Privacy Policy.

This Privacy Policy explains how Concept Crafters, a Partnership firm registered in India ("Concept Crafters", "we", "us", "our"), which owns and operates the CreatorsBay platform — our website, Android app and iOS app (together, the "Platform") — collects, uses, shares and protects your information. By creating an account or using the Platform you agree to this Policy.

CreatorsBay is a marketplace that connects brands ("Brands") with content creators and influencers ("Creators"). This Policy applies to both Brands and Creators and to visitors of our website.

1. Who We Are & Contact

The Platform is operated by Concept Crafters, a Partnership firm registered in India (GSTIN: 27AATFC6034D1ZF), with its registered office at Flat No. 702, A Wing, Siddhivinayak Annex, Amrutdham, Amrut Dham, Nashik, District Nashik, Maharashtra – 422003. For any privacy question or to exercise your rights, contact our Grievance Officer at legal@creatorsbay.in or +91 92702 34868 (see the Grievance Officer section below).

2. Information We Collect

We collect the following categories of information:

2.1 Information you provide

• Account details: name, username, email address, mobile number, password (stored only in encrypted/hashed form), and whether you are a Creator or a Brand.
• Profile details: profile photo, bio, city/state, categories, languages, and for Creators your social-media handles and links (e.g. Instagram, YouTube), follower counts, portfolio/gallery images and pricing.
• Brand details: brand/company name, website and campaign information.
• KYC & verification: government-issued identity documents, address proof and related details that you submit for identity verification and to enable payouts, where applicable.
• Payout details (Creators): UPI ID and/or bank account details used to receive withdrawals.
• Communications: support tickets, messages, reviews, and information you send us via the contact form or email.

2.2 Payment information

Payments and payouts are processed by our payment partner Razorpay Software Private Limited ("Razorpay"). When you add funds or make a payment, your card/UPI/net-banking details are collected and processed directly by Razorpay on their PCI-DSS compliant systems. We do not collect or store your full card numbers, CVV or banking credentials. We receive and store only transaction metadata such as payment IDs, order IDs, amounts, status and the masked instrument type. Please review the Razorpay Privacy Policy.

2.3 Information collected automatically

• Device & technical data: IP address, device model, operating system and version, app version, language, and approximate location derived from your IP.
• Usage & log data: pages/screens viewed, actions taken, timestamps and diagnostic/crash logs.
• Push notification token: a device token issued by Google Firebase Cloud Messaging (Android) or Apple Push Notification service (iOS) so we can send you notifications. You can disable notifications in your device settings.
• Cookies & consent (website): our website uses cookies and shows a cookie-consent banner so you can accept or decline non-essential cookies (essential cookies are required for the site to work). See our Cookie Policy for the categories we use and how to manage or withdraw your consent. The mobile apps do not use advertising cookies.

2.4 Device permissions (mobile apps)

With your consent the app may request access to your camera and photo library (to upload a profile picture or campaign content) and notifications. You can grant or revoke these at any time in your device settings; revoking a permission may limit related features.

2.5 Data from Meta Platforms (Facebook & Instagram)

Creators can connect their Instagram and/or Facebook accounts to CreatorsBay using Facebook Login and Instagram Login. When you connect, we access data through the Instagram Graph API and Facebook Graph API, and only for the permissions ("scopes") you approve — such as instagram_basic, instagram_manage_insights, pages_show_list and pages_read_engagement. With your authorisation we collect:

• Profile information — your Instagram/Facebook account ID, username/handle, name, profile picture, account type (e.g. creator or business) and any linked Facebook Page.
• Audience & account insights — follower/fan counts, reach, impressions, profile views, engagement metrics, and aggregated, anonymised audience demographics (e.g. top locations, age ranges and gender split).
• Content metadata — metrics for your recent posts/media (e.g. likes, comments, views) used to calculate engagement rates.

We use this Meta-sourced data solely to verify that you own the connected account, display accurate audience statistics on your Creator profile, help Brands evaluate collaborations, and power our pricing and insights features. We do not use Meta data for advertising or cross-app tracking, and we handle it in accordance with the Meta Platform Terms and applicable Developer Policies. You can revoke our access and delete this data at any time — see "Disconnecting Meta & deleting Meta-sourced data" in Section 7.

3. How We Use Your Information

• To create and manage your account and provide the Platform's features.
• To match Creators with Brands and to operate campaigns, deals and the in-app wallet.
• To process payments, payouts, fees and refunds through Razorpay.
• To verify identity (KYC), prevent fraud and ensure platform safety.
• To send service messages and, where enabled, push notifications about campaigns, deals and account activity.
• To provide customer support and respond to your requests.
• To comply with legal, tax and regulatory obligations.
• To analyse and improve the Platform's performance and security.

