Privacy Policy

Last updated: October 19, 2026

Creatorly (“we”, “us”, “our”) operates the Creatorly platform and related services that connect brands and creators. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our website, brand dashboard, mobile applications, and APIs.

1. Information we collect

We may collect the following categories of information:

• Account information: name, email address, phone number, password (stored in hashed form), role (creator or brand), and profile details such as your bio, categories, city, the kinds of creator you are (influencer, UGC creator, video editor or clipper) and links to your portfolio.
• Identity and payout information: PAN or tax identifiers, KYC status, bank or UPI details submitted for payouts, and related verification data required by payment partners.
• Instagram data: when you connect Instagram, we store your account identifier, username, profile photo and an access token (encrypted). We read your follower count and the likes and comments on your recent posts to calculate your engagement, and refresh them from time to time. For posts you submit to a campaign or contest, we also read that post’s insights (views, reach, likes, comments, saves and shares) to verify it, report results to the brand, and work out any pay tied to views. If you connect extra Instagram accounts as clip accounts, we store and read the same information for each of them.
• Comment replies (only if you turn them on): if you are a creator and turn on comment replies, you also give us Instagram’s instagram_business_manage_comments and instagram_business_manage_messages permissions. With them, we read the comments on your sponsored posts for campaigns that use comment replies, for a limited time after each post is verified (currently 7 days), to find the campaign’s keyword. When a comment matches, we send the person who wrote it one private reply from your Instagram account with your link for that campaign, and every automatic reply says it is automated. For each reply we keep the comment’s Instagram ID, the keyword it matched, when the comment was made, whether and when the reply was sent, and a keyed one-way hash of the commenter’s Instagram ID, used only so that one person gets at most one reply per post. We do not store the commenter’s username, name or what they wrote. When someone taps the link in a reply, we record the tap with a one-way code in place of the visitor’s identity, their browser’s user agent and the page they came from. You and the brand see counts only: comments that asked, replies sent, and taps. You can turn comment replies off at any time.
• Comments panel (creators with comment replies on): on the page for a campaign, you can open the comments on your own sponsored post. We read them from Instagram, with the commenter’s username, when you open or refresh the panel and show them only to you; we do not store them. We act on Instagram only when you press a button: posting a comment or a reply from your account, hiding or unhiding a comment, deleting a comment, or sending the person who wrote a comment one private reply (we fill in the campaign’s message and your link, and you can edit it first). For a private reply sent this way we keep the same records as for an automatic one (above), so no one gets two, and it is not counted in the numbers the brand sees.
• Campaign and transaction data: applications, submissions, contest entries, campaign invites and their messages, files you hand in for editing and UGC jobs (uploaded, or the Google Drive or Dropbox link you give), problems a brand reports with a post or a delivery and how we resolved them, payment and payout records, ledger entries, subscription records, and communications related to campaigns or contests.
• Technical data: device type, operating system, app version, IP address, log data (including searches you run in the app), crash reports, push notification tokens, your device’s advertising ID (see section 4), how you arrived at Creatorly (such as the ad or link you came from, its campaign tags and Meta’s click id), and cookies or similar technologies on our website and dashboard.
• Product usage data (only if you opt in): which screens you view and which features you use, as described in section 3.

2. How we use information

We use your information to:

• Provide, operate, and improve the Creatorly platform;
• Process campaign and contest funding, subscriptions, creator earnings, and payout requests through payment partners;
• Verify content submissions, contest entries, and comply with campaign or contest rules, including checking final posts on Instagram automatically and holding a payout while we review a problem a brand has reported;
• Send comment replies from a creator’s Instagram account when the creator has turned them on, and show the creator and the brand how many were sent and tapped;
• Let a creator see and manage the comments on their own sponsored post (reply, hide, delete, or send one private reply) when they choose to;
• Show creators the campaigns open to the kinds of creator they are;
• Calculate creators’ engagement compared with accounts of a similar size, check whether a creator meets a campaign’s requirements, and rank creators for brands;
• Let brands find creators and invite them to campaigns (section 5);
• Work out pay tied to the views a submitted post gets, which in some cases includes a review by our team;
• Communicate with you about your account, campaigns, and support requests, including by push notification;
• Understand how the product is used, where you have agreed to product analytics;
• Measure the effectiveness of our own advertising on Meta platforms;
• Diagnose crashes and errors;
• Detect fraud, abuse, and security incidents;
• Comply with applicable laws, tax, and regulatory obligations.

3. Product analytics (opt-in)

We use PostHog, hosted in the European Union, to understand how people use Creatorly — for example, which screens are visited, how long sessions last, and where people get stuck in sign-up, applying to campaigns, or checkout.

