Privacy Policy

1. Information We Collect

We collect the following types of information:

• Account information: Name, email address, and password (hashed) when you register.
• TikTok data: For creators, your TikTok username, display name, and profile information obtained via TikTok OAuth. We also collect view count data for submitted videos via the TikTok Research API.
• Brand information: Company name, website, and industry for brand accounts.
• Payment data: Stripe handles all payment processing. We store only a Stripe customer ID — we never see or store your full card details.
• Usage data: Pages visited, actions taken, and device/browser information for analytics and security.

2. How We Use Your Information

We use your information to:

• Operate the Platform and facilitate campaign submissions
• Process payments and issue creator payouts
• Send transactional emails (account confirmations, submission updates, payment notices)
• Notify you of new campaigns matching your niche (opt-out available)
• Prevent fraud and enforce our Terms of Service
• Improve the Platform through aggregate analytics

3. Information Sharing

We do not sell your personal information. We share data only in the following circumstances:

• With brands: When you submit to a campaign, the brand can see your name, TikTok username, niche, submitted video URL, and view count.
• Service providers: Stripe (payments), Resend (email), MongoDB Atlas (database). Each is bound by data processing agreements.
• Legal requirements: When required by law, court order, or to protect rights and safety.

4. TikTok Integration

When you connect your TikTok account, we access your public profile information and video analytics through TikTok's official APIs. We do not post to TikTok on your behalf, access private messages, or store your TikTok credentials. You can disconnect your TikTok account from your dashboard at any time.

5. Data Retention

We retain your account information for as long as your account is active or as needed to provide services. Submission records are retained for 3 years for tax and compliance purposes. You may request deletion of your personal data by contacting us — note that some data may be retained as required by law.

6. Cookies & Tracking

We use HTTP-only cookies for authentication sessions. We do not use third-party advertising cookies or tracking pixels. Our analytics are privacy-preserving and do not identify individual users.

7. Security

We use industry-standard security practices including password hashing (bcrypt), encrypted HTTPS connections, and HTTP-only authentication cookies. No system is 100% secure — please use a strong, unique password and contact us immediately if you suspect unauthorized access to your account.

8. Your Rights

Depending on your location, you may have the right to access, correct, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, email privacy@creatorwow.com. We will respond within 30 days.

9. Children's Privacy

CreatorWow is not directed to individuals under 18. We do not knowingly collect personal information from minors. If you believe a minor has created an account, please contact us and we will promptly delete the account.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on the Platform. Your continued use after changes take effect constitutes acceptance.

11. Contact Us

CreatorWow Inc. · 340 Pine Street, Suite 800 · San Francisco, CA 94104
privacy@creatorwow.com