Privacy Policy

1. Data We Collect

• Account information (name, email, username)
• Profile data (bio, images, social links)
• Payment information (processed securely via Stripe / GoCardless — we do not store card numbers)
• Usage data (content views, likes, interactions)
• Identity verification documents (for withdrawal KYC — stored encrypted)

2. How We Use Your Data

• To provide and improve the Cr8tivs platform
• To process payments and withdrawals
• To send transactional emails (receipts, withdrawal confirmations)
• To detect and prevent fraud
• To comply with legal obligations

3. Data Sharing

We do not sell your personal data. We share data only with trusted service providers (Stripe, GoCardless) necessary to operate the platform, and when legally required.

4. Data Retention

We retain your data for as long as your account is active. Upon account deletion request, your personal data is deleted within 30 days, except where we are legally required to retain it (e.g. financial records for 7 years).

5. Your Rights (GDPR)

If you are based in the UK or EU, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict processing
• Data portability

To exercise these rights, go to Settings → Account → Delete My Account or email privacy@cr8tivs.com.

6. Cookies

We use essential cookies only (authentication sessions). We do not use third-party tracking or advertising cookies.

7. Security

We use industry-standard encryption and security practices. However, no method of transmission over the internet is 100% secure.

8. Contact

For privacy enquiries, contact our Data Protection Officer at privacy@cr8tivs.com.