Privacy Policy

Last Updated: October 12, 2025

Effective Date: January 1, 2025

Introduction

Welcome to Creator Lookup ("we," "us," or "our"), a SaaS platform and professional services provider specializing in influencer discovery, verified creator data, outreach management tools, and AI-powered creator research. We operate both as a software platform and as a service provider for influencer marketing campaigns.

We are committed to protecting your privacy and being transparent about our data practices. This Privacy Policy explains how we collect, use, store, share, and protect your information when you use our platform at creatorlookup.com (the "Platform") or engage our professional services.

By using Creator Lookup, you agree to the practices described in this Privacy Policy.

  1. Information We Collect

We collect different types of information depending on whether you're using our Platform or engaging our services.

  1. Information You Provide Directly

    1. Account Information:

      1. Full name

      2. Email address

      3. Company name and position

      4. Phone number (optional)

      5. Password (encrypted)

      6. Billing information (processed through Stripe; we do not store full credit card details)

    2. Service Engagement Information:

      1. Campaign briefs and objectives

      2. Target audience specifications

      3. Budget information

      4. Brand guidelines and creative assets

      5. Communication preferences

      6. Feedback and support requests

    3. User-Generated Content:

      1. Messages sent through our platform

      2. Notes and tags on creator profiles

      3. Campaign reports and custom lists

      4. Any content you upload or create using our tools


  1. Creator Data We Collect and Store
    Important Note: We collect publicly accessible information about social media creators (influencers) to provide our discovery and outreach services. Creators themselves do not sign up for or use our Platform. All creator data we collect is:

    1. Publicly available from social media platforms (Instagram, TikTok, YouTube, etc.)

    2. Scraped or accessed via official APIs where permitted

    3. Verified and enriched by our team


    Creator Data Includes:

    1. Social media handles and profile URLs

    2. Public contact information (business emails found in bios or through verification)

    3. Follower counts and engagement metrics

    4. Content categories and keywords

    5. Public bio information

    6. Audience demographics (when publicly available or estimated)

    7. Historical performance data

    8. Rate card information (when shared publicly or provided to us)


    Creator Data Rights: If you are a creator and want your information removed from our database, please see Section 9 (Your Privacy Rights).


  1. Information We Collect Automatically

    1. Usage Data:

    2. IP address and geographic location (city/country level)

    3. Device type and operating system

    4. Browser type and version

    5. Pages visited and features used

    6. Time spent on pages

    7. Referring URLs

    8. Session duration and frequency


    Cookies and Tracking Technologies:

    1. We use cookies and similar technologies to enhance your experience and analyze platform usage. We implement a privacy-first approach using server-side Google Tag Manager (sGTM) and PostHog analytics.


      Types of Cookies We Use:


      Cookie TypePurposeDurationProviderEssential CookiesAuthentication, security, core platform functionalitySession/1 yearCreator LookupAnalytics CookiesUsage patterns, feature adoption, performance monitoring1 yearPostHog (privacy-focused)Marketing CookiesAd performance tracking, conversion attribution90 daysRewardful (referral tracking)


      How We Use First-Party Tracking: We use privacy-focused analytics that means:

      1. Tracking happens through first-party cookies (under creatorlookup.com domain)

      2. More privacy-friendly than traditional third-party tracking

      3. Reduced browser fingerprinting

      4. You maintain more control over your data


      PostHog Analytics: We use PostHog for product analytics:

      1. Cloud-hosted instance (US/EU)

      2. Privacy-focused alternative to Google Analytics

      3. Session recordings for UX improvement

      4. Feature flag management

      5. User behavior funnels and analytics


      Cookie Controls: You can control cookies through your browser settings. However, disabling essential cookies may affect platform functionality. To opt out of analytics:

