Privacy Policy

CreatorLink ("we," "us," or "our") operates the digital content marketplace at creatorl.ink. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our Platform. By using CreatorLink, you agree to this policy.

2.1 Information You Provide

• Account data: Email address, username, display name, and password when you register.
• Profile data: Bio, website, social media handles, and profile photo you optionally provide.
• Payment data: Payment information is collected directly by Stripe, Inc. CreatorLink does not store credit card numbers, bank account numbers, or Social Security Numbers.
• Content: Files, images, videos, audio, and documents you upload to the Platform.
• Communications: Messages you send to our support team.

2.2 Information Collected Automatically

• Usage data: Pages visited, features used, time spent, and actions taken on the Platform.
• Device data: IP address, browser type, operating system, and device identifiers.
• Transaction data: Purchase history, download activity, and bundle performance metrics.
• Cookies: Session cookies required for authentication. We do not use advertising or tracking cookies.

2.3 Information from Third Parties

• Stripe: We receive confirmation of payment status and payout eligibility from Stripe. We do not receive your full financial account details.
• Supabase: Our authentication and database provider processes account credentials on our behalf.

We use the information we collect to:

• Provide, operate, and improve the Platform.
• Process payments and facilitate payouts to Creators.
• Send transactional emails such as purchase confirmations and download links.
• Detect and prevent fraud, abuse, and Terms of Service violations.
• Comply with legal obligations and respond to law enforcement requests.
• Communicate platform updates, policy changes, and important notices.
• Generate anonymized analytics to understand Platform usage.

We do not sell your personal information to third parties. We do not use your data for advertising purposes.

4.1 With Service Providers

We share data with trusted service providers who help us operate the Platform:

• Stripe, Inc. — Payment processing and identity verification.
• Supabase — Database, authentication, and file storage infrastructure.
• Cloudflare — File storage (R2) and content delivery.
• Resend — Transactional email delivery.

These providers are contractually bound to protect your data and may only use it to perform services on our behalf.

4.2 Public Information

Creator display names, usernames, and bundle listings are publicly visible. Buyer identities are never shared publicly.

4.3 Legal Disclosures

We may disclose your information if required by law, court order, or government request, or to protect the safety of our users or the public.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

We retain your account data for as long as your account is active. If you delete your account:

• Your profile and uploaded files are soft-deleted and removed from public view immediately.
• Transaction records are retained for 7 years as required for financial compliance.
• Backups may retain your data for up to 90 days after deletion.

Files that have not generated any sales may be automatically purged after 90 days of inactivity to manage storage costs. You will not be separately notified of this routine cleanup.

We implement industry-standard security measures including:

• TLS encryption for all data in transit.
• Encrypted storage for files in Cloudflare R2.
• Row-level security policies restricting database access.
• Time-limited, signed URLs for private file downloads.
• Regular security reviews of our infrastructure.

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your data using reasonable measures.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update inaccurate or incomplete information through your account settings.
• Deletion: Request deletion of your account and associated data, subject to legal retention requirements.
• Portability: Request your data in a machine-readable format.
• Objection: Object to certain processing of your data.

To exercise any of these rights, contact us at legal@creatorl.ink. We will respond within 30 days.

CreatorLink is not directed at children under the age of 18. We do not knowingly collect personal information from minors. If we discover that a minor has created an account, we will immediately terminate it and delete associated data. If you believe a minor is using our Platform, contact us at legal@creatorl.ink.

We use only essential cookies required for authentication and session management. We do not use advertising cookies, tracking pixels, or third-party analytics that profile your behavior across other websites. You can disable cookies in your browser settings, but this will prevent you from logging in to the Platform.

CreatorLink is operated from the United States. If you access the Platform from outside the US, your data may be transferred to and processed in the US. By using the Platform, you consent to this transfer. We take steps to ensure your data is handled in accordance with this Privacy Policy regardless of where it is processed.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the effective date. Your continued use of the Platform after changes are posted constitutes your acceptance of the updated policy.

For privacy-related questions, data requests, or concerns:

CreatorLink
Privacy inquiries: legal@creatorl.ink
Website: creatorl.ink