4. Legal Bases for Processing

We process your information where it is necessary to perform our contract with you (providing the Platform), to comply with a legal obligation, with your consent (e.g. notifications, optional permissions), and for our legitimate interests in operating, securing and improving the Platform. You may withdraw consent at any time, which will not affect prior processing.

5. How We Share Information

We do not sell your personal data. We share information only as described here:

• With other users: a Creator's public profile (name/username, photo, bio, categories, social links and follower counts, ratings) is visible to Brands and visitors. Brands and Creators who enter a deal share the information necessary to complete it.
• Razorpay — to process payments and payouts (privacy policy).
• Google Firebase / Apple — to deliver push notifications and for diagnostics/crash reporting.
• Hosting & infrastructure providers — who store and serve data on our behalf under confidentiality obligations.
• Legal & safety — to comply with law, court orders or lawful requests, and to protect the rights, safety and property of CreatorsBay, our users or the public.
• Business transfers — in connection with a merger, acquisition or sale of assets, subject to this Policy.

6. Data Retention

We keep your personal data for as long as your account is active and as needed to provide the Platform. When you delete your account, we delete or anonymise your personal data, except information we are required to retain to comply with legal, tax, accounting or regulatory obligations (for example, transaction and invoice records, which may be retained for up to 8 years under Indian tax law) or to resolve disputes and prevent fraud. Retained records are limited to what is necessary and are deleted at the end of the retention period.

7. Account & Data Deletion

You can delete your account and associated personal data at any time:

• In the app — Creators: Profile → Account & Security → Delete account; Brands: Settings → Delete Account. You confirm with your password and deletion is permanent.
• By email — if you cannot access the app, write to legal@creatorsbay.in from your registered email with the subject "Account Deletion Request".

Disconnecting Meta & deleting Meta-sourced data. If you connected Instagram or Facebook, you can revoke our access and delete the data we obtained from Meta at any time, independently of deleting your whole account: (a) remove CreatorsBay from Facebook → Settings & privacy → Settings → Apps and Websites, or Instagram → Settings → Apps and websites → Active, which immediately revokes our access; and/or (b) email legal@creatorsbay.in with the subject "Meta Data Deletion". Upon disconnection or on your request, we delete the profile, insights and content-metric data we obtained from Meta for your account, except any records we are required to retain by law.

For full details of what is deleted and what is retained, see our Account & Data Deletion page. Please withdraw any remaining wallet balance and settle dues before deleting, as deletion is irreversible.

8. Your Rights

Subject to applicable law (including India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000), you may request to access, correct, update or delete your personal data, withdraw consent, or object to certain processing. Most details can be edited in-app; for other requests contact our Grievance Officer. We will verify your identity before acting on a request.

9. Data Security

We use reasonable technical and organisational measures to protect your data, including encryption of passwords, HTTPS/TLS in transit, access controls and tokenised payments via Razorpay. No method of transmission or storage is completely secure; we cannot guarantee absolute security but work to protect your information and will notify you and the authorities of a breach where required by law.

10. Children

The Platform is intended only for users aged 18 years or older. We do not knowingly collect data from anyone under 18. If we learn that we have collected such data, we will delete it. If you believe a minor has provided us data, contact us.

11. International Transfers

Your information is primarily processed and stored on servers located in India. Some of our service providers operate outside India and may process or store limited data abroad — for example Hostinger International Ltd. (hosting and infrastructure, based in Lithuania, European Union) and Meta, Google (Firebase) and Apple (social login, insights, push notifications and diagnostics, based in the United States). Where data is transferred or processed outside India, we take steps to ensure it is protected by adequate safeguards — such as contractual confidentiality and data-protection commitments with our processors — consistent with this Policy, India's Digital Personal Data Protection Act, 2023, and applicable law.

12. App-Store Data Practices

The data we collect and share is reflected in our Google Play Data Safety disclosure and Apple App Store privacy ("nutrition") labels. We use your data only as described in this Policy and do not use it for cross-app tracking or to serve third-party advertising.

13. Changes to This Policy

We may update this Policy from time to time. We will revise the "Effective" date above and, for material changes, provide additional notice in-app or by email. Continued use after an update means you accept the revised Policy.

14. Grievance Officer

In accordance with the Information Technology Act, 2000, the rules thereunder, and the Digital Personal Data Protection Act, 2023, the Grievance Officer is:

• Name: Digvijay Wagh
• Entity: Concept Crafters, a Partnership firm registered in India (operator of CreatorsBay)
• GSTIN: 27AATFC6034D1ZF
• Email: legal@creatorsbay.in
• Phone: +91 92702 34868
• Address: Flat No. 702, A Wing, Siddhivinayak Annex, Amrutdham, Amrut Dham, Nashik, District Nashik, Maharashtra – 422003

We will acknowledge grievances within 24 hours and aim to resolve them within 15 days.

End of Document