Privacy policy.

Account info. Name, email, username, password (hashed), role (creator or brand), and profile details you add: bio, industry, location, avatar, banner, social handles, website.

Content you create. Media kits, campaign briefs, pitches, applications, submissions, messages routed through Bae, and any files you upload.

Social + audience data. If you connect Instagram, TikTok, YouTube, LinkedIn, or other supported platforms, we import publicly available metrics (follower count, engagement rate, top content) to build your media kit and rank matches.

Payment info. Payments flow through Stripe and Stripe Connect. We store Stripe customer and account IDs plus transaction metadata. We do not store card numbers, bank account numbers, or CVVs. Stripe handles those directly.

Device + usage data. IP address, device model, OS version, app version, timestamps, and the pages or screens you visit. Used for debugging, security, and product analytics.

Communications. Emails, in-app messages to Bae, and support requests, so we can help you and improve the product.

• Run your account and the features you asked for: matching, pitching, media kit, payments.
• Rank campaigns and creators using our AI models (niche fit, audience overlap, engagement, price fit).
• Generate drafts (pitches, briefs, rate suggestions) that you review and edit before anything is sent.
• Process payments, calculate the 10% platform fee, and settle funds via Stripe Connect.
• Prevent fraud, spam, and abuse, and investigate disputes.
• Send transactional email (payment receipts, application updates) and, only if you opt in, product news.

We do not sell your data. We do not train third-party AI models on your private content. We do not publish anything on your behalf without your explicit approval.

We share the minimum data required with the following categories of providers, all under contract to protect it:

• Stripe. Payments, payouts, tax forms, KYC verification.
• AI providers (Anthropic, OpenAI, or equivalent) to power pitch drafts, matching, and negotiation assistance. Content sent for inference is not used to train their models.
• Cloud infrastructure (US-based) for hosting, storage, and encryption in transit and at rest.
• Analytics and error monitoring to keep the app working and diagnose crashes. Aggregated and anonymised where possible.
• Brands and creators you collaborate with. The profile fields, media kit sections, pitches, and messages you choose to share as part of an application or active collab.

We may also share data if legally required (subpoena, court order, government request) or to protect someone's safety. When possible, we'll notify you first.

• Access. Request a copy of the data we hold about you.
• Correction. Edit your profile, media kit, and account details from within the app at any time.
• Deletion. Delete your account and associated data from the app, or email us to do it for you. We retain limited records (transactions, tax forms) where the law requires.
• Portability. Export your media kit as PDF; request a data export in a machine-readable format.
• Opt-out. Unsubscribe from product email at the footer of any message. Transactional email (receipts, security alerts) cannot be turned off while your account is active.

Users in the EEA, UK, and California have additional rights (including the right to lodge a complaint with a supervisory authority). Contact us and we'll honour them.

We keep your account and its content for as long as your account is active. After deletion we purge personal data within 30 days, except:

• Transaction records: 7 years, for tax and accounting compliance.
• Aggregated, anonymised analytics: retained indefinitely; cannot be tied back to you.
• Backups: cleared on their normal rotation (up to 90 days).

Data is encrypted in transit (TLS 1.2+) and at rest. Passwords are hashed with a modern algorithm (never stored in plain text). Access to production systems is limited to on-call engineers and audited. We take security seriously, but no system is perfectly secure. If you find a vulnerability, please email us.

CreatorBAE is operated from the United States and our servers are US-based. If you access the service from outside the US, your data will be transferred to and processed in the US under standard contractual clauses or equivalent safeguards.

CreatorBAE is not intended for anyone under 16. If you believe a minor has created an account, contact us and we'll remove it.

The web app uses cookies and local storage for essential things (keeping you logged in, remembering preferences) and for basic analytics. No third-party advertising cookies. You can disable cookies in your browser, but parts of the site will stop working.

When we make material changes, we'll update the "last updated" date at the top and notify active users in-app or by email. Continued use after the change means you accept the new version.

Questions, requests, or complaints about your data:

• Community and product feedback: @creatorbae.ai on Instagram
• Collabs and press: collab@creatorbae.com
• Enterprise partnerships: partners@creatorbae.ai
• Account, payment, and privacy requests: message Bae in the app.

Made in San Francisco.