CreatorFlow Privacy Policy

PLACEHOLDER - NOT LEGAL ADVICE. This is sample content to fill the page during development. It has not been reviewed by a lawyer. A qualified privacy lawyer should review and rewrite it before launch, especially the sections on legal bases, data sharing, international transfers, retention, and user rights, which depend on the specific laws that apply to you, for example Nigeria's NDPA and, if you serve EU/UK users, the GDPR/UK GDPR.

This Privacy Policy explains how CreatorFlow ("we," "us," or "our") collects, uses, shares, and protects personal information when you use our website, applications, and services (the "Platform").

CreatorFlow is operated by [LEGAL ENTITY NAME], located at [ADDRESS]. For privacy questions, contact us at [PRIVACY CONTACT EMAIL].

By using the Platform, you agree to the practices described here.

Information you give us:

• Account details such as name, email, password, and role (Brand or Creator).
• Profile details such as social handles, location, portfolio, and bio.
• Verification (KYC) information such as identity documents and related data, where required to process payments.
• Payment details such as bank account or payout information.
• Content you submit, including campaign briefs, videos, captions, and messages.
• Communications you send to us, such as support requests.
• Usage data such as pages viewed, actions taken, and timestamps.
• Device and connection data such as IP address, browser type, and device identifiers.
• Cookies and similar technologies.
• Verification, fraud-prevention, and payment data from providers such as [Paystack / Stripe / KYC PROVIDER].
• Limited data from social or login providers if you connect them.

We use personal information to:

• Create and manage your account and verify your identity.
• Operate campaigns: posting briefs, receiving submissions, and selecting winners.
• Hold funds in escrow and process payments and payouts.
• Detect, prevent, and investigate fraud, abuse, and security issues.
• Provide support and respond to your requests.
• Send service messages and, where permitted, marketing, which you can opt out of.
• Improve and develop the Platform.
• Comply with legal, tax, and regulatory obligations.
• [REVIEW WITH COUNSEL - where required, map each use to a lawful basis such as contract, legitimate interest, consent, or legal obligation.]

We share personal information:

• Between users as needed for campaigns. Brands can see Creator profiles and submissions; Creators can see relevant brief and Brand information. Only share what is necessary for the campaign to work.
• With service providers who help us operate the Platform, such as payment processors, KYC and fraud-prevention vendors, hosting, and analytics. They may only use the data to provide services to us.
• For legal reasons, such as to comply with law, respond to lawful requests, enforce our Terms, or protect our rights, users, or the public.
• In a business transfer, such as a merger, acquisition, or sale of assets, subject to this Policy.
• We do not sell your personal information. [CONFIRM WITH COUNSEL that this statement is accurate for your final data practices.]

To process payments, we and our payment partners collect and process financial and identity information. Payment providers such as [Paystack / Stripe] handle card and bank data under their own privacy terms. We retain the records we need to operate escrow, process payouts, prevent fraud, and meet legal and tax obligations.

We use cookies and similar technologies to keep you logged in, remember preferences, measure usage, and improve the Platform. You can control cookies through your browser settings; disabling some cookies may affect how the Platform works. [Add a cookie banner / consent tool where required.]

We keep personal information for as long as your account is active and as needed to provide the Platform. We may keep certain data longer where required for legal, tax, accounting, fraud-prevention, or dispute-resolution purposes. When data is no longer needed, we delete or anonymize it. [REVIEW WITH COUNSEL - set specific retention periods.]

We may process and store information in countries other than where you live, including where our service providers operate. Where required, we put safeguards in place for these transfers. [REVIEW WITH COUNSEL - describe the actual transfer mechanisms you rely on, e.g. standard contractual clauses.]

Depending on where you live, you may have rights to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your information, subject to legal exceptions.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Request a copy of certain data in a portable format.
• Lodge a complaint with your data protection authority.
• To exercise these rights, contact us at [PRIVACY CONTACT EMAIL]. We may need to verify your identity before acting. [REVIEW WITH COUNSEL - confirm the exact rights and response timelines under the laws that apply to you, such as the NDPA or GDPR.]

We use reasonable technical and organizational measures to protect personal information, such as access controls, encryption in transit, and verification gating for payouts. No system is perfectly secure, and we cannot guarantee absolute security. Please keep your login credentials safe.

The Platform is not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

The Platform may link to third-party sites or services we do not control. This Policy does not cover their practices. Review their privacy policies before sharing information with them.

We may update this Policy from time to time. We will post the updated version with a new "Last updated" date and, where appropriate, notify you. Continued use after changes take effect means you accept the updated Policy.

For privacy questions or requests, contact: [PRIVACY CONTACT EMAIL] [LEGAL ENTITY NAME] [ADDRESS] [DATA PROTECTION OFFICER / REPRESENTATIVE, if applicable]