Privacy Policy

1. Who we are

This Privacy Policy describes how YoCreate collects, uses, and shares personal information when you use the platform at yocreate.com. The data controller is ZANTEMARK LIMITED, a company incorporated in the Republic of Cyprus (registration number HE426044, VAT CY10426044N), with its registered office at Arch. Makariou III, 195, NEOCLEOUS HOUSE, 3030 Limassol, Cyprus (“we”, “us”).

2. What we collect

We collect the following categories of personal information:

• Account information: name, email address, password hash (or Google sign-in identifier), role (brand, creator, manager, administrator), and the organisation you belong to.
• Creator profile data: profile details, social media handles and links, and self-reported audience and performance metrics.
• Tax information: tax identifiers you provide for payout compliance — for example US TIN / W-9 / W-8, EU and UK VAT numbers, UAE TRN, KSA VAT, India GSTIN, Indonesia NPWP, or Singapore UEN.
• Payment details: when you submit bank account information (such as IBAN/SWIFT, US routing and account number, UK sort code, or India IFSC) to receive a payout, we store it associated with the payout it relates to. We do not store full card numbers.
• Contract and confirmation data: when you sign an agreement, accept a payout, or confirm receipt through a link, we capture the email address that received the one-time-passcode, the timestamp of your confirmation, and the IP address from which it was made, together with the signed documents. This is the audit trail of your electronic signature.
• Campaign and content data: campaign briefs and objectives, content submissions and their links or files, and the performance metrics associated with them.
• Financial records: invoices, records of payments made to creators and suppliers, internal accounting (ledger) entries, and payment receipts.
• Communications: emails, support requests, and other messages you exchange with us.
• Technical data: browser type, device type, referrer, and short-lived cookies needed to keep you signed in and to throttle abusive traffic.

3. Why we use it

We use personal information to:

• operate the Service and deliver campaigns — provision accounts, run campaigns and Collabs, engage and pay creators and suppliers, deliver email notifications, and render the user interface (legal basis: performance of a contract);
• keep an audit trail of agreement signings and payout confirmations (legal basis: legitimate interest in protecting all parties, and, where applicable, performance of a contract);
• prevent fraud, abuse, and unauthorised access (legal basis: legitimate interest);
• comply with applicable financial-record-keeping, tax, and anti-money-laundering obligations (legal basis: legal obligation);
• communicate operational and service-related updates.

4. Who we share it with

We share personal information only with parties that need it to deliver the Service:

• Within a campaign. A creator's tax and banking details are used by YoCreate to pay the creator as our supplier and are not shared with clients. A client's billing information is not shared with creators.
• Service providers acting under our instruction: cloud hosting (Fly.io), transactional email (Resend), electronic signature (DocuSeal), sign-in (Google OAuth), file storage (AWS S3 / Tigris), and error monitoring (Sentry) — each bound by a data-processing agreement.
• Authorities, when we are legally required to disclose information, or where disclosure is necessary to protect rights, property, or safety.

We do not sell personal information.

5. International transfers

Our service providers operate in multiple jurisdictions, including the European Union and the United States. Where personal information is transferred outside the European Economic Area, we rely on appropriate safeguards such as Standard Contractual Clauses.

6. Retention

We retain account information for as long as your account is active, and payment-related information (including audit trails of electronic signatures and payout confirmations) for at least seven years after the payment, in line with general financial-record-keeping obligations. We may retain information longer where required by law or to defend legal claims.

7. Your rights

Depending on where you live, you have rights to access, correct, delete, restrict the processing of, or port your personal information, and to object to certain processing. EU/UK residents have the rights granted under the GDPR; California residents have the rights granted under the CCPA.

To exercise any of these rights, write to privacy@yocreate.com. We will verify your identity before acting on the request, and will respond within the timeframe required by applicable law.

You also have the right to lodge a complaint with your local data protection authority.

8. Cookies

We use a small number of strictly necessary cookies (for example, to keep you signed in, to set short-lived public-link sessions, and to apply rate limits). We do not use third-party advertising cookies. A dedicated cookie notice will be added when non-essential cookies are introduced.

9. Security

Personal information is encrypted in transit (TLS) and at rest, including column-level encryption of sensitive personal and tax identifiers. Access by our team is on a need-to-know basis, and our error-monitoring is configured not to capture sensitive request data. No system is perfectly secure, and we cannot guarantee absolute protection, but we follow industry-standard practices and will notify affected users of any breach in line with applicable law.

10. Children

The Service is not intended for individuals under 18. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please email privacy@yocreate.com and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email to the address on file or highlighted in the Service. The “Last updated” date at the top reflects the most recent revision.

12. Contact

For privacy questions or to exercise your rights, write to privacy@yocreate.com.