Privacy Policy

1. Who We Are

Creator Offload Pte. Ltd. is the data controller for personal data collected during account registration, billing, platform usage, and communications. Where we process personal data on behalf of a customer (e.g., creator profile data stored in a customer's workspace), the customer is the data controller and we act as a data processor under the terms of our DPA.

For privacy inquiries, contact us at: privacy@creatoroffload.com

2. What Data We Collect

2.1 Account and Profile Data

When you create an account, we collect your name, email address, and (if applicable) your organization name and role. If you sign in via Google OAuth, we receive your name and email address from Google as part of the authentication flow.

2.2 Billing and Payment Data

When you subscribe to a paid plan, billing is handled by Stripe, Inc. We collect the information necessary to initiate a payment (name, email, billing address, subscription tier selected). Your full card number, CVC, and expiration date are transmitted directly to and stored by Stripe — we never receive or store that information.

2.3 Platform Usage Data

As you use Creator Offload, we collect data about how you interact with the product. This includes pages visited, features used, button clicks, workflow actions taken, timestamps, and session duration. This data is collected to understand how the product is used and to improve it.

2.4 Technical and Device Data

We automatically collect certain technical data when you access the platform: IP address, browser type and version, operating system, referring URL, and device type.

2.5 Communications Data

If you contact us via email or a support channel, we retain the content of your communications and your contact details to respond and maintain a history of our interactions.

2.6 Creator and Content Data (Customer-Uploaded)

Customers may upload or process content that contains personal data about third-party creators. Creator Offload processes this data on behalf of the customer as a data processor. Customers are responsible for the lawfulness of that processing.

3. How We Use Your Data

We use the data we collect for the following purposes:

• Providing and operating the Service (performance of a contract)
• Billing and payment processing (performance of a contract)
• Sending transactional emails such as account confirmations, invoices, and security alerts
• Improving the product through usage analytics (legitimate interests)
• Security monitoring and fraud prevention (legitimate interests)
• Responding to support requests (legitimate interests)
• Complying with legal obligations
• Sending product updates or feature announcements with opt-out

We do not sell your personal data to third parties. We do not use your personal data for behavioral advertising.

4. Subprocessors and Third-Party Sharing

We use a limited set of third-party service providers ("subprocessors") to operate the platform. Each subprocessor receives only the data necessary for their specific function. Our current Day-0 subprocessors are:

Stripe, Inc.

Purpose: Billing and payment processing
Data shared: Name, email address, billing address, subscription details
Location: United States

Stripe processes payment card data directly and is certified as a PCI-DSS Level 1 Service Provider. Creator Offload does not receive or store raw card data.

Resend, Inc.

Purpose: Transactional email delivery
Data shared: Recipient email address, email content (may contain name and account-related information)
Location: United States

Google LLC

Purpose: OAuth-based authentication ("Sign in with Google")
Data shared: When you use Google Sign-In, Google shares your name and email address with us to create or link your account. We do not share data back to Google for advertising purposes.
Location: United States

Analytics Provider (Anonymous Usage Analytics)

Purpose: Anonymous product analytics
Data shared: Anonymized or pseudonymized event data (page views, feature interactions, session metadata). No personally identifiable information is shared in identifiable form.
Location: United States

We may add additional subprocessors over time. We will update this policy and, where required, notify customers in advance. We may also disclose personal data to legal authorities if required by law.

5. Cookies and Tracking

We use a minimal set of cookies and browser storage mechanisms to operate the platform:

• Session/authentication cookies: Required to keep you logged in. These are necessary for the Service to function and cannot be opted out of while using the platform.
• Preference cookies: Store your in-app preferences (e.g., theme, display settings). These are functional and do not track you across sites.
• Analytics: We collect anonymous usage event data as described in Section 4. If you wish to opt out, you can do so in your account settings under Privacy Preferences.

We do not use advertising cookies, cross-site tracking pixels, or behavioral retargeting.

6. Data Retention

We retain your personal data for as long as your account is active. When you close your account:

• We retain your data for 30 days to allow you to recover your account or export your data.
• After 30 days, we delete account data from active systems.
• Billing records and invoices may be retained for up to 7 years as required by applicable accounting and tax laws.
• Anonymized, aggregated analytics data may be retained indefinitely.

7. Data Security

We implement technical and organizational security measures to protect your personal data. See our Security page for details on our current practices. While we take reasonable steps to protect your data, no system is completely secure and we cannot guarantee absolute security.

8. International Data Transfers

Creator Offload is operated from the United States. If you are accessing the Service from outside the United States (including from the EEA, United Kingdom, or Switzerland), your personal data will be transferred to and processed in the United States. Where required by applicable law (including GDPR), we rely on Standard Contractual Clauses (SCCs) or other appropriate transfer mechanisms. Our DPA contains the applicable transfer mechanisms for customers subject to GDPR.

9. Your Privacy Rights

All Users

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to our retention obligations.
• Data portability: Request an export of your data in a machine-readable format.
• Opt-out of analytics: Disable anonymous usage analytics via account settings.
• Opt-out of marketing emails: Unsubscribe at any time via the link in any marketing email.

EU/EEA Residents (GDPR)

• Right to restrict processing
• Right to object to processing based on legitimate interests
• Right to withdraw consent at any time
• Right to lodge a complaint with your local data protection authority

California Residents (CCPA/CPRA)

California residents have the right to know what personal information we collect and how it is used, to request deletion, to correct inaccurate information, and to opt out of the "sale" or "sharing" of personal information. Creator Offload does not sell or share personal information for cross-context behavioral advertising purposes.

To exercise any of these rights, email us at privacy@creatoroffload.com. We will respond within 30 days.

10. Children's Privacy

Creator Offload is a B2B platform intended for use by businesses and professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has provided us with personal data, contact us at privacy@creatoroffload.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or in-app notification at least 14 days before the changes take effect.

12. Contact Us

For privacy-related questions, requests, or concerns:

Email: privacy@creatoroffload.com
Company: Creator Offload Pte. Ltd.