Privacy policy.

CreatorConsole is creator campaign software operated by DAPS Holdings Ltd. This policy covers our website, account access, workspaces, creator links, Discovery and campaign reports.

We act as a controller for our own enquiries, account administration, billing, security and service management. When a workspace uses CreatorConsole to manage its creators and campaigns, the workspace organisation may be the controller and we process that information on its instructions. Its own privacy notice also applies to that activity.

Contact privacy@creatorconsole.co for privacy questions, a data request, or help identifying the organisation responsible for a campaign.

Accounts and enquiries

Name, email, messages, invitation status, account role, workspace membership, login information and preferences.

Workspaces and campaigns

Organisation details, branding, briefs, campaign settings, team access, offers, approvals and activity records.

Creators

Names, contact details supplied to a workspace, country, social handles, content types, rates, offer responses, campaign history and payment preferences.

Public social data

Profile images, account region, followers and verification where available; post URLs, captions, thumbnails, publish dates, public engagement counts and historical metric snapshots.

Billing and payouts

Subscription and invoice references, billing contact details, amounts, currencies, payment status and payout references. For creator payouts, this can include a PayPal or Wise email, Wisetag or receiving account name.

Technical information

Request and security logs, IP address, browser and device information, authentication events and aggregate website usage information.

What we handle depends on the features enabled for a workspace and how you use them. Payment card details are handled by the payment provider. CreatorConsole does not ask creators to enter bank account details into its creator payment form.

We receive information when you contact us, accept an invitation, sign in, use a workspace, answer an offer, submit a post or provide payment preferences. Workspaces also enter or import information about their team, clients and creators.

Public social information comes from the profiles and post links a user supplies, public search results, the social platforms themselves and third-party data providers that collect publicly available social media data. A creator does not need a CreatorConsole account or a connected social account to use an offer link.

For YouTube posts, CreatorConsole uses YouTube API Services to retrieve public channel and video metrics. Google's Privacy Policy applies to Google's handling of that information.

• Google Privacy Policy

Post tracking retrieves public reporting data. Sound and hashtag tracking retrieves campaign-level usage counts. Available fields differ by platform, and we do not use these features to publish posts or read private messages.

Discovery is no longer offered. Historical searches used public TikTok posts and grouped the accounts behind them. It can store public handles, names, profile links, avatars, followers, verification, account region, matching post metrics, hashtags and sound information. An additional profile analysis can provide recent-post statistics such as median views and engagement.

When you choose AI-assisted Discovery, your search description and a limited set of public matching-post evidence are processed by OpenAI to suggest search filters and match notes. We do not send workspace fees, payment details, contact emails or internal creator notes for this feature. Avoid putting private client information in the search. AI suggestions may be wrong and require your review.

A public biography may be read to derive two indicators: whether it mentions promotional work and whether it offers a contact route. Discovery stores those indicators rather than a copy of the biography or an extracted contact address. These are hints, not consent to marketing or confirmation that a creator wants to join a campaign.

Account region is a platform-reported field, not proof of residence, nationality or audience location. Search results and profile statistics may be sampled, incomplete or out of date. A Discovery result does not mean someone has joined CreatorConsole, endorsed us or agreed to be contacted.

To object to appearing in Discovery, email privacy@creatorconsole.co with your platform and handle. We can review and remove the record and keep a hashed suppression entry to prevent the handle from being collected again. A separate creator record entered by a workspace may require a request to that organisation.

You have rights over information held about you in CreatorConsole, including the right to ask for it to be deleted. Where it lives decides who handles the request:

Discovery results

Email privacy@creatorconsole.co with your platform and handle. We remove your Discovery record and keep a hashed suppression entry so your handle is not collected again.

A brand, label or agency's creator records

Offers, submissions, rates and payment preferences in a workspace are controlled by the organisation that works with you. Ask that organisation to delete them. If you do not know who it is, or they do not respond, contact us and we will pass your request on and help them respond.

Posts in a client report

A report shows public posts you made for a campaign. Ask the workspace to remove a post, or contact us if you cannot reach them.

Deletion is not always total. Records of payments made to you may need to be kept for tax and accounting purposes, and information may be kept where it is needed for a legal claim. Anything kept for those reasons is not used for anything else, and we will tell you what is kept and why.

For processing where we are the controller, our purposes and applicable legal bases include:

Enquiries and subscriptions

To respond to a requested enquiry, arrange access and provide an agreed service: performance of a contract or steps requested before a contract where you are a party; otherwise our legitimate interests in managing business relationships.

Accounts and operations

To administer team access, service emails, creator links and workspace functions: our legitimate interests in providing and managing the service, or contract where applicable.

Public creator research

To help teams research relevant public creators and measure public campaign content: legitimate interests in campaign research and reporting, taking account of creators' rights and reasonable expectations.

Security and improvement

To prevent abuse, investigate incidents, support users and understand aggregate service usage: legitimate interests in maintaining a secure and reliable service.

Business records

To maintain accounting records and respond to lawful requests: legal obligations, and legitimate interests in resolving disputes and protecting legal rights.

Optional consent

Where we separately ask for consent, you can withdraw it. Withdrawal does not affect processing that was lawful before withdrawal.

A workspace acting as controller is responsible for its own lawful basis, notices and instructions. We do not treat the fact that a profile is public as permission for unrestricted use or unsolicited marketing.

Authorised workspace owners, team members and clients see information according to their access. A creator link exposes the relevant creator's offers, submissions and payment preferences to the person holding that link.

Hosting and infrastructure providers

Database, storage, authentication, hosting, technical logs and website analytics.

Email delivery provider

Account invitations, creator offers and transactional service emails.

