Privacy Policy

1. Introduction

Creator Club ("we", "us", or "our") operates a platform that enables Shopify merchants to run creator programs. This Privacy Policy describes how we collect, use, and share information when you use our services.

2. Information We Collect

From Merchants (via Shopify)

• Shop name, domain, and email address
• Shopify access tokens (encrypted at rest) for API access
• Product catalog information

From Creators

• Name, email address, and phone number
• Social media handles (TikTok, Instagram)
• Shipping address
• Video submissions and application materials

Automatically Collected

• Browser type, IP address, and device information
• Pages visited and actions taken within the platform

3. How We Use Information

• To provide and maintain our services
• To process creator applications and manage programs
• To communicate with merchants and creators about their accounts
• To create Shopify draft orders for approved creators
• To send transactional emails (approvals, onboarding, reminders)
• To improve our services and fix issues

4. Data Storage and Security

We use Supabase (hosted on AWS) to store data. Sensitive credentials such as Shopify access tokens and API keys are encrypted using AES-256-GCM before storage. We use HTTPS for all communications and follow industry-standard security practices.

5. Data Sharing

We do not sell personal information. We share data with:

• Shopify — to create draft orders and manage product access
• Resend — to send transactional emails
• Vercel — hosting provider for the application
• Supabase — database and file storage

6. Data Retention

Merchant data is retained for the duration of the app installation. Upon uninstallation, we retain data for 48 hours (per Shopify requirements) and then process deletion upon receiving a shop/redact webhook. Creator data is managed by the merchant through the admin panel.

7. GDPR Rights

If you are in the European Economic Area, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability

To exercise these rights, contact us at the email below. For customers of Shopify merchants, data requests are handled via Shopify's GDPR webhooks.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify merchants of material changes via email or through the app dashboard.

9. Contact Us

For questions about this Privacy Policy or to exercise your data rights, contact us at: privacy@creatorclub.wearotishi.com