Privacy Policy

1. Data we collect

• Account identity, email address, display name, age and country confirmations, roles, and acceptance records.
• Public X identifiers, ownership-verification status, OAuth status, submitted post URLs, source relationships, and approved metric snapshots.
• Campaigns, memberships, submissions, review decisions, appeals, ledger entries, support tickets, notifications, and audit events.
• Technical security information such as request timing, rate-limit records, deployment logs, and fraud indicators.
• Stripe customer, connected-account, payment, payout, dispute, and onboarding references. Stripe, not Creator Rewards, stores underlying bank, identity, and tax documents.

2. How data is used

• Authenticate users and operate the creator and advertiser workspaces.
• Verify account ownership, campaign eligibility, source relationships, metrics, and payout states.
• Prevent fraud, enforce rules, resolve appeals and disputes, secure the service, and maintain an auditable ledger.
• Provide required account, review, deadline, payment, security, and legal notices.
• Comply with tax, accounting, legal, sanctions, and payment obligations.

3. Service providers and disclosures

Data may be processed by Supabase for authentication and database services, Vercel for hosting and logs, Stripe for payments and connected accounts, X for authorized account and post data, and an approved email provider for transactional messages. Creator Rewards may also disclose information to professional advisers, regulators, courts, law enforcement, or transaction counterparties when lawfully required or reasonably necessary.

Creator Rewards does not sell personal information or use marketplace records for cross-context behavioral advertising.

4. Retention

Creator Rewards keeps information for as long as needed to operate the account, preserve campaign and payment evidence, prevent abuse, meet tax and accounting duties, and resolve legal claims. Deletion requests may not remove ledger, acceptance, audit, fraud, payment, tax, backup, or dispute records that must be retained.

A final production retention schedule must be approved before live money is enabled. Private-beta users may request closure or deletion through the support portal.

5. Security and backups

Creator Rewards uses access controls, encryption in transit, restricted production credentials, row-level-security lockdown, append-only audit protections, signed payment webhooks, abuse throttling, and managed backups. No system can guarantee absolute security. Users should report suspected compromise through the support portal immediately.

6. Choices and requests

Users may request access, correction, export, or deletion of eligible account information through the support portal. Creator Rewards may verify identity before acting and may retain records where an exception or legal obligation applies. Users can disconnect X authorization and manage payment information through the applicable provider.

7. Children and geography

Creator Rewards is limited to United States users age 18 or older and is not directed to children. The service is not offered where its operation would be unlawful.

8. Changes and contact

Material privacy changes receive a new version and effective date. Privacy and security requests should be submitted at the Creator Rewards support page so they remain tied to an authenticated record.