Payment processor

Workspace checkout, subscriptions, invoices and the billing portal where card billing is used.

Data providers and social platforms

Retrieval of public profiles, posts, sound or hashtag data, including YouTube API Services for public YouTube metrics.

AI service provider

OpenAI processes Discovery search descriptions and limited public post evidence for optional AI assistance. Response storage is disabled in our API requests; provider security and abuse-monitoring retention may still apply.

Payout and booking services

PayPal or Wise when a creator chooses them for a payout, and our scheduling provider when you follow our booking link. Their own privacy notices apply to information you give them.

Our service providers act on our instructions and are bound by confidentiality and data protection terms. Workspace customers can request the current list of sub-processors from privacy@creatorconsole.co.

We may also disclose relevant information to advisers, authorities or parties to a business transfer where necessary and legally permitted. We do not sell personal data or use Discovery records for our own advertising mailing lists.

A workspace can enable a client report that opens without a login. Anyone with a valid report link can view the information included in it, such as campaign results, approved posts, creator names, public handles, avatars and public post links. Treat the link as an access credential; a workspace can disable or regenerate it.

Creator fees and private payout or contact details are not included in the client-facing campaign report. A downloaded PDF or information copied from a report is a separate copy; disabling the live link does not remove copies someone has already saved.

Private creator links also grant access without an account and expire. Do not forward them to another person. Contact the workspace if your link is exposed or the information shown is incorrect.

Providers may process or make information accessible outside the United Kingdom, including in the United States. The location depends on the provider and service configuration.

Where a transfer is subject to UK data protection rules, it requires an applicable adequacy arrangement, appropriate contractual safeguards such as the UK International Data Transfer Agreement or Addendum, or another lawful exception. Contact privacy@creatorconsole.co to request information about the safeguards applicable to your data.

We keep information for the purpose it serves, taking account of active workspace instructions, reporting needs, legal and accounting obligations, security and disputes. Campaign completion, subscription cancellation and deleting a login do not automatically delete every campaign, creator or billing record.

Accounts and workspaces

Held while needed to provide access and the agreed service. Workspace administrators cannot self-delete their account while their administrative responsibilities remain; contact us to arrange a transfer or closure.

Campaign and creator records

Held for ongoing campaign operations, historical reporting and the workspace's record-keeping needs. Ask the relevant workspace or contact us about removal or export.

Discovery caches

Search results have a 48-hour freshness window and profile analyses can be reused for 14 days. These are refresh periods, not promises that the underlying records are deleted at that time.

AI assistance records

We retain a hash of the search description, the suggested query/filters and match notes for usage controls and short-term reuse. The original description is not saved in this ledger. Records older than 90 days are cleared when the workspace next requests AI assistance; workspace deletion also removes them.

Access links and invitations

Creator access links expire after 45 days. Expiry ends link access; it does not delete creator records. Routine invitation maintenance removes eligible unused, unaccepted invitations after 30 days.

Billing, security and backups

Kept as needed for accounting, fraud prevention, disputes and recovery. Removal from the live service may not immediately remove copies from backups or independently held provider records.

A minimal hashed Discovery suppression record may remain after a profile is removed so the objection can continue to be respected. We do not describe that entry as anonymous simply because it is hashed.

Our controls include authentication, workspace and role-based access, expiring creator links, restricted server-side credentials and verification of supported provider webhooks. These reduce risk; no internet service is completely secure.

Protect your password and access links, only grant access to appropriate people, and report suspected unauthorised access to support@creatorconsole.co. Do not add unnecessary sensitive information to campaign briefs or creator records.

Depending on the circumstances, you can request access, correction, erasure, restriction or portability of your personal data, and object to processing based on legitimate interests. You can withdraw consent where processing relies on it. These rights are subject to the conditions and exceptions in applicable law.

Send requests to privacy@creatorconsole.co. Include enough information to identify the relevant account, campaign or public handle. We may need proportionate identity checks, and may involve the workspace where it is the controller. We normally respond within one month, subject to lawful extensions or clarification requirements.

You can complain to us and to the UK Information Commissioner's Office. Creator statistics and search ordering support human decisions; they are not a guarantee of suitability or an automated decision to accept or reject a creator.

• Information Commissioner's Office: your data protection rights and complaints

Account areas use session and security cookies for authentication and requested dashboard functions. Browser storage can also remember your selected appearance, recent workspace searches and workspace branding. Clearing it may reset those preferences; blocking essential cookies can prevent sign-in from working.

We use Plausible Analytics and Vercel Web Analytics to understand aggregate website visits and navigation. Plausible also measures actions such as signup-button clicks and demo playback. Verified self-serve signup and trial milestones are counted once per account in private service records; only the event name is sent to Plausible, without account identifiers, email addresses, workspace information or private report links. Analytics still processes request information even though these services do not set analytics cookies. We do not currently install advertising pixels or behavioural advertising cookies.

We use the approximate country supplied by our hosting provider to suggest GBP, EUR or USD prices. Currency detection does not set a cookie or request your precise location. Once signup begins, its currency is saved with your setup and billing agreement; later travel does not change an agreed subscription.

Following a booking, checkout or social-platform link takes you to another provider, which may use its own cookies and analytics. Its own notice and controls apply there.

We need the information marked as required to create an account, deliver a requested service or process a creator action. If you do not provide it, that function may be unavailable. Optional fields can be left blank.

CreatorConsole is intended for professional campaign teams, rather than a service directed at children. If a workspace involves a young creator, it is responsible for appropriate permissions and safeguards. Contact privacy@creatorconsole.co if you believe information about a child should be reviewed or removed.

We update this notice when our service, data practices or legal requirements change. The date above identifies this version. Where a change materially affects active users, we will provide appropriate additional notice.