Privacy Policy

This Privacy Policy applies to the CreatorMarket website (www.creatormarket.ae) and mobile application (collectively, the "Platform"), operated by:

This Privacy Policy is also available within the Platform.

1. Scope

This Privacy Policy explains how information is collected, used, shared, stored, and deleted when you use CreatorMarket, including when you create an account, publish a Creator or Brand profile, create a campaign, contact or book another user, use chat, submit verification information, make a purchase, or connect a social media account.

2. Information we collect

2.1 Account information

We collect information needed to create, authenticate, secure, and manage your account.

Authentication information may include:

• email address;
• account role, such as Creator or Brand;
• account identifiers, authentication records, and login timestamps;
• Sign in with Apple information, such as an account identifier and, depending on your Apple settings, your name and email address, which may be an Apple private relay address; and
• Sign in with Google information, such as an account identifier and, depending on your Google settings and the permissions you grant, your name, email address, and basic profile information.

We do not receive your Apple, Google, or social media password.

2.2 Creator profile information and media

Creators must provide certain information to complete and publicly display a Creator profile and receive booking requests through the Platform. This includes:

• email address;
• username;
• display name;
• location;
• profile picture;
• portfolio pictures;
• biography;
• the name or username of at least one social media account; and
• at least one offer package, including the offered service and price.

The Platform does not require access to the device camera. Pictures are uploaded or imported only through actions initiated by the user.

2.3 Brand profile and campaign information

Brands must provide certain information to use the core Brand functions of finding, contacting, and booking Creators, and creating campaigns. This includes:

• company or brand name;
• biography or company description;
• website link;
• profile picture and other brand images; and
• contact or business information.

Brands may also create campaigns containing their own titles, descriptions, requirements, compensation or budget information, dates, links, and images.

2.4 Marketplace, booking, and purchase information

We may collect and process information relating to:

• Creator offer packages;
• Brand campaigns and Creator applications;
• booking requests, orders, delivery or completion status, and related communications;
• prices, payment status, transaction identifiers, product identifiers, and purchase timestamps;
• subscriptions, boosts, badges, or other paid Platform features; and
• refund, cancellation, dispute, and entitlement status where applicable.

Payments made through Apple App Store or Google Play are processed by the relevant store. CreatorMarket may receive purchase receipts, transaction identifiers, product information, and payment status needed to validate and provide the purchased feature. We do not receive full payment-card details from Apple or Google.

2.5 Connected social media accounts

CreatorMarket may offer optional functions labeled, for example, "Connect to Instagram", "Connect to Facebook", "Connect to TikTok", or "Connect to YouTube".

These functions use the relevant provider's OAuth or account-authorization process. When you choose to connect an account, the provider displays the requested permissions and asks you to approve them. You sign in directly with the provider. The CreatorMarket app receives an OAuth access token and, where provided, a refresh token. These tokens are stored securely only on your device and are used only while the app is in use to connect directly to the provider. CreatorMarket does not receive your social media password.

Depending on the provider, account type, approved permissions, and technical availability, we may receive:

• account identifiers, username, display name, profile picture, biography, profile link, account type, and connection status;
• follower, following, subscriber, view, like, engagement, and content-count information;
• public photos, videos, thumbnails, captions, titles, descriptions, links, and publication dates;
• content-performance information such as views, reach, impressions, watch time, likes, comments, shares, or engagement rates; and
• aggregated audience information, where available, such as age groups, gender distribution, top countries, or top cities.

The exact information available differs by platform:

• Instagram and Facebook may provide professional-account or Page information, media, performance information, and aggregated audience insights where available.
• TikTok may provide profile information; account statistics such as follower, following, like, and video counts; and metadata, performance metrics, links, and cover images for public videos. The standard CreatorMarket TikTok connection is not used to access private messages, contacts, private videos, information identifying individual followers, or permission to post or modify content on TikTok.
• When a Creator connects YouTube, CreatorMarket may retrieve Channel information, subscriber and view statistics, video information, thumbnails, and authorized YouTube Analytics. The retrieved information is initially made available only to the connecting Creator within their CreatorMarket account. Demographic or geographic information may be unavailable where YouTube applies privacy thresholds.

Connecting or synchronizing a social media account does not by itself publish imported information on CreatorMarket. A Creator may separately select supported social media information, photos, profile images, thumbnails, or other media and save them to their CreatorMarket profile or portfolio. Selected information becomes visible to Brands, registered users, or visitors who are not signed in only when the Creator includes it in their CreatorMarket profile and sets that profile to public, and only to the extent permitted by the connected provider's terms and policies.

