Privacy Policy

1. Who we are

Creators Foundation LLC ("Creators Foundation," "we," "us," or "our") operates the website at joincreatorsfoundation.com and provides content protection and creator business support services (the "Services").

This Privacy Policy explains what information we collect, why we collect it, who we share it with, and what choices you have. It applies to visitors to our website, applicants who submit an enrollment form, and creators with an active or past account.

If you do not agree with this policy, please do not use the Services.

2. Information we collect

Information you provide when you apply

When you enroll in the Protection Plan or the Creator Assistant Program, our application form collects:

• Your full name as you enter it
• Your email address
• The platforms you post on, selected from a list
• Your platform usernames or handles for those platforms
• A photo for activation — see Section 3
• Your preferred contact method (Creator Assistant Program)
• Any notes you write describing what you would like support with (Creator Assistant Program)

These details are attached to your checkout session so that your application survives the redirect to and from our payment processor and can be matched to the account you create afterwards. This means the details listed above are transmitted to and stored by Stripe as part of that checkout session, in addition to being stored by us.

Account information

When you create a login we store your email address, an authentication record managed by our database provider, your display name, your assigned plan, your account stage, and whether your email address has been confirmed. We do not store your password. Passwords are handled by our authentication provider and are stored by them in hashed form.

Information you submit while using the Services

• Submitted URLs. Links you report as unauthorized uses of your content. We normalize the format of these links before storing them.
• Support messages and requests. The subject, message body, category, and priority of anything you send us, together with our replies and the status history of the request.
• Platform records. The platforms and usernames associated with your account, including changes you ask us to make.

Information we generate about your account

• Protection activity records describing detections, submissions, reviews, and outcomes, along with their status and the platform involved
• Protection metrics such as counts, a protection score label, and review dates
• Specialist assignment — the team member assigned to your account
• Next Session information — the date and time of your next scheduled session, where applicable
• Notification and email delivery records, including whether a message was sent, delivered, or failed
• Administrative action logs recording changes our staff make to your account

Billing information

See Section 7. In short: we store subscription and status records, and our payment processor stores your payment details. We never receive or store your full card number.

Technical information

Our hosting, database, and email providers automatically generate operational records when you use the Services. These typically include IP address, browser and device type, pages or endpoints requested, timestamps, and error diagnostics. We use these records to keep the Services running, investigate faults, and detect abuse.

Our pages load a small number of resources from third-party networks — a JavaScript client library from a public content delivery network, and web fonts from Google Fonts. Those providers receive your IP address and basic request information as a normal consequence of serving those files.

3. Activation photos and facial images

Depending on where you live, an image of your face used for recognition purposes may be treated as biometric information or sensitive personal information under applicable law. We handle it accordingly:

• The photo is stored in a private storage bucket. It is not publicly accessible and is not served from a public URL.
• Access is restricted by database access-control rules to you and authorized Creators Foundation administrators. Each stored file is constrained to a folder belonging to your user account.
• The photo is shared with our content protection technology provider for the purpose of creating and operating your protection profile. That provider processes it in order to scan for and identify matching content.
• We do not sell your photo, and we do not use it for advertising, model training unrelated to your protection profile, or any purpose other than delivering the Services.
• Before your photo is uploaded, it is held temporarily in your own browser's local database so the enrollment flow can survive a page reload. That local copy is cleared once the upload completes.

Providing an activation photo is voluntary, but the protection features of the Services depend on it. If you do not provide one, we may not be able to activate or maintain protection for your account. You may request deletion of your activation photo at any time — see Section 11.

4. How we use information

We use the information described above for the following purposes:

• Service delivery. To create and maintain your account, activate protection, set up your protection profile with our scanning technology provider, review submitted links, record protection activity, assign a specialist, and schedule sessions.
• Customer support. To receive, route, prioritize, and respond to your messages and requests, and to keep a history of those interactions.
• Enforcement coordination. To prepare and submit removal requests and related notices to platforms, hosts, and search engines on your behalf. See Section 5.
• Billing. To create and manage your subscription, apply your plan, reflect your billing status, and provide access to the customer billing portal.
• Transactional email. To send account verification, password reset, activation, and service-related messages. We do not send marketing email without your consent.
• Security and fraud prevention. To authenticate users, restrict administrative access, detect misuse of the Services, investigate suspicious activity, and protect our systems and our creators.
• Legal and compliance. To comply with applicable law, respond to lawful requests, enforce our Terms of Service, and establish or defend legal claims.
• Service improvement. To diagnose faults, understand where the Services fail, and improve reliability.

We do not sell your personal information, and we do not share it with third parties for their own advertising or marketing purposes.

5. How we share information

We share information only in the circumstances described below.

With platforms, hosts, and search engines

To request removal of unauthorized content, we submit notices to the platform, hosting provider, or search engine involved. Removal processes — including notices under the U.S. Digital Millennium Copyright Act ("DMCA") and equivalent processes elsewhere — generally require the notice to identify the rights holder and include a statement made under penalty of perjury.

If you have concerns about this, contact us before submitting links so we can discuss the available options.

With service providers

We share information with the vendors listed in Section 6, who process it on our behalf and under contract.

