Privacy Policy

• We collect what we need to run creator programs: contracts, videos, payouts and, if a brand connects them, TikTok sales and ad data.
• We don’t sell personal information, and we don’t share it for advertising.
• Creators’ details are visible to the team of the brand they work with, never to other brands.
• A brand’s sales, ad spend and profit are visible to that brand’s team only, never to creators.
• You can ask us for a copy of your data, or to correct or delete it, at any time.

CreatorMecca is operated by Artyom Holdings Inc. (“we”, “us”). This policy covers our website and the CreatorMecca service.

Brands use CreatorMecca to manage the creators they work with. For data a brand puts into the service about its creators and its business, the brand is the controller and we act as its processor: we handle that data on the brand’s instructions and under our agreement with them. For the accounts people use to sign in, for our website, and for billing, we are the controller.

What we collect

• Account details: your email address, name if you give it, the workspaces you belong to and your role.
• Workspace content: creators you invite, contracts, review feedback, messages, product and sample records, payout records.
• Connected TikTok data, if you connect it: TikTok Shop affiliate orders, commission, refunds and returns; TikTok Ads spend and results for Spark Ads and GMV Max. Access tokens are encrypted and can’t be read by anyone on your team.
• Billing: plan, billing contact and invoices. Card details are collected and held by Stripe; we never see the full number.
• Technical data: IP address, browser and device type, and logs needed to keep the service secure and working.

Why we use it

• To provide the service you signed up for (performance of our contract with you).
• To secure accounts, prevent abuse and fix errors (our legitimate interest in a safe, working service).
• To bill you and keep financial records (contract and legal obligation).
• To send service emails such as sign-in codes, review and payout notices. You can change notification emails in settings.

If a brand invited you, the brand decides what it asks of you and is responsible for your data in its program. We process it for them, and we are responsible for your sign-in account.

What we collect

• Contact and profile: email address, name, TikTok handle.
• Contract and signature: the contract you signed and the signature record (typed name, email, time, IP address and browser).
• Your work: draft videos you upload, captions, posted video links, Spark codes and messages with the brand.
• Payout details you give the brand so they can pay you, and payout status.
• Shipping address, if you request product samples.
• TikTok data, only if you connect your TikTok account: your basic profile and your public videos with their view, like, comment and share counts (TikTok scopes: user.info.basic, video.list). We never post, comment or message on your behalf.

Who can see it

• The team of the brand you work with. If you work with two brands, each sees only its own contracts and your work for them.
• Never other brands, and never the public.
• You never see a brand’s sales, ad spend, return on ads or profit.

Why we use it

To run the brand’s program with you: contracts, reviews, payouts, samples and messages, and to keep your account secure. We don’t use your data to advertise to you and we don’t sell it.

When you ask for a call on this website we collect what you type into the form: your name, work email, company, website, role, roughly how many creators you run, whether you sell on TikTok Shop, the tools you use today, when you want to start and any notes.

We use it only to reply and to prepare for the call (our legitimate interest in answering you). The form is emailed to our team through Resend; it isn’t added to the product or shared with anyone else. Your IP address is used briefly to limit repeated submissions and isn’t stored. If you book a time, Calendly handles the scheduling under its own privacy policy. Ask us at privacy@creatormecca.com and we’ll delete your enquiry.

We use the service providers below to run CreatorMecca. They process data only on our instructions and under contracts that require them to protect it. We’ll update the Subprocessors page at least 30 days before adding a new one.

TikTok is a data source you choose to connect, not a processor of ours; its own privacy policy applies to your TikTok account. We may also disclose data if the law requires it, or as part of a merger or acquisition, in which case this policy continues to apply.

• Essential cookies keep you signed in and protect sign-in flows. The service doesn’t work without them.
• Preferences such as light or dark theme are stored in your browser.
• Website analytics. This website uses privacy-friendly, cookie-free analytics (Vercel Web Analytics). We see aggregate page views, referrers, device type and country. It sets no cookies, and we use no advertising cookies.
• Product analytics, when enabled, records pseudonymous usage events with page text masked. We don’t record sessions and we don’t use advertising cookies.

We keep workspace data while the workspace is active. When a brand closes its workspace, we delete its data, including TikTok tokens, within a set period after any export window, except records we must keep by law (such as invoices).

Signed contracts and signature records are kept for as long as the brand’s workspace exists, because they are the brand’s and creator’s record of the agreement. Creators can ask us to delete their sign-in account at any time; the brand keeps its own records of work done for it.

Depending on where you live (including under the GDPR, UK GDPR and California law), you can ask to access, correct, delete or export your personal data, object to or restrict certain processing, and withdraw consent where we rely on it. We don’t sell or “share” personal information as California law defines it, and we don’t discriminate against anyone for using these rights.

Email privacy@creatormecca.com. If your request is about data a brand controls (for example, your work for that brand), we’ll pass it to the brand and help them respond. We answer within 30 days. You can also complain to your local data protection authority.

We protect data with database-level tenant isolation, encryption in transit and for stored TikTok tokens, and restricted access; see Security. Our providers store data in the United States. When we transfer personal data from the EEA or the UK, we use safeguards recognized by law, such as Standard Contractual Clauses.

CreatorMecca is a business service and isn’t meant for anyone under 18. We don’t knowingly collect data from children.

If we change this policy materially, we’ll tell signed-in users and update the date below. Questions: privacy@creatormecca.com, or write to Artyom Holdings Inc..