Privacy Policy · Creators Sphere

We are committed to handling your personal data in accordance with the Singapore Personal Data Protection Act 2012 (PDPA). By using Creators Sphere, you agree to the practices described in this policy.

1. Information we collect

Information you provide

Account details — your name, email address and password, managed through our identity provider (Keycloak) when you sign up or log in.
Profile information — details you add such as gender, date of birth and creator niche during onboarding.
Campaign content — the posts, media and proof links you submit when applying to or completing brand campaigns.

Information from linked social accounts

When you connect Instagram, we receive — with your authorisation — limited account information (such as your handle, account type and public metrics) to verify eligibility and process campaign proofs. We do not post on your behalf without your action.

Information collected automatically

Device & usage data — app version, device model, operating system and in-app activity, collected via Firebase Analytics and Crashlytics.
Push tokens — a Firebase Cloud Messaging token so we can send you campaign notifications.
Diagnostics — crash reports and performance data to keep the app reliable.

2. How we use your information

To create and manage your account and authenticate your sessions.
To match you with relevant brand campaigns and process your applications, vetting and proofs.
To verify campaign completion and facilitate your rewards.
To send you notifications about campaigns, applications and account activity.
To analyse usage, fix bugs and improve the app.
To prevent fraud and enforce our Terms of Service.

3. How we share your information

We do not sell your personal data. We share it only as needed to run the service:

Recipient	Purpose
Brands & agencies	To review your applications, content and proofs for their campaigns.
Google Firebase	Analytics, crash reporting, push notifications and remote configuration.
Identity provider (Keycloak)	Secure authentication and account management.
Meta Platforms	When you link Instagram, per their terms.
Legal authorities	Where required by law or to protect our rights and users.

4. Data retention

We keep your personal data only for as long as your account is active or as needed to provide the service, comply with legal obligations, resolve disputes and enforce agreements. You may request deletion at any time — see Delete my data.

5. Security

We use industry-standard measures including encrypted transport (HTTPS), tokenised authentication (OAuth 2.0 with PKCE) and secure on-device storage for credentials. No method of transmission is perfectly secure, but we work to protect your data.

6. Your rights

Under the PDPA you may:

Request access to the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Withdraw consent or request deletion of your account and data.
Unlink any connected social account at any time from within the app.

To exercise these rights, contact us at privacy@creatorssphere.sg.

7. Children

Creators Sphere is not intended for anyone under 18. We do not knowingly collect data from minors; if you believe a minor has used the service, contact us and we will remove the data.

8. Changes to this policy

We may update this policy from time to time. Material changes will be notified in-app or by email. Continued use after an update means you accept the revised policy.

9. Contact

[COMPANY LEGAL NAME] Pte. Ltd.
[REGISTERED ADDRESS], Singapore
Privacy enquiries: privacy@creatorssphere.sg
Support: support@creatorssphere.sg