Privacy Policy

• We collect what we need to run creator programs: contracts, videos, payouts and, if a brand connects them, TikTok sales and ad data.
• We don’t sell personal information, and we don’t share it for advertising.
• Creators’ details are visible to the team of the brand they work with, never to other brands.
• A brand’s sales, ad spend and profit are visible to that brand’s team only, never to creators.
• You can ask us for a copy of your data, or to correct or delete it, at any time.

CreatorMecca is operated by Artyom Holdings Inc. (“we”, “us”). This policy covers our website and the CreatorMecca service.

Brands use CreatorMecca to manage the creators they work with. For data a brand puts into the service about its creators and its business, the brand is the controller and we act as its processor: we handle that data on the brand’s instructions and under our agreement with them. For the accounts people use to sign in, for our website, and for billing, we are the controller.

What we collect

• Account details: your email address, name if you give it, the workspaces you belong to and your role.
• Workspace content: creators you invite, contracts, review feedback, messages, product and sample records, payout records.
• Connected TikTok data, if you connect it: TikTok Shop affiliate orders, commission, refunds and returns; TikTok Ads spend and results for Spark Ads and GMV Max. Access tokens are encrypted and can’t be read by anyone on your team.
• Billing: plan, billing contact and invoices. Card details are collected and held by Stripe; we never see the full number.
• Technical data: IP address, browser and device type, and logs needed to keep the service secure and working.

Why we use it

• To provide the service you signed up for (performance of our contract with you).
• To secure accounts, prevent abuse and fix errors (our legitimate interest in a safe, working service).
• To bill you and keep financial records (contract and legal obligation).
• To send service emails such as sign-in codes, review and payout notices. You can change notification emails in settings.

If a brand invited you, the brand decides what it asks of you and is responsible for your data in its program. We process it for them, and we are responsible for your sign-in account.

What we collect

• Contact and profile: email address, name, TikTok handle.
• Contract and signature: the contract you signed and the signature record (typed name, email, time, IP address and browser).
• Your work: draft videos you upload, captions, posted video links, Spark codes and messages with the brand.
• Payout details you give the brand so they can pay you, and payout status.
• Shipping address, if you request product samples.
• TikTok data, only if you connect your TikTok account: your basic profile and your public videos with their view, like, comment and share counts (TikTok scopes: user.info.basic, video.list). We never post, comment or message on your behalf.

Who can see it

• The team of the brand you work with. If you work with two brands, each sees only its own contracts and your work for them.
• Never other brands, and never the public.
• You never see a brand’s sales, ad spend, return on ads or profit.

Why we use it

To run the brand’s program with you: contracts, reviews, payouts, samples and messages, and to keep your account secure. We don’t use your data to advertise to you and we don’t sell it.

We use the service providers below to run CreatorMecca. They process data only on our instructions and under contracts that require them to protect it. We’ll update the Subprocessors page at least 30 days before adding a new one.

TikTok is a data source you choose to connect, not a processor of ours; its own privacy policy applies to your TikTok account. We may also disclose data if the law requires it, or as part of a merger or acquisition, in which case this policy continues to apply.

• Essential cookies keep you signed in and protect sign-in flows. The service doesn’t work without them.
• Preferences such as light or dark theme are stored in your browser.
• Product analytics, when enabled, records pseudonymous usage events with page text masked. We don’t record sessions and we don’t use advertising cookies.

We keep workspace data for as long as the workspace exists, including after its subscription ends (the workspace then stays read-only so the brand can view and export it). When a brand asks us in writing to close its workspace, we delete its data, including TikTok tokens, after giving it the chance to export, except records we must keep by law (such as invoices).

Signed contracts and signature records are kept for as long as the brand’s workspace exists, because they are the brand’s and creator’s record of the agreement. Creators can ask us to delete their sign-in account at any time: we delete their login and profile (name, handle, phone, payout and shipping details, notification settings and TikTok connection). Each brand keeps its own records of the work done for it, as it may need them for legal, tax and accounting purposes: the contract with the name and email on it, the signature record, the videos delivered and the payment records. Ask the brand directly about those records; we will help it respond.

Depending on where you live (including under the GDPR, UK GDPR and California law), you can ask to access, correct, delete or export your personal data, object to or restrict certain processing, and withdraw consent where we rely on it. We don’t sell or “share” personal information as California law defines it, and we don’t discriminate against anyone for using these rights.

Email privacy@creatormecca.com. If your request is about data a brand controls (for example, your work for that brand), we’ll pass it to the brand and help them respond. We answer within 30 days. You can also complain to your local data protection authority.

We protect data with database-level tenant isolation, encryption in transit and for stored TikTok tokens, and restricted access; see Security. Our providers store data in the United States. When we transfer personal data from the EEA or the UK, we use safeguards recognized by law, such as Standard Contractual Clauses.

CreatorMecca is a business service and isn’t meant for anyone under 18. We don’t knowingly collect data from children.

If we change this policy materially, we’ll tell signed-in users and update the date below. Questions: privacy@creatormecca.com, or write to Artyom Holdings Inc..