our server, and for a YouTube video your browser fetches the file from it directly, as explained in section 6.
• Mailgun: outreach, transactional notifications and campaign email relay, including delivery and failure handling.
• Stripe: subscription payments, creator payment processing, connected-account onboarding, payouts, fraud checks and relevant financial administration.
• Shopify: for brands with a linked store, launch-fee charges and refunds, and the orders described above.
• DocuSign: document delivery, e-signatures, signature evidence and envelope status. New signature sends use CreatorCall's platform account; earlier envelopes continue to synchronise under their existing arrangement.
• PostHog and Sentry: product usage analytics and error monitoring respectively. PostHog runs only after you allow it and session replay is switched off, as explained in section 6. Error monitoring is separate from the permanent platform audit trail.
• Google Ads: advertising measurement on our public marketing pages, and the sign-ups we report from our server, only if you allow it, as explained in section 6.
• Meta Platforms: Meta advertising measurement on our public marketing pages, and the purchases we report from our server, only if you allow it, as explained in section 6.
• Online store platforms such as Shopify: when a brand connects a store, we request its orders from that platform using the access the brand granted, so the platform knows which store is being read.
• Cloudflare: the Turnstile security check on the sign-in, sign-up, password-reset and confirmation-resend forms, and on the reset-link button of your account page, and on the free creator preview, and on the three video downloader pages of the CreatorCall toolkit. Your browser loads the check from Cloudflare, which receives your network address and browser and device information to tell people apart from automated abuse. For the downloaders, our server also sends Cloudflare your network address when it confirms the check. It is a necessary security measure, separate from optional analytics.
• Anthropic, Google and OpenAI: the AI and retrieval functions described in section 5.
• Apify and approved collection providers: relevant public social-media discovery and campaign-performance data. Provider datasets and actor access are subject to the contracts and controls we approve.
• Google, Microsoft and social platforms: information necessary for sign-in or an integration you choose, and the information those platforms independently process when you use their services, including the connection your browser makes to Instagram's servers when you download an Instagram video with the CreatorCall toolkit.
• Authorised staff, advisers and authorities: support, security, accounting, insurance, legal claims and disclosures required by law. We check the basis and scope of requests.
• A business successor: where necessary for a genuine transaction involving the service, subject to confidentiality, due diligence limits and continued data protection.

We do not operate a public resale catalogue of creator personal data. Supplying a purchased shortlist to the requesting brand is nevertheless a disclosure of creator information. We do not describe the service as never sharing personal data. Any classification of a transfer as a “sale” or “sharing” under a particular US state law must be assessed under that law rather than inferred from the label used here.

The names above are the services CreatorCall is built on. We give the applicable notice of a material change to this processing and, where required, obtain consent.

8 International processing

Our suppliers and campaign participants can be outside the United Kingdom or European Economic Area. Our personnel with access are in the UK and source spreadsheets are held locally. Supplier infrastructure, remote support, backups and recipients of shortlists are not all in the UK. PostHog analytics is sent to PostHog's EU cloud, although the provider's personnel or sub-processors outside the UK and EEA may have access under its data processing agreement. Google Ads measurement is processed by Google, which can include processing in the United States. Meta advertising measurement is processed by Meta Platforms, which can include processing in the United States. Page-speed readings are processed by Vercel, which can include processing in the United States. FastSaver, which prepares CreatorCall toolkit downloads, can process the links it receives outside the United Kingdom and EEA. Cloudflare runs its security check on its global network, which can include the United States. The AI providers named in section 5 process requests in the United States: OpenAI's API and Anthropic's API run there, and Google's API can. Contact support@creatorcall.io to request information about the transfer mechanism and safeguards that apply to a particular transfer.

A restricted international transfer must have the route required by applicable UK or EU data-protection law. Depending on the specific recipient and arrangement, that can be an applicable adequacy decision or contractual safeguards such as the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses or EU Standard Contractual Clauses, with the required assessment and supplementary measures. A data privacy framework is relevant only where the actual recipient, service and territorial coverage qualify.

9 How long information is currently kept

Automatic retention controls exist for the classes shown with a default period below. The day counts are the defaults stamped when a record is created. Different records start their clocks at different times, changing a setting does not shorten dates already stamped on existing records, and the scheduled purge runs in batches, so a default period is the point after which deletion is due rather than proof that every copy has already gone.

“No automatic expiry” describes the present implementation; it is not an entitlement to retain personal information forever. We minimise records and honour valid rights requests. Genuinely anonymised statistics are different from statistics still linked to a creator, account or post. An unresolved dispute or legal hold can justify retaining particular evidence for an appropriate period, not keeping every record indefinitely.

Account erasure. Requests go to support@creatorcall.io and are handled by our team. Once we accept a valid account-erasure request, we freeze account access and stop new work. We then delete the login and company-profile content, Creator Briefs and their versions, saved planner conversations, campaign analytics, ordinary uploaded files and notification history. We delete or scrub the brand's working campaign and Creator Call content, chat messages and ordinary attachments, and submitted-draft links and comments. Necessary stripped account, campaign, Creator Call and relationship records remain. Available credits are forfeited through the credit history; the wallet and financial records are retained rather than deleted.

