Privacy Policy

1. Who we are

Kreatorcity ("Kreatorcity", "we", "us", "our") is a creator–brand marketplace operated by Kreatorcity OPC Private Limited, with its registered office at:

C-03, Urban Serenity, Sarjapura, Bengaluru – 562125, Karnataka, India.

We operate kreatorcity.com, kreatorcity.in, and related services (the "Platform").

For questions about this Privacy Policy, contact us at support@kreatorcity.com.

2. Scope

This Privacy Policy explains what personal data we collect, how we collect it, why we use it, how it may be shared, how long we keep it, and the choices available to users.

The Platform is intended for users aged 13 and above. Users under 18 may use the Platform only with verifiable consent of a parent or lawful guardian where required by applicable law.

3. Personal data we collect

a. Account and profile information

Depending on the type of account and features used, we may collect:

• Name.
• Email address.
• Phone number.
• City or location selected by the user.
• Profile photo.
• Social-media handle.
• Creator category or niche.
• Pricing preferences.
• Brand/company information.
• Other details voluntarily provided during onboarding or use of the Platform.

b. Instagram data through Phyllo

Creators may connect their Instagram account through Phyllo.

Where authorised by the Creator and made available through the relevant integration, we may receive Instagram-related profile and performance data such as:

• Username and profile details.
• Follower/following counts.
• Reach and engagement metrics.
• Post and Reel performance.
• Audience demographics and geography.
• Other account analytics made available through the integration.

We use this information to support creator discovery, verification, platform analytics features, and Kreatorcity scores or indicators.

Kreatorcity currently uses Phyllo for Instagram only.

c. Brand and campaign information

We may collect information such as:

• Company name.
• Company website.
• Authorised user information.
• Campaign briefs.
• Deliverables.
• Collaboration requirements.
• Usage rights.
• Payment terms agreed between Brands and Creators.
• Campaign status and related information.

d. Collaboration information

We may process information generated through use of the Platform, including:

• Campaign applications.
• Direct collaboration requests.
• Deliverables.
• Timelines.
• Usage rights.
• Messages or communication records where supported.
• Collaboration status.

e. Payment and tax information

At present, Brand-to-Creator collaboration payments take place outside Kreatorcity.

Kreatorcity does not currently collect or store Creators’ or Brands’ bank-account details, UPI details, PAN details, or GST details for collaboration payouts.

If payment processing is introduced in the future, this Privacy Policy will be updated before such functionality is used.

f. Technical and security information

We process limited technical information needed to operate and secure the Platform.

This may include:

• IP addresses processed temporarily for rate-limiting and security purposes.
• Login timestamps.
• Authentication and session information.
• JWT claims such as email address, role, and account ID.
• Standard web-server access logs.

IP addresses used for rate limiting are retained temporarily in Redis and are not intended to be stored in Kreatorcity’s main application database for analytics purposes.

Kreatorcity does not currently use third-party analytics or advertising tracking tools such as Google Analytics, Mixpanel, Hotjar, Microsoft Clarity, PostHog, Segment, or Amplitude.

Kreatorcity does not currently collect device type, browser type, operating system, or device-derived approximate location for analytics purposes.

g. User-uploaded files

Users may upload files such as:

• Profile images.
• Campaign images.
• Briefs.
• NDAs.
• Campaign assets.
• Other documents required for Platform features.

These files may be stored using Amazon Web Services (AWS) S3.

h. Communications

We may retain records of communications with us, including support emails and support requests.

4. How we collect information

We may collect information:

• Directly from you when you register or use the Platform.
• From Instagram through Phyllo when you authorise the connection.
• Automatically through authentication, server, and security systems.
• From your use of campaign and collaboration features.
• When you contact our support team.

5. How we use personal data

We may use personal data to:

• Create and manage accounts.
• Authenticate users and maintain sessions.
• Connect Creator Instagram accounts.
• Display Creator profiles and verified performance information.
• Generate scores, indicators, and analytics features.
• Enable Brands and Creators to discover and contact each other.
• Enable Campaigns and Collaboration workflows.
• Send OTPs and transactional notifications.
• Provide customer support.
• Protect Platform security.
• Prevent abuse, fraud, and unauthorised access.
• Maintain operational records.
• Comply with applicable legal obligations.