      1. Enable "Do Not Track" in your browser (we respect DNT signals where feasible)

      2. Use browser extensions like Privacy Badger or uBlock Origin

      3. Adjust your browser's privacy settings to block third-party cookies


  1. Information from Third-Party Sources

    1. Payment Processing:

    2. Transaction data from Stripe (payment status, amount, date)

    3. We do not store full credit card numbers

    4. Social Media Platforms:

      1. Public creator data from Instagram, TikTok, YouTube, etc.

      2. OAuth authentication data (if you connect social accounts)

    5. Email Service Providers:

      1. Email delivery status and engagement (opens, clicks) for outreach campaigns

      2. Provided by third-party email delivery services as needed for campaign execution


  1. How We Use Your Information

  1. Platform Services (SaaS)

    1. To Provide Core Functionality:

      1. Operate and maintain your account

      2. Enable creator search and discovery

      3. Display verified creator data and analytics

      4. Process payments and manage subscriptions

      5. Provide customer support

    2. To Improve Our Platform:

      1. Analyze usage patterns to optimize features

      2. Conduct A/B testing for UX improvements

      3. Train and improve AI/ML models for creator matching

      4. Identify and fix bugs

      5. Develop new features based on user behavior

    3. To Communicate with You:

      1. Send transactional emails (receipts, password resets, account alerts)

      2. Provide product updates and feature announcements

      3. Share tips and best practices for influencer marketing

      4. Request feedback on your experience

  2. Professional Services

    1. To Deliver Campaign Services:

      1. Execute influencer outreach on your behalf

      2. Manage creator relationships and negotiations

      3. Monitor campaign performance and deliverables

      4. Provide strategy consulting and market research

      5. Generate custom reports and analytics

    2. To Facilitate Transactions:

      1. Hold campaign funds in escrow

      2. Process creator payments

      3. Track contract fulfillment

      4. Handle dispute resolution

  3. Legal and Security Purposes

    1. To Comply with Legal Obligations:

      1. Respond to subpoenas, court orders, or legal processes

      2. Enforce our Terms of Service

      3. Protect against fraud and unauthorized access

      4. Comply with tax and financial regulations

    2. To Protect Our Platform:

      1. Detect and prevent security threats

      2. Monitor for Terms violations

      3. Prevent data scraping and unauthorized API usage

      4. Maintain platform integrity


  1. AI and Automated Decision-Making

We use artificial intelligence and machine learning to enhance our services. Here's how:

  1. AI-Powered Features

    1. Creator Matching Algorithm:

      1. We use AI to analyze creator profiles and match them with brand requirements

      2. Factors include: audience demographics, engagement rates, content style, past collaborations

      3. Human oversight: Final selections for service campaigns are always reviewed by our team

    2. Content Analysis:

      1. Natural language processing (NLP) to categorize creator content

      2. Image recognition to identify content themes and brand alignment

      3. Sentiment analysis for brand safety

    3. Pricing Predictions:

      1. ML models estimate creator rates based on historical data

      2. Used to provide budget guidance, not final pricing

    4. Email Optimization:

      1. AI-powered tools assist with message optimization for outreach campaigns

      2. A/B testing to improve campaign performance

  2. Your Rights Regarding Automated Decisions

    1. You can request human review of any AI-generated recommendations

    2. You can opt out of AI-powered features in your account settings (may limit functionality)

    3. We do not use AI to make fully automated decisions that significantly affect you without human intervention


  1. Sharing Your Information

We do not sell your personal information to anyone. We only share data in the following circumstances:

  1. With Your Consent

    1. When You Use Our Outreach Services:

      1. Your brand information is shared with creators you want to work with

      2. Campaign briefs and creative requirements are disclosed to selected creators

      3. Your contact information may be shared to facilitate collaboration

    2. When You Export Data:

      1. Creator contact information you export from our platform becomes your responsibility

      2. You agree to use it in compliance with anti-spam laws (CAN-SPAM, GDPR, CASL)

  2. Service Providers (Processors)

    1. We work with trusted third-party service providers who help us operate our Platform and deliver services:

      1. ProviderServiceData SharedLocationSupabaseDatabase hostingAccount data, usage logsUS/EU (configurable)StripePayment processingBilling info, transaction dataUS (GDPR-compliant)PostHogAnalyticsUsage data, session recordingsUS/EU cloudVercelPlatform hostingTechnical logs, IP addressesGlobal CDNRewardfulReferral trackingReferral attribution dataUSAnthropic (Claude AI)AI processingText data for analysis (no PII)US

    2. Processor Agreements: All service providers are bound by data processing agreements and can only use your data as instructed by us.

