Privacy Policy

1. Introduction

CreatorMarket is operated by Synexo Data Technology L.L.C ("we", "our", "us"), a limited liability company registered in the United Arab Emirates.

We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the CreatorMarket platform ("the Platform").

2. Information We Collect

Information You Provide

• Account information (email address, password, account role)
• Profile information (name, bio, location, profile image, portfolio images)
• Social media account details and connected platform data
• Messages and communications sent through the Platform
• Campaign details and service packages
• Verification documents (identity documents, advertising permits)
• Payment and booking information shared between Users, excluding full payment card details

Information Collected Automatically

• Device information (browser type, operating system, screen resolution)
• IP address and approximate geographic location
• Usage data (pages viewed, actions taken, timestamps)
• Cookies and similar tracking technologies
• Referral sources and search terms

3. How We Use Your Information

We use your information to:

• Provide, operate, and improve our services
• Facilitate connections between Brands and Creators
• Display public profile information and audience metrics to other Users
• Send notifications, updates, and service-related communications
• Respond to your inquiries and support requests
• Detect, prevent, and address fraud, abuse, or security issues
• Analyze usage patterns to improve the Platform
• Comply with legal obligations

4. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contractual necessity — To provide the services you have signed up for
• Legitimate interest — To improve our Platform, prevent fraud, and ensure security
• Consent — For optional features such as connecting social media accounts or receiving marketing communications
• Legal obligation — To comply with applicable laws and regulations

5. Information Sharing

We may share your information with:

• Other Users — Your public profile information (name, bio, profile image, audience metrics, packages) is visible to all Users of the Platform.
• Service Providers — We use third-party services for cloud hosting (Amazon Web Services), authentication (AWS Cognito), and content delivery. These providers process data on our behalf under strict contractual obligations.
• Legal Requirements — We may disclose information when required by law, court order, or governmental authority, or when necessary to protect our rights, safety, or property.

We do not sell your personal information to third parties. We do not share your data with advertisers or data brokers.

6. Instagram and Facebook Platform Data

When you connect your Instagram professional account or Facebook Page via OAuth, we access and store the following data from the Meta Platform. We only access data explicitly granted by you via Meta permissions during the connection flow, including instagram_business_basic, instagram_business_manage_insights, pages_show_list, pages_read_engagement, and read_insights.

Data We Collect

• Instagram Profile Information — Username, profile metadata, follower count, following count, and media count for a connected Instagram professional account.
• Facebook Page Information — Page name, page username or URL, page ID, and follower or fan count for a connected Facebook Page.
• Audience Demographics — Aggregated audience data such as age/gender distribution, top countries, and top cities when available through the Meta APIs.
• Engagement Metrics — For Instagram, we may calculate average engagement rates from recent content metrics made available by Meta. For Facebook Pages, we may retrieve page-level engagement and insight data made available through Meta APIs.
• Access Token — An encrypted long-lived access token for refreshing connected platform data (stored with AES-256-GCM encryption).

Meta Media Import

Creators may choose to import images from their connected Instagram account or Facebook Page to use as their profile photo or portfolio images on CreatorMarket. When you use this feature:

• We temporarily access your connected Meta media library and profile picture to display a selection of available images.
• When you select an image for import, we download a copy from the connected Meta service and store it on our servers (Amazon S3).
• Imported images are processed through our image pipeline to generate optimized variants (e.g., thumbnails, profile-sized versions) for display on the Platform.
• Imported images are stored solely for use within the Platform — specifically as the Creator's profile photo or portfolio items — and are not used for any purpose outside of the Creator's profile and portfolio display on CreatorMarket.
• Imported images become part of your Creator profile and are publicly visible to other Users of the Platform.
• The original media remains unchanged on the source platform; once imported, the stored copy is not linked to or updated from the source platform.
• You can remove imported images from your profile at any time through your dashboard settings.

How We Use This Data

• To display verified platform information and audience insights on your Creator profile
• To help Brands find Creators that match their target audience
• To periodically refresh these metrics using Meta APIs in accordance with their rate limits and policies
• To enable Creators to import and display images from connected Instagram accounts and Facebook Pages on their profile and portfolio
• To let Creators connect and manage a Facebook Page or Instagram professional account within CreatorMarket

We do not use Meta Platform data for any purposes beyond those described in this policy. We do not combine or aggregate Meta data across different users to build independent user profiles.