• Off unless you say yes. The app and dashboard ask once whether you want to help improve Creatorly. Nothing is sent to PostHog unless you choose Allow.
• Change your mind any time. You can turn product analytics off (or on) in Settings in the app or the brand dashboard. Turning it off stops collection from that point. We record when you gave or withdrew consent and which version of this notice applied.
• What is collected: your Creatorly user id, your role (creator or brand) and market region, when the app is opened or closed, the screens and features you use (such as viewing a campaign, starting Instagram connection, or opening a checkout), and key account milestones (such as signing up, having a submission verified, being paid, or starting a subscription), including amounts and currency for payments. When you choose Allow, we also send when you signed up and connected Instagram. Basic device and app information is also collected.
• What is not collected: your name, email address, phone number, PAN or tax identifiers, bank or UPI details, address, one-time passwords, or anything you type into forms. Automatic capture of clicks and screen recording are switched off in the app.

4. Advertising measurement (Meta)

Our website and brand dashboard use the Meta Pixel, our servers use the Meta Conversions API, and from app version 1.3.7 our mobile apps include Meta’s app events SDK, to measure how our own ads on Facebook and Instagram perform (for example, whether an ad led to a sign-up or an install). We do not show third-party ads in Creatorly.

• Meta Pixel sets cookies and sends page views and similar events, along with your browser’s IP address and user agent, to Meta. When you are signed in to the dashboard, it also sends your email address and Creatorly user id, which are hashed before they leave your browser.
• Conversions API sends the name and time of the action; your email address, phone number and Creatorly user id in hashed (SHA-256) form; and, where available, your IP address, your browser or device user agent, and Meta’s browser and ad-click identifiers (the _fbp and _fbc cookies). Meta uses these to match the event to an ad. For payments and subscriptions it also sends the amount and currency. Because a payment is confirmed after you leave the checkout, we keep those checkout details (IP address, user agent and the two Meta cookies) with the payment or subscription record, except for iPhone checkouts where you did not allow tracking.
• Meta SDK in our apps: from app version 1.3.7, our Android and iPhone apps include Meta’s app events SDK. It tells Meta when the app is installed and opened and how long each visit lasts, with device details (such as model, operating system, language and time zone), your device’s advertising ID and a random ID the SDK creates for the app, so Meta can tell which ad led to the install. On Android, when the install came through a Meta ad, it also sends the Play Store referrer for that install. If the app crashes or freezes, or the SDK hits an error, it may also send Meta a report of that (what went wrong and where in the code, the app version, device model and operating system). It does not send your name, email address or anything you enter in the app. On iPhone the SDK starts only if you allow tracking; otherwise it sends nothing to Meta. On Android it runs from the first launch, with no prompt, and you can reset or delete the advertising ID in your device settings; doing so does not change the SDK’s random ID, or the Facebook-app identifier below. If the Facebook app is installed on your Android device, the SDK also sends an identifier from that app, which Meta uses to match the install. iPhone also uses Apple’s SKAdNetwork, whether or not you allow tracking, which tells Meta that an install came from one of our ads without identifying you or your device.
• Which actions: signing up or signing in, connecting Instagram, applying to a campaign, submitting a post, adding payout details, creating a campaign, opening a checkout, paying for a campaign or contest, and subscribing — on our website, our dashboard and our mobile apps.
• On iPhone: from app version 1.3.6, these events are sent to Meta only if you allow tracking when the app asks. You can change this at any time in iPhone Settings → Privacy & Security → Tracking. Earlier iPhone versions do not ask, so events from them are sent as they are from the web.
• On Android and the web: there is no tracking prompt, so these events are sent to Meta when you take these actions.
• Your choices: you can block or clear cookies in your browser, and adjust your ad preferences in your Facebook or Instagram settings.

5. Creator discovery and what others can see

If you are a creator, brands in your market (India, Canada or the United States) with an active Creatorly plan can find you in search and invite you to campaigns. This is on by default, including for accounts created before this feature was added.

• What brands see: your name, profile photo, Instagram username, follower count, engagement rate and how it compares with accounts of a similar size, typical interactions per post, your creator score, your categories, your city if you added one, and how many campaigns you have completed. They never see your email address or phone number.
• Invites: a brand can invite you with a short message, and we notify you. You can accept or decline.
• Turning it off: switch off “Let brands find and invite me” in Settings in the app (version 1.3.6 or later) or in Settings on the Creatorly dashboard at app.getcreatorly.com. You can still apply to campaigns.
• When you apply: the brand running that campaign sees your profile, Instagram details and statistics, and whether you meet its requirements.
• Your creator profile in the app shows your name, bio, categories, city, country, Instagram username, follower count and engagement rate. Your total earnings on Creatorly are shown only to brands and to you.

Your media kit

If you are a creator with Instagram connected, you get a free media kit: a public web page at getcreatorly.com/@your-instagram-username that you can share, for example in your Instagram bio. It is on by default, and we email you before it goes public.

