Privacy Policy

This Privacy Policy explains how CreatorHash ("CreatorHash," "we," "us," or "our") collects, uses, discloses, and otherwise processes personal information in connection with our websites, applications, and related services (collectively, the "Services"). By accessing or using the Services, you acknowledge that you have read this Policy. If you do not agree, please do not use the Services.

CreatorHash provides tools for creators to understand audience and sponsorship value, manage rate cards and media kits, generate creative assets, and share materials with brands. This Policy is written to reflect how the Services operate today. Where the Services offer additional notices or controls (for example, visibility toggles on a public profile), those choices apply together with this Policy.

Who this applies to

This Policy applies to visitors to our marketing site, registered users, and individuals whose information appears in content you upload or in data imported from connected social accounts (for example, public comments we sample for analytics). If you are a brand recipient of a shared report or link, we process limited technical data about that access as described under "Shareable links and reports" below.

Personal information we collect

We collect the categories of information below, depending on how you use the Services.

Account and authentication

When you create or access an account, we collect identifiers and profile details you provide or that are supplied by your sign-in provider (for example, name, email address, and profile image where available). We maintain session records so you can stay signed in securely across visits.

Connected social accounts

If you connect YouTube or Instagram, we collect account identifiers, display names, handles, profile imagery, and similar channel metadata. We also receive analytics-style metrics and audience breakdowns made available by those platforms under the permissions you authorize. Access tokens needed to refresh data are stored using industry-standard encryption at rest on our systems.

Product usage, studio, and generated content

We collect information you submit through the studio and related workflows, including prompts, uploaded images and attachments, generation parameters, outputs you save, and technical metadata needed to operate features (such as file type and integrity checks). We compute scores, summaries, and insights from channel data you connect. Where we analyze public comments, we store limited text and derived signals (for example, themes relevant to sponsorship fit) to power intelligence features.

Uploads and hosted files

Files you upload are stored so the Services can display, process, or share them as you direct. Certain files may be reachable by a link you copy or embed; you should treat such links like a key—anyone with the link may be able to access the file until you remove or replace it, subject to caching.

Payments and credits

If you purchase subscriptions or credits, we collect billing-related identifiers and transaction references from our payment partners, along with internal ledger entries needed to apply credits and comply with accounting and fraud prevention obligations.

Shareable links and reports

When you publish a media kit or generate a brand-facing report, we host the content at a URL you can share. We may log basic access information (such as approximate location derived from IP, browser type, and referrer) to understand reach and misuse, consistent with how similar shareable documents are instrumented in SaaS products.

Site analytics

We use product analytics on our web properties to understand traffic, performance, and reliability. Those tools may collect device and usage information in accordance with the analytics provider's own policies.

Support and administration

If you contact us or we operate internal administration tools, we may process account and usage information as needed to respond to incidents, enforce our terms, and protect the security and integrity of the Services.

How we use personal information

We use personal information to:

• Provide, maintain, and improve the Services you request;
• Authenticate users, prevent fraud and abuse, and secure our infrastructure;
• Sync connected channels, compute insights, and present sponsorship and audience guidance;
• Generate and store creative outputs when you invoke those features;
• Process payments, fulfill subscriptions, and manage credits;
• Host and deliver shareable pages you choose to publish;
• Communicate about the Services, including transactional messages and responses to inquiries;
• Comply with law and enforce our agreements.

Legal bases (where applicable)

If you are located in the European Economic Area, the United Kingdom, or similar jurisdictions, we rely on one or more of the following, as appropriate: performance of a contract with you; our legitimate interests in operating, securing, and improving the Services (balanced against your rights); consent where we obtain it (for example, through OAuth authorization screens); and compliance with legal obligations. Where consent is the basis, you may withdraw it without affecting the lawfulness of processing before withdrawal.

Disclosure to service providers

We engage vendors who process personal information on our behalf to host the Services, run databases, deliver analytics, route payments, and provide AI and media processing when you use those features. Categories of recipients commonly include cloud hosting and edge platforms, payment processors, AI model providers you enable through your configuration, and the social platforms you connect. We do not sell your personal information as that term is commonly understood in U.S. state privacy laws.

Security

We implement administrative, technical, and organizational measures designed to protect personal information, including encryption of sensitive credentials at rest and transport encryption in production configurations. No method of transmission or storage is completely secure; you are responsible for safeguarding your account credentials and for the links you share publicly.

Retention

We retain personal information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Some analytics and channel history are retained in append-only form to preserve product functionality. Shareable URLs remain active until you rotate, expire, or remove the underlying content where the product supports those controls.

International transfers

We and our service providers may process personal information in the United States and other countries where we or they operate. Where applicable law requires safeguards for cross-border transfers (for example, standard contractual clauses, adequacy decisions, or other approved mechanisms), we take steps consistent with those requirements.

How to exercise your rights

To submit a privacy request, appeal a decision on a request, or ask questions about this Policy, email hello@creatorhash.com from the address associated with your account (or describe the account sufficiently for us to verify you). We will confirm receipt where required and respond within the timeframes applicable law allows (often 30 to 45 days, with extensions permitted in some jurisdictions when complex or voluminous). We may need to verify your identity before fulfilling certain requests to protect your information. You may also use in-product settings for choices the Services expose directly (for example, visibility controls on shareable pages).

Cookies and similar technologies

We use cookies and similar technologies to maintain sessions, complete secure OAuth connections to third-party platforms, and where applicable to protect administrative tools. You can control cookies through your browser; disabling certain cookies may limit sign-in or connection features.

Children

The Services are not directed to children under 13 (or the age required by local law), and we do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will take appropriate steps.

Third-party services

The Services may contain links to third-party websites or allow you to connect third-party accounts. Their collection and use of information is governed by their own policies. We encourage you to read those policies before connecting accounts or following links.

Changes to this Policy

We may update this Policy from time to time. We will post the revised version on this page and update the "Last updated" date above. Where changes are material and the law requires, we will provide additional notice or obtain consent as appropriate.

Contact

Privacy and data protection inquiries: hello@creatorhash.com. For general account help, you may also use Settings in the app where available.