Privacy Policy for CreatrHub

1. Introduction

Creatrhub ("we," "our," or "us") operates the Creatrhub platform (the "Platform"), which connects user-generated content (UGC) creators with businesses and brands. We are committed to protecting your personal data and respecting your privacy rights.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Information We Collect

2.1 Information You Provide Directly

For All Users:

• Account details (name, email address, password)
• Profile information (profile photo, bio, location, website)
• Communication preferences and notification settings
• Payment-related information (processed securely by Stripe)

For Creators:

• Portfolio content (videos, images, descriptions)
• Work history and experience
• Social media account links and follower counts
• Bank account details for payouts (stored securely with Stripe)
• Tax information, where legally required

For Businesses:

• Company and registration details
• Billing and payment information
• Team member information
• Job postings and project briefs

2.2 Information Collected Automatically

When you use the Platform, we may automatically collect:

• Usage data (pages visited, features used, session duration)
• Device and technical data (IP address, browser type, operating system)
• Cookies and similar tracking technologies
• Approximate location data based on IP address
• Google Calendar and Google Meet integration data (meeting schedules and participants)

2.3 Information from Third Parties

We may receive information from:

• Google OAuth for authentication
• Stripe for payment processing
• Connected social media platforms
• Other users who refer you to the Platform

3. How We Use Your Information

3.1 Legal Bases for Processing (GDPR)

We process personal data based on one or more of the following legal bases:

• Contract Performance: To provide Platform services, facilitate Transactions, and process payments
• Legitimate Interests: To improve services, maintain security, prevent fraud, and communicate service updates
• Legal Obligations: To comply with tax, financial, and regulatory requirements
• Consent: For marketing communications, cookies, and optional features (where required)

3.2 Specific Uses

We use your information for:

• Account Management: Creating, maintaining, and supporting your account
• Matchmaking: Connecting Creators with relevant Business opportunities
• Payment Processing: Managing escrow, payouts, and invoicing

4. Information Sharing and Disclosure

4.1 With Other Platform Users

Certain information may be visible to other users, including:

• Public profile details (name, photo, bio, portfolio)
• Community feed posts and interactions
• Job applications and proposals you submit
• Completed project history displayed on profiles

4.2 With Service Providers

We share data with trusted third-party providers that help operate the Platform, including:

• Stripe: Payment processing and escrow management
• Google: Authentication, Calendar and Meet integrations, cloud services
• Email Providers: Platform communications and notifications
• Analytics Providers: Platform usage insights (anonymized where possible)
• Cloud Hosting Providers: Secure data storage

All service providers are contractually obligated to protect your data and use it solely for agreed purposes.

4.3 For Legal and Business Reasons

We may disclose personal data where necessary:

• To comply with legal obligations or court orders
• To protect the rights, property, or safety of users or Creatrhub
• To investigate fraud or security incidents
• In connection with mergers, acquisitions, or asset transfers

4.4 With Your Consent

We will request your explicit consent before sharing your information in ways not covered by this Privacy Policy.

5. International Data Transfers

Creatrhub primarily operates within the EU/EEA. Where personal data is transferred outside the EEA, we ensure appropriate safeguards, including:

• EU-approved Standard Contractual Clauses (SCCs)
• Adequacy decisions by the European Commission
• Explicit user consent where required

6. Data Retention

We retain personal data only as long as necessary:

• Active Accounts: Retained while the account remains active
• After Account Closure:
  • Transaction records: 7 years (legal and tax requirements)
  • Profile data and content: up to 90 days (account recovery window)
  • Financial records: as required by law
• Marketing Data: Until consent is withdrawn or after 2 years of inactivity

7. Your Rights Under GDPR

You have the right to:

7.1 Access

Request access to your personal data

7.2 Rectification

Request correction of inaccurate or incomplete data

7.3 Erasure

Request deletion of your data, subject to legal obligations

7.4 Restriction

Limit processing in certain circumstances

7.5 Data Portability

Receive your data in a structured, machine-readable format

7.6 Objection

Object to processing based on legitimate interests

7.7 Withdraw Consent

Withdraw consent at any time (without affecting prior processing)

7.8 Lodge a Complaint

File a complaint with the Irish Data Protection Commission or your local authority

To exercise your rights, contact: privacy@creatrhub.com

Response timeframe: Within 30 days

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain login sessions
• Store preferences
• Analyze Platform usage
• Personalize user experience

Cookie Categories:

• Essential: Required for Platform functionality
• Functional: Enhance usability
• Analytics: Measure usage patterns
• Marketing: Track campaign effectiveness (consent required)

You can manage cookies through browser settings or our cookie consent banner.

9. Security Measures

We implement industry-standard safeguards, including:

• Encryption of data in transit and at rest
• Secure authentication via Google OAuth
• Regular security audits and monitoring
• Access controls and staff training
• PCI-DSS compliant payment processing through Stripe

Despite these measures, no system is fully secure. Users are responsible for protecting account credentials.

10. Children's Privacy

The Platform is not intended for individuals under 18. We do not knowingly collect data from minors and will delete such data if discovered.

11. Google API Services

Our use of Google API data complies with the Google API Services User Data Policy, including Limited Use requirements.

Google Calendar and Meet Access:

• Used solely for scheduling meetings
• Calendar content is not read, stored, or shared beyond this purpose
• Access can be revoked at any time through your Google Account

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Material changes will be communicated via:

• Email
• Platform notifications
• Updated "Last Updated" date

Continued use of the Platform constitutes acceptance of the revised policy.

13. Contact Information

For privacy-related inquiries or to exercise your rights:

Privacy Email: privacy@creatrhub.com

Acknowledgment: By using Creatrhub, you confirm that you have read and understood this Privacy Policy.