PRIVACY POLICY

Last updated: December 17, 2025

1. Introduction

This Privacy Policy describes how Creator Square LLC ("we", "us", "our") collects, uses, and protects personal data of:

  • Creators
  • Students (customers)
  • Affiliates
  • Visitors

We comply with GDPR, CCPA, and other international privacy regulations.

We do not sell personal data.

2. Data We Collect

2.1. Account Information (All Users)

  • Name
  • Email address
  • Profile Picture (if using Google OAuth)
  • Password (hashed)
  • Billing and subscription details (for Creators)

2.2. Students

We collect:

  • purchased products
  • access logs (security and performance)
  • course consumption data (if applicable)
  • emails and automations triggered by the Creator
  • community access information

2.3. Affiliates

We collect:

  • referral link activity
  • visits, clicks, and conversions
  • commission amounts
  • payout history

2.4. Google OAuth

We receive:

  • name
  • email
  • profile picture
  • Google account ID

We do not access your Google Drive, contacts, or emails.

2.5. Payments & Financial Data

Handled by Stripe and Stripe Connect.

We receive:

  • transaction amounts
  • payout and commission details
  • payment status

We NEVER store credit card numbers.

2.6. Analytics

Using Datafast:

  • device & browser
  • IP-based location
  • actions performed on the platform
  • performance and usage metrics

3. How We Use Your Data

We use personal data to:

For Creators

  • operate your Creator account
  • process payments and commissions
  • send notifications
  • power email campaigns, automations, and analytics
  • improve platform performance

For Students

  • provide access to purchased content
  • ensure a functional student dashboard
  • send Creator's emails and notifications
  • maintain account security

For Affiliates

  • track referrals and conversions
  • calculate and display earnings
  • process payouts

General Uses

  • improve the Service
  • detect fraud and abuse
  • comply with legal obligations

4. Legal Bases (GDPR)

We rely on:

  • Contract (account creation, purchases, features)
  • Consent (marketing, cookies)
  • Legitimate interest (analytics, security)
  • Legal obligation (tax, accounting, fraud prevention)

5. Data Sharing

We share data only with essential service providers:

  • Supabase (database & authentication)
  • Stripe / Stripe Connect (payments & payouts)
  • Resend (email delivery)
  • Datafast (analytics)

We do not sell any personal data.

6. Data Transfers

Data may be stored in the US or Europe.

We rely on SCCs and other legal safeguards for international transfers.

7. Data Retention

We retain data:

  • as long as your account is active,
  • for legal and tax purposes after account deletion,
  • or until deletion is requested (where legally allowed).

8. Your Rights

Users may:

  • access their data
  • correct inaccurate data
  • delete their account
  • export or port their data
  • withdraw consent (marketing, cookies)
  • object to processing where applicable

Contact: contact@creatorsquare.io

9. Student and Creator Relationship

For email campaigns, product content, and student management:

  • Creators act as data controllers;
  • Creator Square acts as data processor.

Students should contact the Creator for content-related requests.

10. Security

We use:

  • encryption in transit
  • secure storage
  • access controls
  • monitoring for abuse

While no system is perfectly secure, we take reasonable measures to protect personal data.

11. Children

We do not allow users under 18.

12. Contact

For privacy matters: contact@creatorsquare.io