Privacy Policy

This Privacy Policy applies to information processed through CreatorBloom. By using the service, you acknowledge the practices described here.

1. Information we collect

• Account data: name, email, hashed password, profile fields, and account settings.
• Creator data: handle, bio, tiers, posts, subscriber interactions, and analytics snapshots.
• Content and communications: posts, comments, messages, uploaded files, and reports you submit.
• Payment metadata: processor IDs, subscription status, and billing lifecycle events.
• Technical data: IP, device/browser signals, logs, security and abuse-prevention data.
• Policy acceptance and privacy choice records: account, dates, policy or notice version, registration or sign-in method, and creator-specific contact sharing choices.
• Support and legal requests: contact details, message, content locations, declarations, signatures, and any other information you provide in a request.

Google sign-in. If you sign in with Google, we receive your Google account identifier, email address, and your name and profile picture when provided. We use these to sign you in, link your account, and provide profile and membership features. We store this information and the OAuth tokens Google supplies in our server-side database, processed by our hosting and database providers. Your name and picture may appear where your profile is displayed. Your account email is not automatically shared in CreatorBloom subscriber tools or inbox messages. The optional contact choices below also apply to Google accounts. We request only basic identity permissions (openid, email, and profile), which do not grant access to Gmail messages or Google Drive files.

2. How we use information

• Provide account access, publish content, and manage subscriptions.
• Process payouts and support payment dispute workflows.
• Maintain platform security, enforce policies, and prevent abuse.
• Analyze usage to improve reliability, moderation, and product quality.

3. Sharing of information

We may share data with:

• Infrastructure providers (for hosting, database, and file storage).
• Payment processors (such as Stripe) to process payments and payouts.
• Service providers that help operate support, notifications, and security.
• Authorities or legal counterparts when required by law or legal process.
• The creators you join: your member name, handle, and membership details, such as plan, status and billing period, are available in their subscriber tools. Your profile image can appear in conversations. Your account email is provided in their CreatorBloom tools and exports only when contact sharing is enabled as described below. Public profile information and content you choose to publish can be seen by other users.

Optional contact sharing with a creator

Contact sharing is off by default and separate for each creator. An adult-declared account with a confirmed email can choose to share that email for contact related to its membership. Joining a free or paid membership, signing in with Google, or accepting our Terms does not enable contact sharing. You can keep using memberships and the CreatorBloom inbox without sharing your email.

In this phase, CreatorBloom does not enable this optional external contact sharing for teenage accounts or accounts without a current age declaration. This is our product policy, not a statement that every jurisdiction prohibits teenagers from sharing contact information. A declaration of guardian permission is not verified parental consent and does not enable this feature. We do not collect government identity documents for these contact choices.

Review or withdraw a creator's permission in Privacy settings. Withdrawal stops future delivery of your email through CreatorBloom contact tools; it cannot retrieve copies a creator already exported. Contact us through the privacy request form for help with those copies or other rights. Sharing contact for a membership is not permission for unrelated marketing. Information you write in messages, comments, or files is shared with their intended audience separately from this account email setting.

4. Payment data

Full payment card details are handled by payment processors, not stored directly by CreatorBloom. Payment processor terms and privacy policies also apply. Paid checkout takes place on the creator's connected Stripe account. Stripe may make customer and transaction information available to the creator for payment management, refunds, disputes, and related obligations, depending on its settings. Turning off optional contact sharing in CreatorBloom does not hide transaction information from the seller in Stripe.

Cookies, browser storage, and third-party services

We use cookies for sign-in, session security, account age checks, and the Google sign-in policy acceptance flow. Browser storage also remembers your theme and can retain unfinished message, comment, or membership-tier drafts, registration details for the sign-in handoff, and pending actions for retry. Tier drafts use this tab's session storage. Drafts expire after 24 hours of inactivity and expired data is removed when you return. You can clear this data in your browser settings; doing so may sign you out or remove unsent drafts.

When you use Google sign-in or Stripe checkout, those providers may collect identifiers, device information, and information about your interaction with their services. They may associate this information with activity over time and across other sites or services, including for security and fraud prevention. Their practices and choices are described in the Google Privacy Policy and Stripe Privacy Policy.

CreatorBloom currently does not change its data practices in response to the browser's Do Not Track signal. This disclosure does not limit privacy choices required by applicable law. You can contact us through the privacy request form about your information and available choices.

5. Data retention

Support, privacy and legal submissions are stored as private cases, including your contact details, message, supplied content locations, signatures and declarations where required. Authorized administrators can review cases, record decisions and track urgent deadlines. We also keep case activity and notification delivery records. A saved request remains available for review if its email notification is delayed or fails. We retain these records only as reasonably needed to handle the request, demonstrate our response, resolve disputes and satisfy applicable preservation duties.

We retain data for as long as reasonably needed to provide the service, meet legal obligations, resolve disputes, and enforce agreements.

6. User rights

Depending on your jurisdiction, you may have rights to access, correct, delete, export, or restrict processing of your personal data, object to processing, withdraw consent where processing relies on it, or complain to your relevant supervisory authority. Use the privacy request form, provide your account email, and describe what you need. We may need information sufficient to verify your identity and authority; do not send passwords, government ID numbers, or full payment card details. Applicable law determines eligibility, exceptions, and response deadlines.

A deletion request may be subject to retention required for transactions, disputes, fraud prevention, or legal obligations. Retained records remain subject to applicable protections. Cancel any paid memberships in Dashboard → Memberships to prevent future renewals while a request is being handled.

7. International transfers

Data may be processed in countries other than your own. We use safeguards reasonably designed to protect personal information during transfers.

8. Children

CreatorBloom is not intended for children under 13 (or higher local minimum age where applicable). Before creating an account, we ask for a date of birth and country, and a state for United States accounts, to evaluate account eligibility. The full date of birth is processed for that check and is not retained in account records or the eligibility cookie. We retain the declared age group, location, assessment date and method, and any declaration of guardian permission with eligibility and policy acceptance records. This private country/state and age declaration is not part of your public profile or creator contact exports. Existing accounts may need to complete a declaration before using optional contact sharing; use the privacy request form to request a correction to an existing declaration. These are self-declared facts, not verification of identity, age, or guardianship.

An eligibility cookie expires after 30 minutes; a denial cookie can remain for 30 days to discourage repeat attempts with a different date. If you believe a child has provided personal information contrary to our age rules, use the privacy request form. We will investigate, restrict prohibited account access, and delete prohibited child data, subject to applicable legal preservation obligations. A parent or guardian can use the same form to request help with their child's account.

9. Changes to this policy

We may update this Privacy Policy and display the revised date. We will provide notice of material changes as required by law. Continued use does not substitute for consent when the law requires an affirmative choice.

10. Contact

Contact us through the privacy request form.