Protected in the Verse 🔐

Last Updated: May 25, 2026

Effective Date: May 25, 2026

CreatorVerse ("CreatorVerse," "we," "us," or "our") is committed to protecting the privacy and personal information of every creator, brand, agency, and visitor who uses our platform. This Privacy Policy explains how we collect, use, disclose, store, and safeguard information when you access the CreatorVerse website, mobile and web applications, APIs, dashboards, chat, campaign tools, analytics, and any related services (collectively, the "Services").

By creating an account, connecting an integration, or otherwise using the Services, you acknowledge that you have read and understood this Policy. Questions? Email support@creatorverse.ai.

At a glance: CreatorVerse is a two-sided platform connecting creators with brands for discovery, campaigns, chat, payments, and performance analytics. We use your data to run those workflows — we do not sell it, and we do not use connected social-platform data for advertising.

Scope of This Policy

This Privacy Policy applies to personal information collected when you:

• Browse the CreatorVerse marketing website or any sub-domain.
• Sign up for or use the CreatorVerse creator, brand, or agency dashboard (web or mobile).
• Connect a third-party account such as Meta (Facebook/Instagram), YouTube, TikTok or any payment provider.
• Participate in campaigns, briefs, applications, contracts, or in-app chat.
• Submit content, media, deliverables, invoices, or KYC documents through the Services.
• Interact with our support, sales, or community teams via email, chat, calls, events, or forms.
• Receive transactional or marketing communications from us.

Where CreatorVerse processes personal data on behalf of a brand or agency client acting as data controller (for example, audience data uploaded into a campaign workspace), CreatorVerse acts as a data processor, and the client’s privacy policy governs that data along with our Data Processing Addendum (DPA).

Who We Are

The data controller for personal information collected through the Services is CreatorVerse, with its registered office at Marwah House, Krishanlal Marwah Marg, Andheri East, Mumbai, Maharashtra 400072, India.

For privacy questions, data requests, or to reach our Data Protection Officer (DPO), email support@creatorverse.ai.

Information We Collect

Information you provide directly

• Account information: Name, email, phone number, password (hashed), profile photo, date of birth (for age verification), country, language, and role (creator, brand user, agency, admin).
• Creator profile data: Bio, niches, content categories, languages spoken, location, portfolio links, rate card, content samples, availability, brand-collaboration history, and self-declared audience demographics.
• Brand and agency data: Company name, GSTIN / tax ID, billing address, team member details, brand assets, brief content, target audience parameters, and campaign budgets.
• Identity & payout information: Government ID (where required for verification), PAN, bank account / UPI / payout details, and tax forms. Sensitive identity fields are encrypted and access-restricted.
• Communications: Messages sent through CreatorVerse Chat, campaign comments, support tickets, survey responses, and feedback.
• User-generated content: Content uploaded for review or delivery (images, videos, captions, scripts, decks, contracts, invoices).

Information collected automatically

• Device and technical data: IP address, device identifiers, browser type, OS, app version, time zone, crash logs, approximate location from IP.
• Usage data: Pages viewed, features used, clicks, search queries, session duration, referral source.
• Cookies and similar technologies: See the Cookies and Tracking Technologies section below.

Information from connected platforms and partners

When you connect a third-party account, we receive data scoped to the permissions you grant. This may include:

• Meta (Facebook & Instagram): Profile basics, Page / Instagram Business Account metadata, posts, comments, mentions, messages, media, insights, audience demographics.
• YouTube (via YouTube API Services): Channel info, videos, comments, watch metrics, aggregate audience analytics.
• TikTok, X (Twitter), LinkedIn, Snapchat, Pinterest, Threads: Profile, post, and aggregate engagement data where enabled.
• Authentication providers: Google, Apple, Microsoft SSO — we receive your name, email, and a unique user ID; we never receive your password.
• Payment & payout processors: Stripe, Razorpay, PayPal, RBI-licensed payout partners — we receive transaction status, last-4 digits, and payout metadata. We do not store full card or bank details on our servers.
• Enrichment partners: Publicly available creator audience data used to validate self-reported metrics, in line with each source’s terms.

Information about minors

CreatorVerse is intended for individuals 18 years of age or older. We do not knowingly collect personal information from anyone under 18. See the Children and Minors section below.

How We Use Your Information

We process personal data to operate, secure, and improve the Services. Specific purposes include:

• Creating and maintaining your account, authenticating sign-ins, and managing roles and permissions.
• Powering creator discovery, search, and matching — including the CreatorVerse Health Score (CHS), audience-fit scoring, and recommendations.
• Running campaign workflows: briefs, applications, shortlisting, contracting, content review, deliverable tracking, and approvals.
• Enabling in-app chat, notifications, and collaboration between creators, brands, and agencies.
• Processing payments, payouts, invoices, taxes, and applicable withholding.
• Producing analytics dashboards, campaign reports, and benchmarks (aggregated where possible).
• Improving and developing features, including training and evaluating models (see the Artificial Intelligence section below).
• Preventing fraud, abuse, spam, scraping, fake engagement, and policy violations.
• Complying with legal, tax, regulatory, and contractual obligations.
• Sending transactional emails and, with your consent where required, marketing communications. You can unsubscribe at any time.