OAuth access tokens, refresh tokens, and token-expiry information are stored only on your device and are never stored on CreatorMarket servers. CreatorMarket may store non-secret connection status, permission status, and synchronization timestamps on its servers.

Connecting through OAuth is optional. A Creator may provide the name or username of a social media account without granting CreatorMarket OAuth access, although automatic import, synchronization, verification, statistics, or audience-insight functions may then be unavailable.

CreatorMarket uses YouTube API Services when a YouTube account is connected. Information received from Google APIs is handled in accordance with the Google API Services User Data Policy, including the Limited Use requirements.

Google Privacy Policy:
https://policies.google.com/privacy

Google third-party access settings:
https://security.google.com/settings/security/permissions

2.6 Verification and compliance information

Creators may submit information or documents for identity, professional, or regulatory verification, such as an identity document or media permit.

Depending on the document and verification requested, this may include:

• name, date of birth, nationality, photograph, document number, issuing authority, and expiry date;
• uploaded document files or images;
• verification status, review dates, and rejection or approval reasons; and
• communications relating to the verification request.

Verification information is used only to review eligibility, provide the relevant verification status or badge, prevent fraud, support Platform safety, and comply with applicable requirements.

2.7 User-generated content and interactions

User-generated content on CreatorMarket is limited to the features offered by the Platform.

Creators may publish:

• Creator-profile biography text;
• profile and portfolio pictures;
• social media links;
• offer-package descriptions and prices; and
• other supported Creator-profile information.

Brands may publish:

• Brand-profile or presentation text;
• a website link;
• profile pictures and other Brand images; and
• campaign text, requirements, links, images, compensation information, and other campaign details.

Users may also send private user-to-user chat messages and attachments where supported.

CreatorMarket does not provide public comments, likes, reactions, public forums, or a general social posting feed.

User-generated content and chat messages may contain personal information depending on what users choose to write, upload, or share.

2.8 Reports, blocking, and support information

We may collect:

• reports submitted about users, messages, profiles, campaigns, or transactions;
• blocking relationships;
• information provided in customer-support requests; and
• internal records created when investigating safety, fraud, abuse, or support matters.

2.9 Technical, notification, and diagnostics data

We may collect limited technical information needed to operate, secure, and improve the Platform, including:

• app version, device type, operating system, and language;
• IP address, request timestamps, and security events;
• error logs, performance information, and crash diagnostics;
• push-notification tokens and notification-delivery information, if notifications are enabled; and
• random technical identifiers used for session security, fraud prevention, deduplication, or reliable service operation.

We do not use technical identifiers for device fingerprinting, targeted advertising, or tracking users across unrelated apps or websites.

2.10 Local storage on your device

The Platform may store limited information locally on your device using app storage or cache mechanisms to support authentication, settings, performance, and user experience.

Local storage may include authentication state, app settings, recently loaded content, and temporary operational data. This information can generally be removed by signing out, clearing the app's storage or cache through device settings, or uninstalling the app.

3. Purpose of processing

Information is processed only to:

• authenticate users and manage Creator and Brand accounts;
• enable Creators to complete and publish profiles and receive booking requests;
• enable Brands to find, contact, and book Creators;
• operate offer packages, campaigns, applications, bookings, purchases, and chat;
• retrieve, synchronize, store, and display connected social media profile information, supported media, statistics, and aggregated audience insights to the authorizing Creator within their CreatorMarket account;
• add Creator-selected social media information or media to the CreatorMarket profile and display it according to the profile publication and visibility settings chosen by the Creator, subject to the connected provider's applicable terms and policies;
• verify identity, professional status, or regulatory documents where requested;
• validate purchases and provide paid Platform features;
• send account, booking, campaign, verification, safety, and service notifications;
• provide customer support and handle account or data requests;
• investigate reports, prevent fraud and abuse, and enforce Platform safety;
• maintain the security, stability, and functionality of the Platform; and
• comply with applicable legal obligations.

Connected social media information is not used to publish, edit, or delete content on the connected social account unless a separate feature clearly explains the action and the user expressly authorizes it.

We do not use connected social media information for targeted advertising, retargeting, credit decisions, or unrelated user profiling.

4. Legal basis for processing

We process personal data only where there is an appropriate legal basis.

4.1 Service performance requested by the user

Processing account, profile, package, campaign, booking, messaging, purchase, and transaction information is necessary to provide the CreatorMarket services requested by the user.