• What anyone with the link can see: your Instagram display name, profile photo and username; your follower count, engagement rate and how it compares with accounts of a similar size, and typical interactions per post, all read from Instagram, with the date they were last updated; a short summary written from those numbers; up to six of your recent Instagram posts (the ones you pin, then those with the most likes and comments), each with its cover image, like count and a link to it; your categories and city; your bio, or the two lines you write about what you make and who follows you; brands you have worked with, both from campaigns completed on Creatorly and any you add yourself (shown as added by you); how many Creatorly campaigns brands picked you for and you completed, with the brand's name and logo, a link to your post and its reach and views; and your rates if you add them, or otherwise Creatorly's estimate of a starting price for creators your size, marked as our estimate.
• Your posts: to show your work, we keep a list of your recent Instagram posts (their link, type, date and like and comment counts, but not their captions) and a copy of the cover image of the ones your media kit could show, because Instagram's own image links expire. We refresh them weekly, remove a post when it is deleted from Instagram, and delete all of them when you delete your account.
• What it never shows: your earnings, email address or phone number. Email addresses, phone numbers and links in your bio or city are left off the page.
• When it is shown: only while your Instagram is connected and readable and “Let brands find and invite me” is on. We ask search engines not to list it.
• Turning it off: in Settings → Your media kit on the Creatorly dashboard at app.getcreatorly.com, or with the link in the email we send you. It stops working for everyone straight away.
• Counts: we count how many times your media kit is opened and its “Work with me” button is tapped, and show you the totals. We do not store who opened it; a visitor is told apart for one day only, by a one-way code.
• Brands who sign up from it: if a brand creates an account after tapping “Work with me” on your media kit, we record that it came from your page.

6. Sharing of information and service providers

We share information with the following, only as needed for the purposes above:

• Brands on Creatorly: creator profile and Instagram statistics, as described in section 5, files handed in for their editing and UGC jobs, and counts of comment replies and taps on their campaigns;
• Payment processors: Razorpay (India) and Stripe (Canada and the United States) to collect payments and subscriptions, verify identity, and disburse creator payouts or prize settlements;
• Hosting and storage: Supabase (database and file storage, in Mumbai, India), Railway (application servers, in Singapore) and Vercel (website and dashboard, served from its global network);
• Product analytics: PostHog (EU), only if you opt in (section 3);
• AI writing help: Anthropic (Claude), only when a brand uses "Write it for me" on a campaign brief. It receives what the brand entered for that campaign (the product description, links, categories and type of work) and the brand's name, industry and website, and returns a draft the brand can edit. No creator information is sent;
• Advertising measurement: Meta (section 4);
• Crash reporting: Sentry, when enabled, which receives error reports, device and app information, and technical logs when something goes wrong, and a sample of performance data;
• Push notifications: Google Firebase Cloud Messaging (and Apple Push Notification service on iOS), which receive a device token so we can send you notifications;
• Social platforms (such as Meta/Instagram) when you authorize a connection. If you turn on comment replies, the replies we send from your account go through Instagram to the people who commented;
• Other service providers who provide email or support tools under contractual confidentiality obligations;
• Legal authorities when required by law or to protect rights, safety, and security.

We do not sell your personal information to third parties for their marketing purposes.

7. Where your data is processed

Your data is processed in India, Singapore, the European Union, and the United States, and may be processed in other countries where our service providers operate, subject to appropriate safeguards where required. Product analytics data is stored in the EU.

8. Data retention

We retain account, transaction and payout information for as long as your account is active and as needed to provide services, resolve disputes, enforce agreements, and meet legal, tax, and audit requirements. Product analytics events are kept only for as long as our analytics provider retains them on our plan. When you delete your account or turn analytics off, we ask our analytics provider to delete your analytics profile.

Comment reply records (section 1) are kept for as long as the campaign report they belong to is kept, and are deleted with the creator’s account.

9. Security

We implement reasonable technical and organizational measures to protect your data, including encryption of sensitive fields where appropriate. No method of transmission or storage is completely secure; you use the service at your own risk.

10. Your rights

Depending on applicable law, you may request access, correction, or deletion of certain personal data, or withdraw consent where processing is consent-based (for example, product analytics can be switched off in Settings). Contact us at support@getcreatorly.com. We may need to verify your identity before fulfilling requests. You can delete your account in Settings in the app or dashboard; see our data deletion page for what is deleted and what we keep.

11. Children

Creatorly is only for people aged 18 and over, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has an account, contact us and we will delete it.

12. Grievances and complaints

If you have a concern about how we handle your data, contact our Grievance Officer, Suryansh Goel, at support@getcreatorly.com. We will respond within 30 days.

If you are not satisfied with our response, you may complain to the Data Protection Board of India. If you are in Canada, you may also complain to the Office of the Privacy Commissioner of Canada.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page with an updated “Last updated” date. If a change affects product analytics, we will ask for your consent again. Continued use of the service after other changes constitutes acceptance where permitted by law.

14. Contact

For privacy-related questions, contact: support@getcreatorly.com