The retained exceptions include payment, invoice and credit evidence, creator payment-terms acceptances, audit and webhook history, contact-suppression records, outreach history and the shared creator corpus with its supporting provider records. Bare chat and required submitted-draft records also remain. Retained history can contain personal information, including addresses, message content, attachment metadata, historical filenames and provider or AI outputs. Brand erasure does not remove every historical reference or erase shared creator data collected separately from that brand's campaign analytics. Only final contracts signed by both parties receive the six-year erasure archive described in the table. The availability of historical chat or audit records is not itself a legal basis for keeping unnecessary personal information indefinitely.

For account erasure, we request cancellation of the live Stripe subscription with immediate effect, rather than at the end of the billing period, without a prorated refund for the unused period. Cancellation and customer deletion are completed through recorded stages; unresolved payment or other work and provider failures can leave those stages pending. Accepting a request does not mean every deletion or provider action has finished. Content deletion also waits for outstanding work and previously issued upload access to end safely. Deleting the Stripe customer does not erase Stripe's historical charges, invoices or other financial records.

Copies held by providers, local spreadsheets, exports and recoverable backups are separate from the application records, and their deletion date cannot be inferred from an application purge setting. A valid deletion or restriction is applied across relevant copies as required by law, with any retained backup copy restricted and the deletion reapplied after restoration where necessary.

10 Your rights and choices

Depending on the applicable law and circumstances, you can ask to access and receive a copy of personal information, correct inaccurate information, erase information, restrict its use, object to processing or receive certain information in a portable form. You can withdraw consent and ask for the safeguards applicable to significant automated decisions. These rights are subject to specific conditions, not a blanket exception for business data.

For direct marketing, you can object at any time. We will stop that use and retain only what is needed to respect the objection. Notification preferences affect optional messages; essential service, billing, security or legal communications may still be sent where justified.

Contact support@creatorcall.io with enough information to locate the relevant account, email, profile, comment or campaign. We may need proportionate identity or authority verification. We will not require you to open an account or provide excessive identity documents simply to exercise a right. Authorised representatives can contact us on your behalf with appropriate authority.

We normally respond to rights requests without undue delay and within one month. Where applicable law permits an extension, clarification or another adjustment, we will explain the reason and timing. We ordinarily do not charge; any lawful refusal or exceptional fee will be explained with your complaint route. If we act as a processor, we will help route the request to the relevant customer and assist it as required.

Erasure is not absolute. For example, a necessary invoice or evidence needed for a legal claim may be retained while unrelated information is deleted. We will explain any relevant exception and the remaining period or criteria. A database dependency, an archive setting or the word “audit” is not itself a legal reason to refuse erasure.

How requests are handled. Export and deletion requests are made through support@creatorcall.io, from the Data and privacy settings of your account or directly, and are carried out by our team. Some database protections prevent retention-controlled records from being deleted before their scheduled date. These technical restrictions do not change your statutory rights, and where earlier erasure is legally required we carry it out.

Creator toolkit records. Toolkit records hold no name, email address or account, so the only way to find yours is the cc_toolkit_visitor cookie in the browser you used. To see or delete them, send support@creatorcall.io the cookie's value, which your browser's developer tools show; we use it only to find the records it links to. Without the cookie we cannot tell which records are yours, and if you have cleared or lost it, they are still deleted after 7 days. Anyone holding the cookie can use its daily allowance, so share it only with us.

11 Complaints and security

Please send a privacy complaint to support@creatorcall.io or our registered office. We acknowledge data-protection complaints within 30 days, investigate without undue delay, keep you informed and communicate the outcome. This is separate from the usual one-month timetable for a rights request.

You can complain to the Information Commissioner's Office in the UK. People protected by EU GDPR can also contact their competent supervisory authority, including where they live, work or believe an infringement occurred. These routes do not prevent other legal remedies.

We apply proportionate organisational and technical measures, including access restrictions, authentication, controlled service-provider access, virus scanning of uploaded files and incident handling. No system is perfectly secure. If a personal-data breach occurs, we assess it and notify the relevant authority and affected people where required by law. We do not claim that all correspondence is end-to-end encrypted, that all stored records are anonymous or that certification of a supplier certifies CreatorCall itself.

12 Children and updates

Customer accounts are intended for adults acting for business purposes. Creators are not universally required to be 18, so information processed through sourcing, correspondence, secure submission links and campaign records may concern children. We may also encounter children in public comments, audience samples and uploaded material. A business customer's adult status does not remove those children's privacy rights. A brand's responsibilities for an engagement do not remove CreatorCall's own responsibilities for the information we process.

Under-age participation remains subject to applicable law and the eligibility requirements of the relevant services and payment providers. We do not treat a public profile, a purchased list or a general acceptance of terms as blanket permission to profile or market to a child. Where applicable law requires parental authorisation, specific protections or understandable information for a child, those requirements apply to the relevant processing. A child or an appropriately authorised parent or guardian can contact support@creatorcall.io about the information, a decision or a concern. We consider the child's own rights and request only proportionate information to establish identity or authority when needed. This notice does not represent that every creator's age has been independently verified.

We update this notice when processing changes. The effective date identifies the version. For a material new purpose or optional technology, we provide additional information and obtain consent where required before the change. An update does not retrospectively validate earlier processing that lacked a lawful basis or adequate notice.