  3. Legal Requirements

    1. We may disclose your information if required by law or if we believe in good faith that such action is necessary to:

      1. Comply with legal obligations (subpoenas, court orders, regulatory requests)

      2. Protect and defend our rights or property

      3. Prevent fraud or security threats

      4. Protect the safety of users or the public

  4. Business Transfers

    1. If Creator Lookup is involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our Platform before your information is transferred and becomes subject to a different privacy policy.

  5. Aggregated and Anonymized Data

    1. We may share aggregated, non-identifiable data publicly or with partners:

    2. Industry benchmarks (e.g., "Average engagement rate for beauty creators")

    3. Platform usage statistics

    4. Market research reports

This data cannot be used to identify you or any individual user.

We do not sell or rent your personal information to third parties. We may share your information in the following circumstances:

  • Service Providers: We may employ third-party companies and individuals to facilitate our service, provide the service on our behalf, perform service-related services, or assist us in analyzing how our service is used.

  • Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).

  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal information may be transferred.


  1. International Data Transfers

Creator Lookup is based in the United States. If you access our Platform from outside the US, please be aware that your information will be transferred to, stored, and processed in the United States and other countries where our service providers operate.

  1. For European Users (GDPR):

    1. We comply with GDPR requirements for international data transfers

    2. We use Standard Contractual Clauses (SCCs) approved by the European Commission

    3. Our service providers are Privacy Shield certified or have adequate safeguards in place

    4. You have specific rights under GDPR (see Section 9)

  2. For California Users (CCPA/CPRA):

    1. We comply with the California Consumer Privacy Act and California Privacy Rights Act

    2. You have specific rights under California law (see Section 9)

  3. For Canadian Users (PIPEDA/CASL):

    1. We comply with Canada's anti-spam legislation

    2. We obtain proper consent for commercial electronic messages

  4. For UK Users:

    1. We comply with UK GDPR and Data Protection Act 2018

    2. We have a lawful basis for processing your data


  1. Data Security

We take data security seriously and implement industry-standard measures to protect your information:

  1. Technical Safeguards

    1. Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)

    2. Authentication: Passwords are hashed using bcrypt; OAuth support via Google

    3. Access Controls: Role-based access control (RBAC) limits who can access what data

    4. Infrastructure: We use Supabase with row-level security (RLS) policies

    5. Monitoring: Security monitoring and automated threat detection

    6. Regular Updates: Ongoing security audits and vulnerability assessments

  2. Organizational Safeguards

    1. Employee background checks and confidentiality agreements

    2. Data access is limited to personnel who need it to perform their jobs

    3. Security training for all team members

    4. Incident response plan for data breaches

  3. Important Limitation

    1. No system is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

    2. If you suspect unauthorized access to your account, contact us immediately at security@creatorlookup.com.

  1. Data Retention

We retain your information only as long as necessary to provide services and comply with legal obligations.