Data Storage and Security

We only store Meta data that is necessary to provide our services. Access tokens are encrypted at rest using AES-256-GCM. Audience demographics are stored in aggregated, percentage-based form. We do not store individual follower-level data from Meta. Connected platform data is stored in our secure infrastructure hosted on Amazon Web Services.

Data Ownership and Control

You remain the owner of your Instagram and Facebook data at all times. You can manage or revoke CreatorMarket's access at any time directly with the platform you connected:

• Instagram — Visit Instagram → Apps and websites (or in the Instagram app: Settings and activity → Apps and websites → Active) and remove CreatorMarket.
• Facebook Page — Visit Facebook Settings → Business Integrations and remove CreatorMarket.

Revoking access will prevent us from refreshing your connected platform data.

No Selling or Unauthorized Transfer

We do not sell, license, or transfer Meta Platform data to any third parties. Meta data is used solely within the CreatorMarket platform for the purposes described above.

Data Deletion

You can disconnect your Instagram account or Facebook Page at any time from your dashboard settings. Disconnecting immediately and permanently deletes the stored Meta access token, the connected social-account record (including the stored username and profile link), and all synced platform metrics from our systems. Imported media from that connected account or Page is deleted unless the user has manually re-uploaded or independently saved the same image outside the Meta import flow. You can also request data deletion through Meta's platform, which triggers an automated deletion flow for Meta-related data we can identify.

To request deletion of your Meta-related data, visit: https://creatormarket.ae/data-deletion. To check the status of a deletion request, visit our Data Deletion Status page.

Meta Platform Compliance

Our use of Meta Platform data complies with the Meta Platform Terms and all applicable Meta policies, including the Meta Developer Policies and the Instagram Platform Policy.

7. Verification Documents & Advertising Permits

What We Collect

Creators may voluntarily submit documents for identity verification (e.g., Emirates ID, Driver's License) and advertising permit verification. These documents may contain personal information such as your name, photograph, date of birth, document number, and issuing authority.

How We Use These Documents

• To verify your identity and display a "Verified Identity" badge on your profile
• To verify your advertising permit and display a "Licensed Advertiser" badge on your profile
• Documents are reviewed only by authorized personnel and are never publicly displayed or shared with other Users

Storage & Security

Verification documents and advertising permits are stored in encrypted storage (Amazon S3 with server-side encryption) and are accessible only via time-limited, signed URLs generated for authorized reviewers. Documents are not indexed, cached, or made available through any public URL.

Retention & Deletion

We retain verification documents for as long as your account is active and the associated badge is displayed. If your badge is revoked or your account is deleted, documents are deleted within 30 days. You may request early deletion of your documents by contacting us at info@creatormarket.ae.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of sensitive data at rest and in transit (TLS/HTTPS)
• AES-256-GCM encryption for stored access tokens
• HMAC-signed session cookies
• Secure cloud infrastructure hosted on Amazon Web Services
• Regular security reviews and access controls

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Your Rights

You have the right to:

• Access — Request a copy of the personal information we hold about you.
• Correction — Request correction of inaccurate or incomplete information.
• Deletion — Request deletion of your account and associated data.
• Objection — Object to certain processing activities based on legitimate interest.
• Data Portability — Request export of your data in a commonly used format.
• Withdraw Consent — Withdraw consent for optional data processing (e.g., disconnect social media accounts) at any time.

To exercise any of these rights, please contact us at info@creatormarket.ae. We will respond within 30 days.

10. Cookies

We use the following types of cookies:

• Essential Cookies — Required for authentication and core Platform functionality (e.g., session cookies). These cannot be disabled.
• Functional Cookies — Used to remember your preferences and improve your experience.

We do not use third-party advertising or tracking cookies. You can control cookies through your browser settings, but disabling essential cookies may prevent you from using the Platform.

11. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., resolving disputes, enforcing our Terms).

Anonymized and aggregated data that can no longer identify you may be retained indefinitely for analytical purposes.

12. Children's Privacy

Our Platform is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a person under 18, we will take steps to delete that information promptly.

13. International Data Transfers

Your information is stored and processed using infrastructure and service providers that may operate in multiple jurisdictions. In some cases, your data may be processed outside the country where you are located. We use appropriate safeguards for such transfers where required, including contractual protections with service providers.

14. Third-Party Links

The Platform may contain links to third-party websites or services (e.g., social media platforms, external websites linked in Creator profiles). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

15. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last updated" date and, where appropriate, by email or through a notice on the Platform. Continued use of the Platform after changes take effect constitutes your acceptance of the revised Privacy Policy.