For Creators, the required profile information described in Section 2.2 is necessary to publish a complete Creator profile and receive booking requests.

For Brands, the email address and other information are necessary to create an account, contact Creators, and make bookings.

4.2 Consent and optional features

Where required by applicable law, processing is based on consent or a voluntary action initiated by the user, including when a user:

• connects a social media account;
• approves social media permissions;
• selects social media information or media to import;
• uploads optional profile, Brand, campaign, or verification content;
• enables push notifications; or
• uses another optional feature.

Consent for optional processing may be withdrawn by disconnecting the relevant account, changing provider or device permissions, removing imported content, disabling the feature, or contacting us.

4.3 Legitimate interests

We may process limited technical, security, moderation, support, and usage information based on our legitimate interests in:

• operating a safe and reliable marketplace;
• preventing fraud, abuse, duplicate transactions, and unauthorized access;
• investigating reports and disputes;
• maintaining service stability; and
• protecting CreatorMarket and its users.

4.4 Legal obligations

Information may be processed or retained where required to comply with applicable law, accounting or tax requirements, court orders, regulatory requests, or other lawful requests from authorities.

5. Profile, media, and campaign visibility

5.1 Creator profiles

A published Creator profile may be visible to Brands, other Platform users, or the public.

Depending on the information provided and the Platform's current display features, a published profile may include the Creator's:

• username and display name;
• location and biography;
• profile and portfolio pictures;
• social media usernames and links;
• offer packages and prices;
• social media information and performance metrics that the Creator has selected or enabled for publication under Section 5.3, where such publication is permitted; and
• verification status.

5.2 Brand profiles and campaigns

Where a Brand chooses to publish a Brand page or campaign, the submitted company description, website link, images, campaign text, requirements, compensation information, contact person details, and other supported details may be visible to Creators, other Platform users, or the public.

5.3 Connected and imported social media information

Connecting a social media account does not by itself make information from that account visible to Brands, other users, or the public.

Connected social media information is initially retrieved, stored, and displayed for use by the authorizing Creator within their CreatorMarket account. CreatorMarket does not give Brands or other users access to the connected social media account, its authorization token, or its private account interface.

A Creator may separately select supported information or media and add it to their CreatorMarket profile or portfolio.

When a Creator sets their CreatorMarket profile to public, all information and media included in that public profile may be viewed by anyone, including Brands, registered users, and visitors who are not signed in. This may include supported social media information, statistics, performance metrics, and media that the Creator has selected or enabled for inclusion in their public CreatorMarket profile, subject to the applicable third-party provider terms and policies.

Information that has not been added to the public CreatorMarket profile remains private and is not made visible through the profile.

Information originally received through YouTube API Services continues to be handled in accordance with the YouTube API Services Terms of Service, Developer Policies, and applicable Google policies while CreatorMarket stores or uses it.

Imported media may be stored as a copy or reference so it can be displayed on the CreatorMarket profile. Disconnecting the social media account does not automatically delete content that the Creator separately selected and published on CreatorMarket; that content can be removed from the CreatorMarket profile or included in a deletion request.

5.4 Private information

Chat messages, verification documents, OAuth tokens, purchase-validation records, security records, reports, and support communications are not publicly displayed.

5.5 Restrictions on use

We do not sell personal data.

We do not share personal data with advertising networks, data brokers, or third parties for their own marketing purposes.

We do not use profile pictures, portfolio pictures, verification documents, chat messages, or connected social media data for targeted advertising.

6. Profiles, campaigns, marketplace, and chat

Creator and Brand profile content and Brand campaigns may be visible to other users or to the public as described in Section 5.

Chat messages are not publicly visible and are intended to be seen by the conversation participants.

Authorized CreatorMarket personnel may access or review chat messages and related records where reasonably necessary to:

• operate or support the messaging service;
• investigate technical problems;
• prevent fraud, abuse, harassment, threats, or unlawful activity;
• investigate user reports or transaction disputes;
• enforce Platform safety rules; or
• comply with legal obligations.

Access is limited to authorized personnel and service providers on a need-to-know basis.

Important note about public content

Content published on a Creator profile, Brand page, or public campaign may be viewed, copied, screenshotted, linked to, or shared outside the Platform by other people. We cannot control how another person uses information after receiving lawful access to it.

7. User-initiated sharing outside the Platform

The Platform may allow users to share Creator profiles, offer packages, Brand campaigns, or other content using the sharing functions of the device's operating system.

Content shared through these functions is shared at the user's discretion and outside our control. We do not determine the recipients and generally do not receive information about where or with whom the content is shared.

