Privacy Policy

1. Introduction

CreatorMarket is operated by Synexo Data Technology L.L.C ("we", "our", "us"), a limited liability company registered in the United Arab Emirates.

We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the CreatorMarket platform ("the Platform").

2. Information We Collect

Information You Provide

• Account information (email address, password, account role)
• Profile information (name, bio, location, profile image, portfolio images)
• Social media account details and connected platform data
• Messages and communications sent through the Platform
• Campaign details and service packages
• Payment-related information shared between Users

Information Collected Automatically

• Device information (browser type, operating system, screen resolution)
• IP address and approximate geographic location
• Usage data (pages viewed, actions taken, timestamps)
• Cookies and similar tracking technologies
• Referral sources and search terms

3. How We Use Your Information

We use your information to:

• Provide, operate, and improve our services
• Facilitate connections between Brands and Creators
• Display public profile information and audience metrics to other Users
• Send notifications, updates, and service-related communications
• Respond to your inquiries and support requests
• Detect, prevent, and address fraud, abuse, or security issues
• Analyze usage patterns to improve the Platform
• Comply with legal obligations

4. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contractual necessity — To provide the services you have signed up for
• Legitimate interest — To improve our Platform, prevent fraud, and ensure security
• Consent — For optional features such as connecting social media accounts or receiving marketing communications
• Legal obligation — To comply with applicable laws and regulations

5. Information Sharing

We may share your information with:

• Other Users — Your public profile information (name, bio, profile image, audience metrics, packages) is visible to all Users of the Platform.
• Service Providers — We use third-party services for cloud hosting (Amazon Web Services), authentication (AWS Cognito), and content delivery. These providers process data on our behalf under strict contractual obligations.
• Legal Requirements — We may disclose information when required by law, court order, or governmental authority, or when necessary to protect our rights, safety, or property.

We do not sell your personal information to third parties. We do not share your data with advertisers or data brokers.

6. Instagram and Facebook Platform Data

When you connect your Instagram professional account or Facebook Page via OAuth, we access and store the following data from the Meta Platform:

Data We Collect

• Instagram Profile Information — Username, profile metadata, follower count, following count, and media count for a connected Instagram professional account.
• Facebook Page Information — Page name, page username or URL, and follower or fan count for a connected Facebook Page.
• Audience Demographics — Aggregated audience data such as age/gender distribution, top countries, and top cities when available through the Meta APIs.
• Engagement Metrics — For Instagram, we may calculate average engagement rates from recent content metrics made available by Meta.
• Access Token — An encrypted long-lived access token for refreshing connected platform data (stored with AES-256-GCM encryption).

How We Use This Data

• To display verified platform information and audience insights on your Creator profile
• To help Brands find Creators that match their target audience
• To periodically refresh these metrics so profile data stays reasonably current

Data Storage and Security

Access tokens are encrypted at rest using AES-256-GCM. Audience demographics are stored in aggregated, percentage-based form. We do not store individual follower-level data from Meta. Connected platform data is stored in our secure infrastructure hosted on Amazon Web Services.

Data Deletion

You can disconnect your Instagram account or Facebook Page at any time from your dashboard settings. Disconnecting removes the stored authorization and imported platform metrics from our systems for that connected account. You can also request data deletion through Meta's platform, which triggers an automated deletion flow for Meta-related data we can identify. To check the status of a deletion request, visit our Data Deletion Status page.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of sensitive data at rest and in transit (TLS/HTTPS)
• AES-256-GCM encryption for stored access tokens
• HMAC-signed session cookies
• Secure cloud infrastructure hosted on Amazon Web Services
• Regular security reviews and access controls

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Your Rights

You have the right to:

• Access — Request a copy of the personal information we hold about you.
• Correction — Request correction of inaccurate or incomplete information.
• Deletion — Request deletion of your account and associated data.
• Objection — Object to certain processing activities based on legitimate interest.
• Data Portability — Request export of your data in a commonly used format.
• Withdraw Consent — Withdraw consent for optional data processing (e.g., disconnect social media accounts) at any time.

To exercise any of these rights, please contact us at info@creatormarket.ae. We will respond within 30 days.

9. Cookies

We use the following types of cookies:

• Essential Cookies — Required for authentication and core Platform functionality (e.g., session cookies). These cannot be disabled.
• Functional Cookies — Used to remember your preferences and improve your experience.

We do not use third-party advertising or tracking cookies. You can control cookies through your browser settings, but disabling essential cookies may prevent you from using the Platform.

10. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., resolving disputes, enforcing our Terms).

Anonymized and aggregated data that can no longer identify you may be retained indefinitely for analytical purposes.

11. Children's Privacy

Our Platform is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a person under 18, we will take steps to delete that information promptly.

12. International Data Transfers

Your information is stored and processed using infrastructure and service providers that may operate in multiple jurisdictions. In some cases, your data may be processed outside the country where you are located. We use appropriate safeguards for such transfers where required, including contractual protections with service providers.

13. Third-Party Links

The Platform may contain links to third-party websites or services (e.g., social media platforms, external websites linked in Creator profiles). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last updated" date and, where appropriate, by email or through a notice on the Platform. Continued use of the Platform after changes take effect constitutes your acceptance of the revised Privacy Policy.