Privacy Policy

1.What we collect

Account and sign-in

• Your email address, or your Indian mobile number if you sign in with it, and your name.
• If you use Google to sign in (where offered), the name and email address Google shares with us.
• Whether you're a brand or a creator, and when you signed up and last signed in.

Profiles and listings

• Creators: handle, display name, city, bio, niches, languages, profile photo, social accounts (platform, handle, link, followers, prices), rates, service packages and their photos, and your link-in-bio links.
• Brands: company name, website, GSTIN if you add it, logo, and the requests you post with their budgets.

Verification (creators)

• A verified mobile number, confirmed by a code you send us on WhatsApp or one we send you by WhatsApp or SMS.
• Proof that a social account is yours: a code in your bio or channel description, a message to our account, a havecreator.com link in your bio, or a short selfie video. For YouTube we read your channel's public description and subscriber count from Google's YouTube API.

Deals, payments and payouts

• Offers and their terms, and the results creators submit: post link, view count and an insights screenshot.
• Payment records: amount, status, the payment partner used and its references, and the details it sends back about the payment (which can include your email, phone number or UPI ID). Card numbers, CVV, UPI PIN and net-banking passwords are entered with our payment partners and never reach us.
• For creators, the UPI ID or bank account (holder name, account number, IFSC) you give us for payouts.

Messages and reviews

• Chat messages, photos, videos, voice notes, reactions and read receipts; earlier versions of messages you edit or unsend; reports and blocks; your chat with HaveCreator Support.
• For creators, emails sent to and from your @havecreator.com address.
• Reviews you write or receive, including the private note to HaveCreator if you add one.

Notifications, statistics and security

• Your notification settings and, if you turn on notifications, a technical address for your device and the browser type.
• Profile visits, counted without storing your IP address: each visit is stored as a one-way code that changes every day. Clicks on link-in-bio links are counted with the visitor's country, device type and where they came from.
• IP addresses and browser details in our hosting provider's request logs, and for a short time when you verify a phone number.

We don't ask for your date of birth, gender, PAN or Aadhaar. When you upload a profile photo, logo or service photo, your browser re-saves it first, which removes location and other hidden details (GIFs are uploaded as they are). Files you send in chats are uploaded as they are.

2.Why we use it

• To run your account and show your public profile, services and requests.
• To let brands and creators message each other, agree deals, hold payments, pay creators and refund brands.
• To verify creators and show the verified star.
• To send the notifications and emails you've allowed, and the sign-in codes you ask for.
• To show creators how many people visit their profile and click their links.
• To keep the platform safe: prevent fraud and spam, handle reports and disputes, and enforce our Terms.
• To meet legal duties, such as tax and accounting records and lawful requests from authorities.

We use your data with your consent, which you give when you sign up and use these features, and for the other legitimate uses the Digital Personal Data Protection Act, 2023 allows, such as meeting a legal duty. We don't sell your data or use it for advertising.

3.Who can see it

• Everyone: a creator's published profile, photos, social accounts, prices, services, link-in-bio links and published reviews. Brands' requests are shown to creators in matching niches. A brand's company name and logo are shown to the creators it deals with.
• The other person in a conversation: your messages, what you share in that chat, and the deal's results. Your mobile number is never shown to other users.
• Our team, only as their job needs:
  • Support staff can see account, listing, deal and report details, but not bank or UPI details.
  • Reading the messages in your conversations requires a written reason (a report, a dispute, a support request, fraud, or the law), and every such access is recorded.
  • Your chat with HaveCreator Support is seen by our support team.
  • Admins can see payment and payout details, settle disputes, and watch verification videos.
• Service providers that process data for us:
  • Supabase: database, sign-in and file storage
  • Cloudflare: website hosting, request logs, @havecreator.com email routing and its attachments
  • Resend: sending emails, including sign-in codes
  • Razorpay and PayU: payments (we send them your name and email for the payment)
  • Meta (WhatsApp) and our SMS providers Fast2SMS and 2Factor: mobile number verification
  • Google: YouTube channel checks, and Google sign-in if you use it
  • Apple, Google and Mozilla push services, which deliver notifications to your device
• Authorities, when the law requires us to share.

4.Where your data is stored

Some of our providers store or process data outside India. Our database and files are hosted by Supabase in Tokyo, Japan, and Cloudflare serves the website from locations around the world. We use providers that protect data with industry-standard security, and transfer data only as the Digital Personal Data Protection Act, 2023 allows.

5.How long we keep it

• Account, profile and listing data: while your account is open.
• Messages you edit or unsend disappear from the chat straight away. We keep the earlier version for 30 days, for safety and reports, and then delete it automatically.
• Chat files are deleted from storage once no message uses them any more.
• Profile visit records: 90 days. Link-click statistics: 180 days.
• Phone verification attempts: deleted after a day.
• Verification videos: while your account is open, or until you ask us to delete them.
• Payment, payout and tax records: as long as tax and accounting laws require, even after an account is closed.
• When you close your account we delete your profile. Your messages and reviews stay visible to the people you dealt with, shown as from a "Deleted account"; once both people in a conversation have closed their accounts, it is deleted.

6.Your rights

Under the Digital Personal Data Protection Act, 2023 you can:

• ask for a summary of the personal data we hold about you and who we've shared it with;
• ask us to correct, complete or update it (most profile details you can edit yourself in your dashboard);
• ask us to delete it, or withdraw your consent, which closes your account;
• nominate someone to use these rights for you if you die or can't act yourself; and
• complain to our Grievance Officer, and then to the Data Protection Board of India.

To use a right, message HaveCreator Support from your inbox, or email havecreator@gmail.com from the email address on your account. We may ask you to confirm it's you. We acknowledge requests within 24 hours and reply within 15 days. Withdrawing consent or deleting data may stop parts of the service from working for you, and we keep what the law requires us to keep.

7.Cookies and browser storage

We don't use advertising or third-party analytics cookies. We use:

• sign-in cookies that keep you signed in;
• an anonymous visitor cookie (one year) so a person visiting a profile or clicking a link is counted once a day;
• a 10-minute cookie while you sign in with your mobile number, and one that remembers a sign-in check for up to 30 days;
• a note in your browser when you dismiss the "turn on notifications" prompt.

On the payment screen, our payment partners may set their own cookies under their own privacy policies.

8.Security

Data is encrypted in transit. Access rules in our database let each person read only their own private data, private files are kept in private storage, verification codes are stored only in scrambled form, and our team's access is restricted and logged. If a breach affects your personal data, we will tell you and the Data Protection Board of India as the law requires.

9.Children

HaveCreator is only for people aged 18 and over. We don't knowingly collect data from children; if we find we have, we delete it.

10.Grievance Officer and contact

Questions, requests or complaints about your data go to our Grievance Officer, at havecreator@gmail.com. If you're not satisfied with our answer, you can complain to the Data Protection Board of India. See also Contact us.

11.Changes to this policy

We may update this policy. If a change matters, we'll tell you by email or in the app before it takes effect, and the date at the top will change.