Privacy Policy

Effective Date: July 7, 2026

CreatorFlow ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (gocreatorflow.com) and use our B2B SaaS platform, including compliance with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

1. Information We Collect

As a B2B platform, we act as both a Data Controller (for our Merchant clients) and a Data Processor (for the TikTok Creators who apply through Merchant portals).

  • Merchant Account Data: Name, business email, company name, subdomain preferences, and billing information (processed securely via our Merchant of Record, Paddle).
  • Creator Portal Data: TikTok usernames, follower counts, business emails, and physical shipping addresses provided voluntarily by creators during the application process.
  • Automated Data: IP addresses, browser types, and usage logs via essential performance cookies.

2. How We Use Your Information

We use the collected data strictly to provide and optimize our services:

  • To manage merchant accounts and subscriptions.
  • To facilitate the shipment of free samples from merchants to approved creators.
  • To track public TikTok video metrics (views, likes) using public scraping infrastructure based on user-submitted campaigns.
  • We NEVER sell, rent, or trade any personal or business data to third-party data brokers.

3. GDPR & CCPA Rights

If you are located in the European Economic Area (EEA) or California, you possess the following rights:

  • The Right to Access & Portability: Request a copy of the data we hold about you.
  • The Right to Rectification: Request corrections to inaccurate data.
  • The Right to Erasure ("Right to be Forgotten"): Request full deletion of your account and associated data. (Note: Account deletion automatically triggers cascading deletes across all campaigns and creator databases).
  • Opt-Out rights: You can object to data processing at any time.

To exercise any of these rights, please contact us at legal@gocreatorflow.com.

4. Data Retention

We retain personal data only as long as an account is active. Once a Merchant requests account deletion, all associated merchant profiles, campaign records, creator lists, and tracking logs are permanently and securely deleted from our databases within 72 hours.