Legal
Privacy Policy
Last updated: 24 September 2026
1. Who we are
The Creator List is provided by JRER Tech Holdings Ltd, company number 17026241, of 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.
We are the controller for personal data used to operate accounts, subscriptions, the marketplace and the Service. When a customer uploads personal data solely for its own private workspace, that customer may be the controller and we may process the data on its behalf, depending on the circumstances.
2. Information we collect
Account and organisation data
Names, email addresses, authentication identifiers, company details, roles, approval status, preferences and account activity.
Creator and business profiles
Biographies, niches, locations, social handles and metrics, profile images, portfolio information, rates where enabled, and other details supplied or obtained from public social profiles.
Workspace and communication data
Client and participant details, briefs, pitches, proposals, agreements, deadlines, messages, comments, approvals, audit events, files, videos and post copy.
Billing and payment data
Stripe customer, subscription, payment and payout identifiers; plan and subscription status; invoice amounts and payment events. We do not receive complete payment-card numbers.
Technical and support data
IP address, browser and device information, cookies, logs, feature usage, diagnostic data, support requests and related correspondence.
3. Where information comes from
We obtain information:
- directly from you when you register, create content or contact us;
- from people who invite you to a workspace or provide your details for a project;
- from public social profiles and our social-profile data provider;
- from authentication, payment and other service providers; and
- automatically when you use the Service.
4. How and why we use information
We use personal data to:
- create, authenticate, approve and administer accounts;
- provide creator tools, private workspaces, marketplace functions, files, review, messaging and notifications;
- process subscriptions, marketplace payments, refunds and payouts;
- respond to support requests and send operational emails;
- secure, troubleshoot and improve the Service;
- prevent misuse, fraud and breaches of our terms; and
- meet legal, accounting and regulatory obligations.
Our legal bases are performance of our contract with you, compliance with legal obligations, our legitimate interests in operating and protecting the Service, and consent where the law requires it. If we rely on consent, you may withdraw it at any time, without affecting earlier processing.
5. Who receives information
We share information only as needed to provide and protect the Service, complete transactions, follow your instructions, or meet legal requirements. Recipients may include other authorised project participants and these service providers:
Approved creator profiles and active business profiles are visible to signed-in marketplace users. This directory information can include the profile details, social metrics and selected media described above.
| Provider | Purpose |
|---|---|
| Supabase | Database, authentication and file storage |
| Stripe | Subscriptions, payments and payouts |
| Vercel | Application hosting and operational logs |
| Optional Google account sign-in | |
| Resend | Transactional and account email |
| Socialcrawl | Public social-profile enrichment |
| PostHog | Product analytics and feature delivery |
| Telegram | Restricted operational alerts |
We may also disclose information to professional advisers, regulators, law enforcement, courts, or a buyer or successor in a corporate transaction where lawful and necessary. We do not sell personal data.
6. Private workspaces and files
Private workspace information is available to the creator, invited client and other authorised participants as the product indicates. Files may be delivered through time-limited signed links. Anyone who receives an active private link may be able to access the file, so recipients must not forward it to unauthorised people.
We process agreement text, the parties' chosen terms, signatures and audit records to provide the agreement workflow and keep a record of what was agreed. This policy explains how we use that information. Our generated agreement and country examples are starting templates, not legal advice. The creator and client decide their own terms; our handling of their data does not make us a party to their agreement. See our Terms and Conditions for more about the agreement tools.
Profile images and selected public social-media thumbnails are stored at public URLs so they can be displayed in profiles and marketplace directories. Do not use a profile or portfolio image that you do not want displayed publicly.
The creator or business that adds another person's details is responsible for having a lawful reason to do so and for telling that person how their data will be used.
7. International transfers
Some providers and users may be outside the United Kingdom. Where UK data protection law restricts a transfer, we use an applicable adequacy decision, approved contractual safeguards or another lawful transfer mechanism. Contact us for more information about safeguards relevant to your data.
8. How long we keep information
We keep personal data only for as long as needed for the purposes described here, including to provide the Service, maintain security, resolve disputes and comply with legal, tax and accounting duties. We consider the type and sensitivity of the data, the project or account lifecycle, legal requirements and relevant limitation periods.
Cancelling a subscription does not delete the account or its data. Agreements, shared work, payment records, audit history and files may be retained after cancellation or an account-deletion request where needed for authorised participants, legal obligations, fraud prevention or legal claims.
9. Security
We use technical and organisational measures designed to protect personal data, including access controls and encrypted network connections. No online service is completely secure, so please use a secure account and tell us promptly if you suspect unauthorised access.
10. Your rights and choices
Depending on the law and circumstances, you may have rights to access, correct, erase, restrict or object to processing of personal data, and to receive a copy in a portable format. You may also withdraw consent where we rely on it.
The Service does not currently provide self-service account deletion or data export. Email support@thecreatorlist.asia to make a request. We may need to verify your identity, and some rights are subject to legal exceptions.
You may complain to the UK Information Commissioner's Office. Details are available at ico.org.uk.
11. Children
The Service is for people aged 18 or over. We do not knowingly collect personal data from children through the Service.
12. Cookies and tracking
We use cookies and similar technologies to:
- improve service functionality;
- analyse usage patterns;
- enhance user experience;
- maintain service security; and
- remember preferences.
13. Chrome extension
The Creator List Deal Capture extension for Google Chrome lets creators capture a brand deal they are viewing into their Creator List workspace as a draft. This section covers what the extension reads and sends.
When you open the extension popup, it reads only the web address and title of the tab you are viewing. When you press Capture, it also reads the readable text of that page and sends the page's URL, title and text to your Creator List workspace, where we use it to structure a draft brief for you to review. Nothing is read from any other tab, nothing is read before you press Capture, and nothing runs in the background.
Captured page text is stored with the captured draft in your workspace until you confirm or discard the draft. We do not sell this data, use it for advertising, or use it for any purpose unrelated to running your workspace. The extension stores its connection token in your browser's extension storage, which is cleared when you disconnect.
The extension works only with a Creator List creator account and only sends data to your own workspace. To revoke access, disconnect from the extension footer or remove the connection from your workspace account settings.
14. Changes and contact
We may update this policy to reflect changes to the Service, our practices or the law. We will post the updated policy here and give additional notice where a change materially affects your rights.
For privacy questions or requests, contact JRER Tech Holdings Ltd at support@thecreatorlist.asia or write to 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.