We rely on the following legal bases under GDPR, the DPDP Act, and similar laws: performance of a contract, legitimate interests, consent, and legal obligation.

Artificial Intelligence and Automated Features

CreatorVerse uses AI/ML systems to power features such as creator matching, audience-fit scoring, content moderation, sentiment analysis on chats and comments, and CHS computation. With respect to these systems:

• We use your data to generate predictions and recommendations within the platform.
• We do not sell your personal data or third-party-connected social data to external model providers.
• Where third-party LLM or ML APIs are used to power product features, prompts are sent under contractual no-training and zero-retention terms wherever the vendor offers them.
• Any automated decision that has a legal or similarly significant effect on you (e.g., rejection of a campaign payout for fraud) will be reviewed by a human upon request — contact support@creatorverse.ai.

Use of Meta APIs and Data

CreatorVerse integrates with Meta Platforms, Inc. (Facebook and Instagram) through official APIs. By connecting a Meta account you also agree to the Meta Platform Terms, Facebook ToS, Instagram ToU, and Meta Privacy Policy.

Data we access through Meta APIs

• Basic profile: name, username, Page ID, Instagram Business Account ID, profile picture.
• Page / IG Business data: posts, comments, messages, mentions, media, insights.
• Performance metrics: reach, impressions, engagement, aggregated follower demographics.

How we use Meta data

Meta data is used exclusively to power publishing, engagement, analytics, and campaign reporting within CreatorVerse. We do not sell, rent, or share Meta user data with third parties; use Meta data for advertising or unrelated analytics; or combine it with third-party datasets for profiling outside the explicit features you use.

All Meta data use adheres to Meta’s Developer Policies. Revoke access at any time via Facebook App Settings or Instagram Account Settings.

Use of YouTube API Services

Where you connect a YouTube channel, CreatorVerse uses YouTube API Services. You agree to the Google Privacy Policy and the YouTube Terms of Service. Revoke CreatorVerse’s access at any time via Google Security Settings.

How We Share Information

This section is being finalised. Detailed sharing terms — who we share with, why, and under what controls — will be published here ahead of the effective date above.

International Data Transfers

CreatorVerse is headquartered in India and uses cloud infrastructure that may store or process data in India, the EEA, UK, US, and other regions. Where personal data is transferred across borders, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs), adequacy decisions, or equivalent mechanisms recognised under applicable law.

Data Security and Retention

Safeguards include:

• TLS encryption in transit and AES-256 encryption at rest.
• Role-based access control, SSO, and multi-factor authentication for internal systems.
• Secrets management, key rotation, and audit logging.
• Annual penetration tests, code reviews, and vendor security assessments.
• Incident response procedures and breach notification within statutory timelines.

We retain personal data only as long as necessary to provide the Services, comply with legal obligations (e.g., tax records typically retained for 7 years in India), resolve disputes, and enforce agreements. When retention is no longer required, data is deleted or irreversibly anonymised.

Cookies and Tracking Technologies

We use cookies, local storage, SDKs, and similar technologies to keep you signed in, remember preferences, measure performance, and detect abuse. Categories include strictly necessary, functional, analytics, and (with consent where required) marketing. Manage preferences via the in-app cookie banner or your browser settings. Blocking strictly necessary cookies may break parts of the Services.

Your Rights and Choices

Subject to applicable law, you may have the right to access, correct, delete, restrict, port your data, withdraw consent, and lodge a complaint with your data protection authority. Email support@creatorverse.ai to exercise these rights — we respond within statutory timelines (typically 30 days) and may verify your identity first.

Children and Minors

CreatorVerse is not intended for individuals under 18, and we do not knowingly collect their data. Contact support@creatorverse.ai if you believe a minor has provided us personal information, and we will promptly delete it.

Data Deletion Instructions

1. Self-serve: Sign in and go to Settings → Account → Delete Account, or Settings → Connected Accounts to disconnect a specific integration.
2. By request: Email support@creatorverse.ai with the subject "Data Deletion Request" (or "Meta Data Deletion Request" for Meta-specific data).

Upon a verified request, we will delete the relevant data within 30 days, except where retention is required by law, fraud prevention, or for the establishment, exercise, or defence of legal claims.

Compliance Statement

CreatorVerse complies with applicable privacy regulations, including the EU GDPR, the UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), the Indian Digital Personal Data Protection Act, 2023 (DPDP Act), and Meta and Google platform requirements. Where there is a conflict between this Policy and an applicable law, the law prevails for users in that jurisdiction.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our Services, technologies, legal requirements, or business practices. Material changes will be notified via email or in-app notice before they take effect. Continued use of the Services after the effective date constitutes acceptance of the revised Policy.

Contact Us

CreatorVerse — Privacy Office
Email: support@creatorverse.ai
Address: 202 Marwah House, Krishanlal Marwah Marg, Andheri East, Mumbai, Maharashtra 400072, India