Privacy Policy

This policy explains how Creo handles the personal information of creators and subscribers who use Creo. We don’t sell your personal information.

• Account details: your email address and name. If you sign in with Google, we also receive your Google account ID and the email Google has verified. We don’t store passwords: you sign in with codes and links sent to your email, and we keep only a scrambled form of each code.
• Creator profile: your username, display name, bio, photo, category and the communities you create, including their names, descriptions and prices.
• Content and activity: posts and media you publish, and your comments, likes, reposts, bookmarks and the creators you follow.
• Subscriptions and payments: which communities you subscribe to, amounts, dates, payment references and status from our payment partners. Card and bank login details are entered on the partner’s page and never reach Creo.
• Payout details (creators): the bank name, account number and account name you add, which we verify with our payment partner and store encrypted, and your earnings and payout history.
• Telegram and WhatsApp (if you use group access): your Telegram ID and username, or your WhatsApp phone number, and whether you’re in the group. For groups that creators connect, our automated account receives the messages sent there, but only looks for verification codes. We don’t store the content of group messages.
• Notifications: your notification preferences, and a push token for each browser where you turn push notifications on.
• Technical information: your IP address, browser and device type, and when you signed in. We use these to keep accounts secure (for example, to limit how many sign-in codes can be requested), show you your sessions, and fix errors.

• To run your account, communities, subscriptions and public profile
• To take payments, confirm access, calculate earnings and send payouts
• To let paying members into Telegram and WhatsApp groups, and remove them when their subscription ends
• To send emails and notifications the service needs (sign-in codes, payment and payout updates) and the optional alerts you choose in Notification settings
• To prevent fraud and abuse and enforce our Terms and Content Guidelines
• To fix errors and improve Creo
• To meet legal obligations, such as keeping financial records

• Everyone: your public profile and any posts or communities you make public. Your comments are visible to people who can see the post.
• Creators: a creator can see that you subscribed, your public name and username, and your activity on their posts, such as comments and likes.
• Service providers who process data for us under contract: payment partners (such as Bachs, Paystack and Bani) for checkout, account verification and payouts; Google and Firebase for Google sign-in and push notifications; an email delivery provider; Cloudinary for image and video hosting; and our website and database hosting providers.
• Telegram and WhatsApp: if you use group access, your Telegram ID or phone number is used within those services, which have their own privacy policies.
• Authorities when the law requires it, or to protect people from harm.
• A buyer of our business, if Creo is merged or sold, under this same policy.

We don’t use advertising cookies. See the Cookie Policy for exactly what we store in your browser and why.

We keep your account information while your account is open. Sign-in codes expire after 10 minutes and work once. Sessions end after 30 days without activity, or when you sign out.

When you delete your account we delete your profile, content and subscriptions. We keep records of payments, payouts and disputes for as long as the law requires, even after an account is closed.

We use encryption in transit, encrypted storage for payout details, single-use sign-in codes, rate limits and access controls to protect your information. No system is perfectly secure, so please keep your email account secure too.

Depending on where you live, including under the Nigeria Data Protection Act 2023, you can ask us to:

• give you a copy of your personal information
• correct it, or delete it where we don’t need to keep it by law
• stop or limit some uses of it, or object to them
• send it to you or another service in a portable format
• withdraw consent you’ve given, such as for optional notifications

Email support@creobase.app. You can also complain to the Nigeria Data Protection Commission or your local data protection authority.

Some of our service providers process data outside your country. When that happens, we rely on contracts and safeguards that protect your information.

Creo is only for people aged 18 and over. We don’t knowingly collect information from anyone younger; if we learn we have, we’ll delete it.

When we change this policy we update the date at the top, and we’ll tell you about important changes by email or in the app.

Questions about your privacy? Email support@creobase.app.