  1. Retention Periods

Data TypeRetention PeriodReasonAccount InformationDuration of account + 30 days after deletion requestService delivery, legal compliancePayment Records7 years after transactionTax and financial regulationsCampaign DataDuration of account + 90 daysService delivery, dispute resolutionUsage Logs2 yearsAnalytics, security monitoringCreator DatabaseOngoing (updated regularly)Core platform functionalitySupport Communications3 yearsCustomer service, quality assuranceMarketing Cookies90 daysAd attributionAnalytics Cookies1 yearProduct improvement

  1. Deletion Process

    1. When you delete your account:

    2. Your personal information is marked for deletion within 30 days

    3. Campaign data is anonymized (creator interactions are preserved for analytics)

    4. Backups containing your data are deleted within 90 days

    5. Payment records are retained for legal compliance (7 years)

    6. Note: Some information may be retained in aggregated, anonymized form for analytics and reporting.

  2. Creator Data Retention

    1. Creator data in our database is:

      1. Updated regularly to ensure accuracy

      2. Removed if a creator requests deletion (see Section 9.4)

      3. Purged if inactive or accounts are deleted for over 1 year

      4. Retained as long as it serves a legitimate business interest (discovery platform)


  1. Third-Party Links and Integrations

Our Platform may contain links to third-party websites, services, or social media platforms (Instagram, TikTok, YouTube, etc.). We are not responsible for the privacy practices of these external sites.

  1. When you click on external links:

    1. You leave our Platform and our Privacy Policy no longer applies

    2. We encourage you to read the privacy policies of any site you visit

    3. We do not control or endorse third-party content

    4. OAuth Integrations:

      1. If you connect your social media accounts, we only access data you explicitly authorize

      2. You can revoke access at any time through your account settings or the third-party platform


  1. Your Privacy Rights

Your rights depend on your location and applicable laws. We honor all rights to the maximum extent possible.

  1. Rights for All Users

    1. Access: Request a copy of the personal information we hold about you

    2. Correction: Request correction of inaccurate or incomplete information

    3. Deletion: Request deletion of your personal information (subject to legal retention requirements)

    4. Opt-Out of Marketing: Unsubscribe from promotional emails (transactional emails will continue)

    5. Cookie Controls: Manage cookie preferences through your browser settings

    6. Account Closure: Contact support@creatorlookup.com to close your account

  2. GDPR Rights (European Users)

    1. In addition to the above, EU/EEA users have the right to:

    2. Data Portability: Receive your data in a structured, machine-readable format

    3. Restriction of Processing: Request that we limit how we use your data

    4. Object to Processing: Object to processing based on legitimate interests or direct marketing

    5. Withdraw Consent: Withdraw consent at any time (where processing is based on consent)

    6. Lodge a Complaint: File a complaint with your local data protection authority

    7. Legal Basis for Processing:

      1. Contract Performance: To provide services you've requested

      2. Legitimate Interests: To improve our platform, prevent fraud, and conduct analytics

      3. Legal Obligation: To comply with laws and regulations

      4. Consent: For marketing communications and optional features

  3. CCPA/CPRA Rights (California Users)

    1. California residents have the right to:

      1. Know: What personal information we collect, use, disclose, and sell (we don't sell)

      2. Delete: Request deletion of your personal information

      3. Opt-Out of Sale: We do not sell personal information, so there's nothing to opt out of

      4. Non-Discrimination: We won't discriminate against you for exercising your rights

      5. Correct: Request correction of inaccurate information (under CPRA)

      6. Limit Use of Sensitive Information: We don't collect or use sensitive personal information beyond what's necessary

      7. California "Shine the Light": Request information about data shared with third parties for their marketing purposes (we don't do this)

  4. Creator Rights (If You're an Influencer in Our Database)

    1. If you are a creator whose information is in our database:

      1. Access: Request to see what information we have about you

      2. Correction: Request correction of inaccurate data (e.g., wrong email, outdated metrics)

      3. Deletion/Opt-Out: Request removal from our database

    2. Note: We may retain publicly available data for analytics purposes

    3. Your public profiles will still be accessible on social media platforms

    4. Update Your Information: If your contact info changes, email us to update your record

    5. To exercise these rights, email creators@creatorlookup.com with:

    6. Your social media handle(s)

    7. The email address we have on file (if known)

    8. Proof of identity (link to your verified social media profile)

    9. We will respond within 30 days (or as required by applicable law).

  5. How to Exercise Your Rights

    1. Email: privacy@creatorlookup.com

    2. Mail: Creator Lookup, Attn: Privacy Team, [5310 NW 104TH CT, Miami, FL, 33178]

    3. Account Settings: Many rights can be exercised directly through your account dashboard

    4. Response Time: We respond to requests within 30 days (45 days for complex requests)

    5. Verification: We may ask for additional information to verify your identity before processing requests


  1. Chrildren's Privacy (COPPA Compliance)

Creator Lookup is not intended for children under 13 years of age (or under 16 in the EU/EEA). We do not knowingly collect personal information from children.

