Privacy Policy
Last updated: 28 July 2026
What we collect
Account data (email, organisation name) for agency/brand users who sign up. Creator data (name, handle, platform, payout details) entered by the agency or by the creator themselves via their portal link. Campaign performance data: clicks, IP addresses (hashed — we never store raw IPs), user-agent, referrer, and confirmed sale events.
What we don't do
We don't scrape Instagram, YouTube, or any social platform. We don't buy or sell personal data. We don't invent or estimate sales numbers — every figure shown is from a real tracked click or a confirmed order.
How we use it
To attribute sales to the correct creator, calculate payouts, generate proof reports, and detect fraudulent traffic. Creator payout details (UPI/bank) are used solely to process payments and are visible only to the agency that added that creator.
Where it's stored
Data is stored in Supabase (PostgreSQL), with row-level security so one organisation can never read another's data. Payments are processed by Razorpay — we don't store card numbers.
Cookies & tracking
A first-party cookie/visitor id is set on tracked links to attribute a later purchase back to the correct click within the organisation's configured attribution window. This is used only for sales attribution, not advertising or cross-site tracking.
Your rights
You can request access to, correction of, or deletion of your data at any time. Agency/brand users can delete their organisation and all associated data from Settings. Creators can contact the agency that added them, or email us directly.
Contact
Questions about this policy: reach out via the contact details on your agency's account, or email the address listed on creatorproof.app.