Privacy Policy

1. Introduction

CreatorPay ("we", "us", "our") provides business management, invoicing, and payment tracking solutions for independent digital creators and agencies. This Privacy Policy details the types of information we gather, how we utilize and protect it, and your choices regarding your personal records.

2. Information We Collect

We collect information you directly provide when using our services:

• Account Credentials: Full name, verified email address, phone number, and hashed password.
• Creator Business Profile: Business trade name, registered address, PAN, GSTIN, bank account numbers, IFSC codes, and UPI IDs.
• Operational Deal Data: Brand names, contact person information, campaign deliverables, agreed fees, invoice line items, and payment references.
• Uploaded Documents: Signed influencer agreements, creative briefs, proof-of-work links, and payment UTR receipts.
• Technical & Log Data: IP address, device browser type, and timestamped authentication events.

3. How We Use Data

We use your information exclusively to:

• Generate and render branded PDF invoices and dynamic UPI QR payment codes.
• Schedule and dispatch automated payment reminders on your behalf.
• Maintain your secure brand CRM and campaign history.
• Compile aggregate revenue insights and tax summaries in your dashboard.
• Authenticate your identity and prevent fraudulent activity.

4. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. We share limited information strictly as necessary with verified infrastructure service providers (secure cloud hosting, transactional email delivery, and payment processing). All providers are bound by strict confidentiality and data protection obligations.

5. Cookies & Authentication

We use essential HTTP session cookies to keep you logged in securely and protect against Cross-Site Request Forgery (CSRF). We do not deploy intrusive third-party cross-site advertising trackers.

6. Security & Encryption

Your data is protected with modern cryptographic protocols: passwords hashed with bcrypt, secure HTTPS transmission (TLS 1.3), isolated database tenancy, and restricted file storage for vaulted agreements. Regular automated security audits are conducted to ensure infrastructure integrity.

7. Data Retention

We retain your account details and business records for as long as your account remains active. If you choose to close your account, your personal records and vaulted files are queued for permanent deletion, subject to statutory tax record retention requirements.

8. Your Data Rights

You have the right to access, inspect, modify, or export all your business data at any time through your dashboard settings. You may also request complete erasure of your profile by emailing privacy@creatorpay.app.

9. Policy Revisions

We may update this policy periodically to reflect platform enhancements or regulatory changes. We will notify active users via email or dashboard announcements whenever material modifications occur.