Privacy Policy

This Privacy Policy describes how Cre8rHub Technologies Private Limited (“Cre8rHub”, “we”, “us”) collects, uses, and protects your personal information when you use cre8rhub.net (“Platform”).

This Policy is published in compliance with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

Information you provide:

• Account details: name, email address, phone number, username.
• Profile information: display name, bio, profile photo, social links.
• KYC and business details: PAN, GST number, bank account details (required for payouts).
• Content you upload: product files, images, videos, descriptions.
• Communications you send us.

Information collected automatically:

• Log data: IP address, browser type, pages visited, timestamps.
• Device information: operating system, device identifiers.
• Usage analytics: page views, clicks, conversion events on your creator page.
• Cookies and similar tracking technologies (see Section 7).

Information from third parties:

• Google OAuth: name, email, profile picture (when you sign in with Google).
• Razorpay: payment confirmation data (we do not store full card numbers).

We use your personal information to:

• Provide and operate the Platform.
• Process payments and facilitate payouts.
• Verify your identity (KYC) as required by applicable financial regulations.
• Send transactional emails: order confirmations, booking notifications, payout alerts.
• Provide customer support.
• Detect and prevent fraud, abuse, and security incidents.
• Improve the Platform through aggregated analytics.
• Comply with legal obligations.

We do not sell your personal information to third parties.

We process your personal information on the following bases:

• Contract performance: to provide the services you have signed up for.
• Legal obligation: to comply with KYC requirements under RBI guidelines and applicable Indian law.
• Legitimate interest: for fraud prevention, security, and Platform improvement.
• Consent: where required by law, we obtain your explicit consent before processing sensitive personal data.

We collect Sensitive Personal Data or Information (SPDI) as defined under the IT (SPDI) Rules, 2011 — specifically bank account details and government-issued identification numbers for KYC purposes. This data is:

• Collected only with your explicit consent for the stated purpose.
• Stored with encryption at rest and in transit.
• Not disclosed to third parties except as necessary for payment processing or as required by law.
• Retained only as long as necessary for the purpose for which it was collected or as required by law.

We share your information only with:

• Razorpay: to process payments and payouts (subject to Razorpay’s privacy policy).
• AWS (Amazon Web Services): for file storage and hosting infrastructure.
• Resend: to deliver transactional emails.
• Law enforcement or courts: when required by valid legal process.

When you use the Platform as a creator, basic profile information (name, username, bio, profile photo) is visible to the public on your creator page. Buyer information (name, email) collected through your page is associated with your account for order and lead management.

We use cookies and similar technologies to:

• Maintain your login session.
• Remember your preferences.
• Analyse Platform performance.

You can disable cookies in your browser settings, though this may affect Platform functionality. We do not use third-party advertising cookies.

We retain your personal information for as long as your account is active or as needed to provide services. Upon account deletion:

• Your public profile is immediately taken offline.
• Account and usage data is deleted within 30 days.
• Financial records (orders, invoices, payout records) are retained for 7 years as required under Indian law.

You have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your account and associated personal data (subject to legal retention requirements).
• Withdraw consent for processing based on consent, without affecting the lawfulness of prior processing.
• Lodge a complaint with the appropriate data protection authority.

To exercise your rights, email us at legal@cre8rhub.net.

We implement reasonable security practices and procedures as required by the IT (SPDI) Rules, 2011, including:

• TLS encryption for all data in transit.
• Encrypted storage for sensitive credentials.
• Access controls limiting data access to authorised personnel.
• Regular security reviews.

No system is perfectly secure. Please use a strong, unique password and enable two-factor authentication where available.

The Platform is not directed to individuals under 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us immediately.

We may update this Privacy Policy. We will notify you of material changes by email or a prominent notice on the Platform at least 15 days before they take effect. Continued use after the effective date constitutes acceptance.

For privacy-related questions or to exercise your rights, contact our Grievance Officer: