Privacy Policy

1. What this policy covers

This Privacy Policy explains how CreatorCast ("we", "us") collects, uses, and shares information when you use the Service — both as a brand user with an account, and as a creator who submits information through a public onboarding or content submission link.

2. Information we collect

Depending on how the Service is used, we collect:

• Brand account data: email address, brand profile details (brand name, product description, tone, website).
• Creator data:name, social handles, email, niche, follower count, and any notes — collected either when a brand uploads or enters it, or when a creator submits it directly through a public onboarding or content submission link.
• Content and deal data: submitted post URLs, uploaded files, deal terms, and public view counts on submitted posts.
• Payment data: we do not store bank account or card details. Your $299/month subscription is billed through Stripe Checkout, and creator payouts are handled separately through Stripe Connect; we store only Stripe customer and subscription identifiers, transaction references, and status.

3. How we use information

We use collected information to:

• Operate core features: outreach, inbox, deal tracking, content approval, view tracking, and payouts.
• Generate AI-drafted outreach emails and extract structured data from uploaded spreadsheets/documents, using the Anthropic API.
• Send and receive outreach email through the email account you connect.
• Detect and prevent abuse of the Service.

4. Third-party processors

We share data with the following processors strictly to provide the Service: Supabase (database and authentication), Apify (creator discovery), Nylas (sending and receiving outreach email through the account you connect, and the Google or other mailbox provider behind it), Anthropic (AI drafting and data extraction), CreatorCrawl (public view-count lookups), and Stripe (subscription billing and creator payouts). Each processor only receives the data necessary to perform its function.

4a. Connected mailbox data

When you connect your email account, we request permission, through our email infrastructure provider Nylas, to send email on your behalf and read messages in your inbox, solely to send your outreach emails and detect creator replies to them from within the Service. Where the connected account is Gmail, CreatorCast and Nylas's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use your mailbox data for advertising, and no human reads it except as needed for security, legal compliance, or with your consent. You can revoke access at any time from your mailbox provider's account permissions page or by disconnecting it in Settings.

5. Creator information submitted via public links

When a creator submits information through a brand's public onboarding link or content submission link, that data is stored against the brand's account. We act as a data processor for the brand in this context; the brand is responsible for how it subsequently uses that creator's information, including compliance with applicable marketing and privacy laws.

6. Data retention

We retain account and creator data for as long as the account is active, or as needed to comply with legal obligations, resolve disputes, and enforce agreements. You can request deletion of your account and associated data by contacting us.

7. Security

We use row-level security so that brand data is only accessible to the brand account that owns it, and restrict service-level database access to server-side processes. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

8. Your rights

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal information. Contact us to exercise these rights.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

10. Contact

Questions about this Privacy Policy can be sent to the contact address listed on your account or brand profile.