Privacy Policy

1. Who We Are

CreatorNexus Ltd. ("we", "us") operates the CreatorNexus platform. For GDPR purposes, we are the data controller. Contact: [email protected]

2. Data We Collect

Account Data

Email, name, password hash, role, profile information you provide.

Usage Data

Pages visited, features used, login timestamps, IP address.

Content Data

Videos you upload, translations created, messages sent, community posts.

Payment Data

Transaction amounts and deal IDs. Full card details are processed by our secure payment provider and never stored by us.

Social Account Data

Follower counts and engagement metrics from social platforms you choose to connect.

3. How We Use Your Data

To provide and operate the Platform (contract performance).
To process payments and manage escrow (contract performance).
To send transactional emails (deal updates, payment receipts).
To detect fraud and maintain platform security (legitimate interest).
To improve the Platform via anonymised analytics (legitimate interest).
To comply with legal obligations (e.g., financial record keeping).

4. Data Sharing

We share data with:

Other platform users — your public profile is visible to brands/creators you engage with.
Payment processor — to process deal payments.
Cloud storage — video files are stored in encrypted cloud storage.
AI service providers — video content is processed to provide translation features.
Analytics tools — anonymised usage data for product analytics.

We do not sell personal data to third parties.

5. Data Retention

Account data is retained while your account is active plus 3 years for financial records. Videos and translations are retained while your account is active. Messages are retained for 2 years. Deleted accounts are anonymised within 30 days.

6. Your Rights (GDPR)

If you are in the EU/UK, you have the right to:

Access — download all your data via Account Settings → Export Data.
Rectification — update your information in profile settings.
Erasure — delete your account via Account Settings → Delete Account.
Portability — your data export is provided in JSON format.
Object — contact us to object to specific processing.

To exercise these rights, contact [email protected]. We respond within 30 days.

7. Cookies

We use essential cookies for authentication (JWT tokens stored in localStorage, not cookies). We use analytics cookies (PostHog) to understand how you use the Platform. You may opt out of analytics by disabling JavaScript or using browser extensions.

8. Security

We encrypt data in transit (TLS) and at rest. Passwords are hashed using bcrypt. We use account lockout after failed login attempts. API access is rate-limited. Security events are logged in an immutable audit trail.

9. Changes

We will notify you by email 30 days before any material changes to this policy.