Privacy
A plain-language summary of what Creator Command stores, why, and how you stay in control of it.
Creator Command, based in the United States, is the data controller for personal data processed through this website and the Creator Command platform. You can reach us at info@creator-command.com. Where we process data on behalf of a customer workspace, that customer is the controller and we act as processor under our agreement with them.
Account data (name, email, password credentials, workspace role); creator records your team adds or imports (handles, contact details, shipping addresses, audience and performance metrics); campaign, sample, content and commission records; support messages; usage and telemetry data; device identifiers, approximate location and IP address; and data from integrations you explicitly connect. We do not buy or resell personal data.
To create and secure accounts, provide the service, match creators to your program, track campaigns and content, calculate commissions and produce workspace analytics (performance of our contract with you); to prevent fraud and abuse, maintain security and improve the product (our legitimate interests); to send marketing where you have opted in (consent); and to meet legal, accounting and tax obligations (legal obligation).
Shipping addresses and contact details are stored separately from general creator records and are only visible to workspace members whose role grants access. They are used solely to fulfil samples and program communication.
Service providers and subprocessors that host our infrastructure, deliver email and provide analytics and support tooling; Paddle.com, our Merchant of Record, for the sale of subscriptions, subscription management, payments, tax compliance and invoicing; the platforms you connect, such as Shopify, Meta, Instagram and TikTok, for the data you authorise; professional advisers such as legal and accounting; and authorities where required by law. Payment card details are collected and processed by Paddle, not by us.
Data is stored in managed cloud infrastructure with encryption in transit and at rest, tenant isolation enforced at the database level, role-based access control on every table, and integration credentials held encrypted. Data may be processed in the United States and other countries where our providers operate; where required, transfers rely on Standard Contractual Clauses or an equivalent safeguard.
We keep personal data for as long as your workspace is active and as needed for the purposes above. Archived records are retained for audit purposes and can be permanently deleted on request. Deleting your workspace removes creator, campaign and commission records within 30 days, after which remaining data is deleted or anonymised, except where we must keep it for legal or accounting reasons.
We use essential cookies for authentication, session integrity and security, and limited analytics cookies to understand product usage. We do not use advertising cookies on the application. You can manage or clear cookies in your browser settings; disabling essential cookies will prevent sign-in.
You can request access, correction, export, deletion or restriction of your personal data, object to processing based on legitimate interests, and withdraw consent to marketing at any time by contacting info@creator-command.com. Creators listed in a workspace may request removal directly. We respond within one month, and you may also complain to your local data protection or consumer authority.