For legal reasons

We may disclose information where we believe in good faith that disclosure is required by law, subpoena, court order, or other legal process, or is reasonably necessary to investigate suspected fraud or abuse, to protect the rights, property, or safety of Creators Foundation, our creators, or the public, or to enforce our agreements.

Business transfers

If Creators Foundation is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction. We will take reasonable steps to ensure the recipient honors this policy, and we will notify you of any material change in how your information is handled.

With your direction

We share information with other parties when you ask us to or otherwise direct us to do so.

6. Service providers

We use the following categories of providers to operate the Services. Each processes only the information needed for its function.

Providers may change as the Services evolve. We will update this section when a change materially affects how your information is handled.

7. Payments and billing

Payments are processed by Stripe. When you subscribe, you enter your payment details on a page hosted by Stripe. Your card number, expiration date, and security code are submitted directly to Stripe.

Creators Foundation does not receive, process, or store your full payment card number.

What we store on our own systems is limited to the records needed to run your subscription:

• Your Stripe customer and subscription identifiers
• Your plan type and billing status
• The end date of your current billing period
• Whether your subscription is set to cancel at the end of the period
• A log of billing events received from Stripe, used to keep your status accurate

Stripe may collect a billing address during checkout. Stripe handles your payment information under its own privacy policy and its obligations as a payment processor. We recommend reviewing Stripe's privacy policy for details on its handling of payment data.

8. Cookies and browser storage

We do not use advertising cookies, analytics trackers, pixels, or third-party marketing tags. We do not track you across other websites.

The Services do use your browser's own storage to function:

• Local storage holds your authentication session so you stay signed in, along with limited interface state such as which administrative view you last had open and a temporary copy of in-progress enrollment details.
• Session storage holds a short-lived token and plan selection used to return you to the right place after checkout. It is cleared when you close the tab.
• An in-browser database temporarily holds your activation photo before it is uploaded, so the enrollment flow survives a page reload. It is cleared after upload.

These are necessary for the Services to work. Clearing them will sign you out and discard any in-progress enrollment. Third parties that serve our fonts and JavaScript library may set their own cookies or receive request data under their own policies.

This page and our Terms of Service page load no scripts and set no storage of their own.

9. Security

We take reasonable measures designed to protect your information, including:

• Encryption in transit using HTTPS across the website and all API endpoints
• Row-level access-control policies in our database, so records are readable only by the account that owns them and by authorized administrators
• A private storage bucket for activation photos, with per-user path restrictions
• Server-side handling of all privileged operations — secret keys are held only in server environment variables and are never exposed to the browser
• Billing status written only by verified webhook events from our payment processor, so it cannot be altered from a browser
• Administrative role checks enforced in the database rather than only in the interface
• Soft-deletion and administrative action logging, so account changes are traceable

10. Data retention

We retain information for as long as your account is active and for as long afterwards as is reasonably necessary to:

• Provide and support the Services
• Maintain a record of protection activity and enforcement history
• Meet tax, accounting, and other legal recordkeeping obligations
• Resolve disputes and enforce our agreements

Some records are retained in a soft-deleted state — removed from normal use but preserved for audit and recovery purposes — before being permanently removed. Billing records held by our payment processor are retained under that provider's own retention obligations, which we do not control.

If you close your account or request deletion, we will delete or de-identify information that we are not required to keep, within a reasonable period.

11. Your choices and requests

You may ask us to:

• Access a copy of the personal information we hold about you
• Correct information that is inaccurate or out of date
• Delete your account, your activation photo, or other personal information we are not required to retain
• Stop a specific processing activity, where applicable law gives you that right

Send requests to support@joincreatorsfoundation.com from the email address associated with your account. We may need to verify your identity before acting, and we may decline a request where an exception under applicable law applies. We will respond within the time required by applicable law.

You may also update much of your account information directly in your dashboard, and you may manage your subscription and payment method through the customer billing portal.

Depending on where you live, you may have additional rights — including rights under the California Consumer Privacy Act, other U.S. state privacy laws, or the EU and UK General Data Protection Regulation — and the right to lodge a complaint with your local supervisory authority. We do not sell or share personal information for cross-context behavioral advertising. We will not discriminate against you for exercising any privacy right.

Deleting your account does not by itself cancel your subscription. See our Terms of Service for cancellation.

12. Children's privacy

The Services are intended solely for adults. You must be at least 18 years old to use the Services. We do not knowingly collect personal information from anyone under 18, and we do not permit anyone under 18 to create an account or submit an activation photo.

If we learn that we have collected information from someone under 18, we will delete that information and terminate the account. If you believe a minor has provided us with information, contact us immediately at support@joincreatorsfoundation.com.

13. International users

Creators Foundation is based in the United States, and our providers operate infrastructure in the United States and other countries. If you access the Services from outside the United States, you understand that your information will be transferred to, stored in, and processed in the United States and other jurisdictions whose data protection laws may differ from those in your country. Where required, we rely on appropriate safeguards for such transfers.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If a change materially affects how we handle your information, we will provide additional notice — for example, by email or a notice within the Services — before the change takes effect where required by law.

Your continued use of the Services after an updated policy takes effect means you accept the updated policy.

15. Contact us

Questions, concerns, or privacy requests:

• Creators Foundation LLC
• Email: support@joincreatorsfoundation.com
• Website: joincreatorsfoundation.com

We will respond as promptly as we reasonably can.