PRIVACY POLICY

1. INTRODUCTION

This Privacy Policy explains how The Creator List collects, uses, stores, and shares personal data when you visit the platform, create an account, browse profiles, publish content, message other users, or use paid features.

For the purposes of the UK GDPR and the Data Protection Act 2018, The Creator List acts as the data controller for the personal data described in this policy.

2. DATA WE COLLECT

Depending on how you use the platform, we may collect:

• Account data: name, username, email address, authentication identifiers, and account role.
• Linked identity data: Roblox account identifiers, Roblox username, and related identity signals returned during account linking.
• Profile data: bio, skills, tags, rates, budgets, timezone, location, availability, portfolio URLs, portfolio images, embeds, cover images, and other profile details you choose to publish.
• Project and communication data: project listings, connection requests, direct messages, message attachments, notes, support requests, reports, blocks, ratings, and reviews.
• Billing data: subscription status, plan information, billing period dates, and payment-related metadata from our billing providers. We do not store full card numbers ourselves.
• Usage and device data: IP address, browser type, device information, approximate location inferred from technical data, timestamps, and activity related to using the platform.

3. HOW WE COLLECT DATA

• Directly from you when you sign up, complete onboarding, edit your profile, post projects, upload media, message users, or contact support.
• From authentication and account-linking providers, including Clerk and Roblox-linked sign-in flows.
• From platform infrastructure and database providers used to host accounts, content, chat data, billing state, and product activity.
• Automatically through normal platform use, security logs, and technical diagnostics.

4. HOW WE USE PERSONAL DATA

We use personal data to:

• Create and manage accounts.
• Link Roblox identity and display profile signals.
• Operate profile discovery, project browsing, connection requests, messaging, ratings, reviews, and moderation systems.
• Provide billing, subscription, and Pro visibility features.
• Prevent abuse, fraud, spam, harassment, and security incidents.
• Investigate reports, resolve support issues, and enforce our Terms.
• Improve product quality, reliability, and user experience.
• Comply with legal obligations and lawful requests.

5. LAWFUL BASES FOR PROCESSING

6. PUBLIC INFORMATION

Some information you add to your profile or publish through the platform may be publicly visible. This can include your display name, Roblox-linked identity signals, public bio, tags, rates, portfolio content, reviews, and project-related information you choose to expose publicly.

Please avoid publishing personal information that you do not want other users or the public to see.

7. SHARING OF PERSONAL DATA

We may share personal data with:

• Infrastructure and service providers that help us run the platform, such as authentication, hosting, database, storage, analytics, and billing providers.
• Other users where the platform is designed to show your content or enable direct contact.
• Professional advisers, regulators, law enforcement, or courts where disclosure is legally required or reasonably necessary to protect rights, safety, or the platform.
• Buyers or successor entities in connection with a merger, acquisition, financing, reorganisation, or sale of assets.

We do not sell your identifiable personal data for third-party advertising without an appropriate lawful basis, such as your consent where consent is required.

8. INTERNATIONAL TRANSFERS

Some of our service providers may process data outside the UK. Where that happens, we use appropriate safeguards, such as adequacy regulations or approved contractual mechanisms, to protect transferred personal data.

9. DATA RETENTION

We keep personal data for as long as reasonably necessary to operate the platform, maintain records, resolve disputes, enforce our agreements, comply with legal obligations, and protect the safety and integrity of the service. Retention periods may vary depending on the data type and the reason we hold it.

10. SECURITY

We use technical and organisational measures intended to protect personal data. No internet service is completely secure, so we cannot guarantee absolute security.

11. YOUR RIGHTS

Subject to applicable law, you may have rights to access, correct, erase, restrict, object to, or export your personal data, and to withdraw consent where processing is based on consent.

You can also update some account information directly in your account settings or by contacting us.

12. CHILDREN

The platform is not intended for children under 13. If we learn that personal data from a child under 13 has been collected without appropriate permission where required, we may take steps to delete it.

13. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect product, legal, or operational changes. The latest version will appear on this page with its effective date.

14. CONTACT

Questions about this Privacy Policy or data protection requests can be sent to:

Email: [email protected]

You also have the right to complain to the Information Commissioner's Office in the United Kingdom if you believe your personal data has been handled unlawfully.