Privacy Policy
Effective Date: October 24, 2025
1. Company Information
CreatorLounge
London, England, UK.
Company Registration Number: 17062512
2. Information We Collect
Information You Provide:
- Account data: Name, email address, username, password (encrypted)
- Profile information: Bio, social media links, business details
- Content: Offers, brands, lounges, and uploaded images
- Communications: Support requests and feedback
Information We Collect Automatically:
- Usage data: Pages viewed, features used, time spent
- Device data: Browser type, IP address (anonymized), device type
- Cookies: See our Cookie Policy
- Analytics: Click events, offer performance (aggregated)
3. How We Use Your Information
We process your data under these legal bases (GDPR Article 6):
Contract Performance:
- Providing the Creator Lounge platform and features
- Processing affiliate tracking and commissions
- Managing your account and profile
Legitimate Interest:
- Improving platform performance and security
- Fraud prevention and abuse detection
- Analytics and business intelligence (anonymized)
Consent (for marketing only):
- Promotional emails (you can opt-out anytime)
- Marketing cookies (managed via cookie banner)
Legal Obligation:
- Tax compliance and financial records
- Responding to legal requests
4. Third-Party Processors
We share your data with these service providers (all GDPR-compliant):
- Supabase (USA) - Database, authentication, storage (Standard Contractual Clauses)
- Stripe (USA) - Payment processing for creator payouts (Standard Contractual Clauses)
- Affiliate Networks - Tracking affiliate commissions (AWIN, CJ, Impact, etc.)
We do NOT sell your personal data to third parties. All processors are contractually bound to GDPR standards.
5. Data Retention
Active accounts: Data retained while your account is active
Inactive accounts: Retained for 2 years after last login
Deleted accounts: 30-day grace period, then permanently deleted
Financial records: 7 years for tax compliance
Analytics data: Aggregated/anonymized, retained indefinitely
You can request immediate deletion via Settings → Privacy & Data Rights → Delete Account.
6. Your GDPR Rights
Under GDPR, you have the following rights:
✓ Right to Access
Download your data anytime from Settings
✓ Right to Erasure
Delete your account from Settings
✓ Right to Rectification
Update your profile anytime
✓ Right to Portability
Export data in JSON format
✓ Right to Object
Opt-out of marketing emails
✓ Right to Restrict
Contact partnerships@creatorlounge.io
To exercise any of these rights, email partnerships@creatorlounge.io or use the tools in Settings → Privacy & Data Rights. We respond within 30 days.
7. Security Measures
We protect your data with:
- Encryption in transit (TLS/SSL) and at rest (AES-256)
- Row-Level Security (RLS) policies on all database tables
- Regular security audits and vulnerability scanning
- Access controls and authentication (OAuth 2.0)
- IP anonymization for analytics
- Automated backups and disaster recovery
8. Data Breach Notification
In the unlikely event of a data breach affecting your personal information, we will:
- Notify affected users within 72 hours
- Report to relevant supervisory authorities as required
- Provide details of the breach and remediation steps
Report security concerns to partnerships@creatorlounge.io
9. Children's Privacy
Our services are not intended for individuals under 18 years old. We do not knowingly collect personal information from minors. If you become aware that a minor has provided us with personal information, please contact us immediately at partnerships@creatorlounge.io
10. Changes to This Policy
We may update this privacy policy to reflect changes in our practices or legal requirements. Material changes will be communicated via:
- Email notification to registered users
- Prominent notice on our platform
- Updated "Effective Date" at the top of this page
Continued use of Creator Lounge after changes constitutes acceptance of the updated policy.
11. Supervisory Authority
If you're located in the EU/EEA, you have the right to lodge a complaint with your local data protection authority:
UK: Information Commissioner's Office (ICO) - ico.org.uk
EU: Find your authority at EDPB website
12. Contact & Data Protection Officer
For privacy questions:
For data requests (access, deletion, etc.):
Use Settings → Privacy & Data Rights or email partnerships@creatorlounge.io
Mailing Address:
CreatorLounge
London, England, UK.