If you are under 13 (or 16 in the EU):

  1. Do not create an account

  2. Do not provide any personal information

  3. Do not use our Platform or services

  4. If we discover we have collected information from a child:

    1. We will delete it immediately

    2. We will terminate the account

    3. We will notify parents/guardians if required by law

    4. If you believe a child has provided information to us, contact us immediately at privacy@creatorlookup.com.

  5. Note on Creator Data:

    1. Our database may include public profiles of creators under 18

    2. We treat minor creator data with extra care and do not facilitate direct contact without verification

    3. We comply with platform-specific rules regarding minor creators (e.g., Instagram's policies)


  1. Data Minimization and Privacy by Design

We follow the principle of data minimization: we only collect data we actually need.

  1. How we minimize data collection:

    1. We don't require phone numbers for account creation

    2. We don't track precise GPS location (only city/country from IP address)

    3. We don't collect biometric data or health information

    4. We don't require social media connections for basic platform use

    5. We aggregate and anonymize data wherever possible for analytics

  2. Privacy by Design:

    1. We build features with privacy considerations from the start

    2. You can use our platform with minimal data sharing

    3. We conduct privacy reviews for new features

    4. We provide transparency about our data practices


  1. California "Shine the Light" Disclosure

California Civil Code Section 1798.83 permits California residents to request information about our disclosure of personal information to third parties for their direct marketing purposes.

We do not share your personal information with third parties for their direct marketing purposes.

If you have questions, contact us at privacy@creatorlookup.com.


  1. Do Not Track Signals

Some browsers transmit "Do Not Track" (DNT) signals. Currently, there is no industry standard for how to respond to DNT.

Our approach:

We respect browser DNT signals where technically feasible with our analytics provider (PostHog)

You can opt out of analytics through your browser settings

Essential platform functionality may still require some data collection for service operation


  1. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations.

When we make changes:

  1. We will update the "Last Updated" date at the top

  2. We will notify you via email if changes are material (30 days' notice)

  3. We will post a notice on our Platform

  4. Continued use after changes constitutes acceptance

  5. We encourage you to review this Privacy Policy periodically.


  1. Contact Us

For Privacy Questions or to Exercise Your Rights:

Email: privacy@creatorlookup.com

Creator-Specific Inquiries: creators@creatorlookup.com

Security Issues: security@creatorlookup.com

General Support: support@creatorlookup.com

Mail:

Creator Lookup

Attn: Privacy Team

[5310 NW 104TH CT]

[Miami, Florida, 33178]

Response Time: We aim to respond within 48 hours for general inquiries and within 30 days for formal rights requests.


  1. European Representative (GDPR)

If you are in the EU/EEA and have concerns that we have not addressed satisfactorily, you have the right to lodge a complaint with your local data protection authority.


  1. Glossary

Personal Information: Information that identifies, relates to, or could reasonably be linked to you

Cookies: Small text files stored on your device to remember preferences and track usage

Processing: Any operation performed on personal data (collection, storage, use, disclosure, deletion)

Data Controller: The entity that determines the purposes and means of processing personal data (Creator Lookup)

Data Processor: An entity that processes data on behalf of the controller (our service providers)

Legitimate Interest: A legal basis for processing under GDPR where we have a valid business reason that doesn't override your rights

By using Creator Lookup, you acknowledge that you have read and understood this Privacy Policy.

Last Updated: October 12, 2025