1. Introduction
Creator Club ("we", "us", or "our") operates a platform that enables Shopify merchants to run creator programs. This Privacy Policy describes how we collect, use, and share information when you use our services.
2. Information We Collect
From Merchants (via Shopify)
- Shop name, domain, and email address
- Shopify access tokens (encrypted at rest) for API access
- Product catalog information
From Creators
- Name, email address, and phone number
- Social media handles (TikTok, Instagram)
- Shipping address
- Video submissions and application materials
Automatically Collected
- Browser type, IP address, and device information
- Pages visited and actions taken within the platform
3. How We Use Information
- To provide and maintain our services
- To process creator applications and manage programs
- To communicate with merchants and creators about their accounts
- To create Shopify draft orders for approved creators
- To send transactional emails (approvals, onboarding, reminders)
- To improve our services and fix issues
4. Data Storage and Security
We use Supabase (hosted on AWS) to store data. Sensitive credentials such as Shopify access tokens and API keys are encrypted using AES-256-GCM before storage. We use HTTPS for all communications and follow industry-standard security practices.
5. Data Sharing
We do not sell personal information. We share data with:
- Shopify — to create orders and manage product access
- Resend — to send transactional emails
- Vercel — hosting provider for the application
- Supabase — database and file storage
- Anthropic — AI-powered application summarization and content script generation. Creator application data (excluding passwords and tokens) may be processed by Anthropic's Claude AI to assist merchants with application review and content creation. No data is retained by Anthropic after processing.
- Deepgram — AI-powered video transcription. Video submissions may be processed by Deepgram to generate text transcriptions for merchant review. This processing involves biometric data (voice patterns). No data is retained by Deepgram after processing.
5a. AI Processing
We use artificial intelligence services to assist merchants with their creator programs:
- Application Review: Creator application data (name, contact info, survey responses) may be sent to Anthropic's Claude AI to generate summaries for merchant review.
- Content Script Generation: Brand information and creator-provided inputs are sent to Anthropic's Claude AI to generate UGC ad scripts.
- Video Transcription: Creator video submissions may be processed by Deepgram's speech-to-text AI to generate transcriptions. This involves processing of biometric data (voice patterns and speech characteristics).
Both Anthropic and Deepgram process data under data processing agreements. Neither service retains creator data after processing is complete. Creators can opt out of AI processing by contacting the merchant or our support team.
6. Data Retention
Merchant data is retained for the duration of the app installation. Upon uninstallation, we retain data for 48 hours (per Shopify requirements) and then process deletion upon receiving a shop/redact webhook. Specific retention periods:
- Creator profiles and submissions: retained until merchant deletes them or uninstalls the app
- Email logs: retained for 12 months, then automatically purged
- Activity logs: retained for 12 months, then automatically purged
- GDPR request records: retained permanently for compliance audit purposes
- Video submissions: retained until deleted by merchant or upon GDPR erasure request
6a. Cookies and Local Storage
We use the following types of cookies and browser storage:
- Essential cookies: Authentication session cookies (Supabase auth) required for the platform to function. These cannot be disabled.
- Functional storage: We use browser localStorage to store your theme preferences and UI state. No personal data is stored in localStorage.
We do not use analytics cookies, advertising cookies, or third-party tracking cookies.
7. GDPR Rights
If you are in the European Economic Area, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict processing of your data
- Data portability
To exercise these rights, contact us at the email below. For customers of Shopify merchants, data requests are handled via Shopify's GDPR webhooks.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify merchants of material changes via email or through the app dashboard.