8. Data sharing

Information may be shared only where necessary with:

• infrastructure, cloud-hosting, database, storage, and content-delivery providers;
• technical, security, fraud-prevention, error-monitoring, and crash-diagnostics providers;
• authentication providers, including Apple and Google, when their sign-in services are used;
• Meta, Instagram, Facebook, TikTok, Google, and YouTube when a user connects the relevant account;
• Apple App Store, Google Play, and other payment providers for purchase processing and validation;
• email, push-notification, and communications providers;
• professional advisers where reasonably necessary; and
• authorities where required by applicable law.

Depending on a provider's infrastructure, data may be stored or processed outside the United Arab Emirates with appropriate contractual, technical, or legal safeguards.

Service providers are permitted to process personal data only to provide services to us and in accordance with our instructions and contractual obligations. We require service providers receiving personal data to provide the same or an equivalent level of protection as described in this Privacy Policy and required by applicable guidelines and law.

Personal data is not sold.

9. Tracking and advertising

CreatorMarket does not track users across third-party apps or websites for targeted advertising.

Connected social media information is used only for the CreatorMarket features described in this Privacy Policy and is not used to create advertising profiles or deliver targeted third-party advertising.

Social media, authentication, app-store, or other third-party providers may independently process information relating to the use of their services under their own privacy policies.

10. Retention and deletion

We retain user-associated data only for as long as necessary to provide the Platform, maintain security, prevent fraud, resolve disputes, and comply with legal obligations.

10.1 How long we keep data – practical rule

10.2 Social account disconnection

Users may disconnect a connected social media account through CreatorMarket where that option is available or revoke access through the relevant provider's settings.

After disconnection or revocation:

• CreatorMarket stops requesting new information from the connected account;
• locally stored access and refresh tokens are removed from your device, and CreatorMarket attempts to revoke the provider authorization where supported;
• connected-only import, synchronization, statistics, or verification functions may stop working; and
• previously imported information may remain on the CreatorMarket profile until the user removes it or requests its deletion.

Disconnecting CreatorMarket does not delete or change the original Instagram, Facebook, TikTok, Google, or YouTube account or the original content held by that provider.

10.3 Account deletion

You may permanently delete your CreatorMarket account and the personal data associated with it directly within the CreatorMarket application by going to Dashboard → Settings → Delete Account.

You may also request deletion of your complete CreatorMarket account and associated personal data by:

• visiting https://www.creatormarket.ae/delete-account; or
• emailing info@creatormarket.ae with the subject "CreatorMarket Account Deletion Request".

These external deletion options remain available if you no longer have the CreatorMarket application installed or cannot access your account. We may ask you to verify account ownership before processing the request.

When an account is deleted, we delete or de-identify user-associated information, including:

• account and profile information;
• profile and portfolio content;
• Brand pages, campaigns, and applications;
• imported social media information and locally stored authorization tokens;
• verification documents;
• chat messages, reports, and block relationships; and
• other account-associated usage information.

Certain transaction, accounting, tax, fraud-prevention, safety, dispute, or legal records may be retained where required or permitted by law.

Limited technical backups may persist for a short period where technically necessary, after which they are overwritten or deleted through the normal backup cycle.

10.4 Children's data

CreatorMarket is a general-audience service and is not directed to children.

We do not knowingly collect personal information from children. If we become aware that a child has provided personal information, we will take appropriate steps to delete it.

11. User rights

Subject to applicable law, users may:

• request access to personal data associated with their account;
• request correction of inaccurate account or profile information;
• update or remove published profile, portfolio, Brand, or campaign content;
• disconnect a social media account;
• revoke social media permissions through the relevant provider;
• remove imported social media content;
• withdraw consent for optional processing;
• delete their account and associated personal information; and
• contact us with a privacy question, objection, or complaint.

Account deletion can be initiated within the Platform. Users may also contact info@creatormarket.ae for assistance.

12. Security

We apply reasonable technical and organizational measures designed to protect information against unauthorized access, loss, alteration, or misuse.

These measures may include:

• secure transmission of data;
• restricted access controls;
• secure on-device storage and handling of OAuth tokens;
• separation of public profile information from private account and verification information;
• monitoring and protections against unauthorized access and abuse; and
• limiting access to authorized personnel and service providers on a need-to-know basis.

No method of electronic transmission or storage can be guaranteed to be completely secure.

13. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to the Platform, connected services, legal requirements, or our data practices.

The current version will be made available through the Platform or our website, with the date of the latest update shown above.