6. Cookies and authentication storage

Kreatorcity currently uses first-party authentication cookies required for login and session management, including access and refresh tokens.

These authentication cookies are configured as secure and HTTP-only where applicable.

Kreatorcity does not currently use third-party advertising cookies or third-party analytics/tracking cookies.

If this changes, this Privacy Policy and any required cookie notices or consent mechanisms will be updated.

7. Third-party service providers

We use third-party service providers where necessary to operate the Platform.

These currently include or may include:

• Phyllo — Instagram account connection and Creator data retrieval.
• Amazon Web Services (AWS) — cloud infrastructure.
• AWS S3 — storage of user-uploaded files.
• AWS SES — transactional emails such as OTPs and Platform notifications.
• Other infrastructure, security, hosting, or communications providers required to operate the Platform.

These providers may process data on our behalf in accordance with their applicable terms and data-protection obligations.

8. Sharing with Brands and Creators

Creator profile and performance information may be displayed to Brands as part of Kreatorcity’s discovery and collaboration functionality.

Information relevant to a Campaign or Collaboration may be shared between the participating Brand and Creator.

We do not sell personal data to advertisers or data brokers.

9. Social-platform data

Instagram data is accessed through Phyllo based on permissions granted by the Creator.

A Creator may disconnect their social account, subject to the functionality provided by the Platform and Phyllo.

Disconnecting may prevent future retrieval of connected account information and may limit Creator verification, performance, or discovery features.

Previously retrieved information may be retained only where necessary for legitimate operational, legal, security, or record-keeping purposes, subject to applicable law.

10. Data storage and security

We use reasonable technical and organisational safeguards designed to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.

Security and infrastructure measures may include:

• Secure HTTP-only authentication cookies.
• Access and refresh-token controls.
• Server-side authentication.
• Rate limiting.
• Access logs.
• AWS infrastructure and storage controls.

No online system can be guaranteed to be completely secure.

11. Data retention and deletion

We intend to retain personal data only for as long as reasonably necessary for the purpose for which it was collected, to operate the Platform, resolve disputes, maintain security, or comply with applicable law.

Account and Platform data may be deleted or anonymised when it is no longer required, subject to legal, security, backup, fraud-prevention, and record-keeping requirements.

12. User rights and requests

Subject to applicable Indian law, users may request to:

• Access information about personal data processed by Kreatorcity.
• Correct or update inaccurate information.
• Request deletion where applicable.
• Withdraw consent where processing is based on consent.
• Raise a complaint or support request relating to personal data.

Requests may be sent to support@kreatorcity.com.

13. Support and grievance contact

For privacy questions, complaints, or requests, contact:

Kreatorcity OPC Private Limited

Email: support@kreatorcity.com

Address: C-03, Urban Serenity, Sarjapura, Bengaluru – 562125, Karnataka, India.

14. Users aged 13 to 17

Kreatorcity is intended for users aged 13 years or older.

Under applicable Indian data-protection law, individuals below 18 years of age may be treated as children for personal-data processing purposes. Where required by law, Kreatorcity will obtain verifiable consent from a parent or lawful guardian before processing the personal data of a user under 18.

Kreatorcity will not knowingly undertake tracking or behavioural monitoring of users under 18, or targeted advertising directed at them, except where expressly permitted by applicable law.

Users under 18 may be subject to additional account, consent, feature, campaign, contracting, or payment restrictions. If required consent cannot be verified, Kreatorcity may restrict or suspend the relevant account or features.

15. Cross-border processing

Some service providers may process or store information outside India.

Where applicable, Kreatorcity will handle cross-border processing in accordance with applicable Indian data-protection law and any restrictions imposed by competent authorities.

16. Changes to this Privacy Policy

We may update this Privacy Policy as the Platform, law, or our data practices change.

The updated version will be published with a revised "Last updated" date and, where required, users may receive additional notice.

17. Governing law

This Privacy Policy is governed by the laws of India.

Subject to any mandatory dispute or regulatory process, disputes relating to this Policy will be subject to the competent courts and legally applicable forums in Bengaluru, Karnataka, India.

18. Contact

Kreatorcity OPC Private Limited

C-03, Urban Serenity, Sarjapura, Bengaluru – 562125, Karnataka, India

Email: support@kreatorcity.com