Privacy Policy

Information we collect

• Account information you provide, such as your name, email address, role (creator or brand), and, for creators, your niche and location.
• TikTok information you choose to connect. When you link your TikTok account through TikTok Login Kit, we receive your TikTok user identifier, username, display name, profile image, and follower count, only after you authorize it.
• Google account information you choose to connect. If you connect Gmail, we receive your Google account email address and basic profile information, and permission to send email on your behalf. See Google user data below.
• Marketplace activity, including deals, campaigns, video submissions, messages, and ratings created through the Service.
• Payment related information processed by our payment provider. We do not store full card numbers ourselves.
• Basic technical data such as log and device information.

How we use information

• To operate the marketplace and match creators with brands.
• To display your public profile, including a connected TikTok handle and follower count.
• To process deals, payments, and payouts.
• To communicate with you about your account and activity.
• To keep the Service secure and to comply with legal obligations.

TikTok data

Connecting TikTok is optional and initiated by you. We request only the permissions needed to verify your handle and show your follower count on your profile. We do not post content on your behalf. You can disconnect your TikTok account at any time from your profile settings, after which we stop using that data going forward. Our use of TikTok information also follows TikTok's developer terms and policies.

Google user data (Gmail connection)

If you connect your Gmail account, we access a limited set of Google user data through Google's APIs to provide the email-sending features of the Service. Specifically:

• What we access: your Google account email address and basic profile information (to confirm the connected account), and permission to send emails on your behalf via the Gmail API (gmail.send). We do not access, read, download, or store the contents of your inbox, sent mail, drafts, or any other messages.
• How we use it: solely to send the outbound emails you compose or schedule within Creator ToolBox. We do not use this data for any other purpose.
• How we store and protect it: we store your Google OAuth authorization tokens in encrypted form and use them only to send email on your behalf. We do not retain copies of Google user data beyond what is necessary to provide this feature.
• How we share it: we do not sell, rent, or transfer Google user data to third parties, and we do not use it for advertising or to train AI/ML models.
• Revoking access: you can disconnect Gmail at any time in your account settings, or revoke Creator ToolBox's access directly at myaccount.google.com/permissions. On disconnection, we delete the stored authorization tokens.
• Limited Use: Creator ToolBox's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, information received from Google APIs is not used or transferred for serving advertising; is not sold or transferred to data brokers or other information resellers; is not used to train generalized AI or ML models; and is not read by humans unless (a) you give affirmative consent for specific messages, (b) it is necessary for security or to comply with applicable law, or (c) the data is aggregated and anonymized for internal operations.

How we share information

• With other users you choose to engage with (for example, a brand you apply to sees your profile).
• With service providers that help us run the Service, such as hosting, email delivery, and payment processing, under agreements that limit their use of the data.
• When required by law, or to protect the rights and safety of users and the public.

We do not sell your personal information.

Data retention

We keep information for as long as your account is active and as needed to provide the Service, then for a reasonable period to meet legal, accounting, or dispute resolution needs.

Your choices

You can access and update your profile, disconnect your TikTok or Gmail account, and request deletion of your account by contacting us. Depending on where you live, you may have additional rights over your personal data.

Security

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

The Service is not directed to anyone under 18, and we do not knowingly collect their data.

Changes

We may update this policy from time to time. We will post the new version here and update the date above.

Contact

Questions about this policy? Email us at hello@creatortoolbox.io.