Privacy Policy

This Privacy Policy explains how CreatorLift ("we", "us") collects, uses, shares and protects personal data when you use the CreatorLift community learning membership platform (the "Platform"). It is maintained by CreatorLift to answer common privacy and security questions about the service; it is not an independent certification or audit report.

CreatorLift is the data controller for personal data processed through the Platform. For any privacy question or request, contact admin@joincreatorlift.com.

Data you give us

• Account and identity: Google email address, display name and profile image supplied by Google sign-in, plus the six-digit verification code flow.
• Profile: creator name, country, state, city, bio and the learning interests/topics you select during onboarding.
• Submissions and feedback: the YouTube video URLs you submit, the structured feedback and questions you write, appeals, reports and support emails.
• Messages: direct messages you exchange with other members.
• Payment context: plan selected, transaction reference, payment method and the Paystack transaction reference for each payment.

Data from YouTube and Google

• Channel identity and public statistics (channel ID, title, thumbnail, subscriber count, video count) for channels you connect.
• Video metadata and public engagement metrics (title, thumbnail, duration, views, likes, comments) for your submitted videos.
• With your explicit consent to the youtube.readonly scope: confirmation that you own a channel, and evidence used to verify subscribe and comment task targets.

Data generated by your use

• Task assignments, unique watch-second coverage and watch-progress percentages, completion timestamps, verification evidence timestamps and audit logs.
• Participation scores, completion rates, account standing, warnings, referral activity and distribution/redistribution history.
• Technical data: IP address, device and browser type, timestamps, and error/diagnostic logs used to keep the service secure and working.

We do not collect or store your Google password, and we never receive your full card number, CVV or bank PIN.

• To provide the service (contract): authenticate you, run onboarding, match videos and channels to interested members, distribute tasks, track watch progress, verify engagement, display dashboards, leaderboards and Creator of the Month.
• To operate memberships and payments (contract): process card payments through Paystack, verify bank-transfer proofs, manage upgrades, downgrades and renewals.
• To communicate (contract / legitimate interests): send verification codes, task notifications, payment receipts, moderation decisions and service updates to admin@joincreatorlift.com-branded emails and in-app notifications.
• To keep the community fair and safe (legitimate interests): detect fake engagement, bots, multi-accounting and abuse; calculate account standing; review reports and appeals.
• To improve the Platform (legitimate interests): aggregate analytics on feature usage, matching quality and reliability.
• To meet legal obligations: accounting, tax, fraud prevention and responding to lawful requests.
• Consent: connecting your Google/YouTube account with the read-only scope, and any optional marketing emails. You can withdraw consent at any time.

We do not sell your personal data, and we do not use your data to train third-party advertising profiles.

• Visible to matched members: your creator name, profile image, country, interests, connected channel link and the videos you submit as learning tasks.
• Visible to the video owner: the feedback you submit on their video, attributed to your creator name.
• Visible on leaderboards: creator name, participation score, support provided and completion rate.
• Never shown to other members: your email address, payment details, proof-of-payment uploads, account standing, warnings, appeals and audit logs.

Direct messages are visible only to the participants and, where a report is filed, to the moderation team.

We share data only with providers that help us run the Platform:

• Cloud database, authentication, storage and hosting — stores accounts, profiles, tasks, messages and uploaded payment proofs.
• Google / YouTube Data API — channel ownership verification and live channel/video metrics.
• Paystack — card payment processing and subscription state.
• Resend — transactional email delivery for verification codes and notifications from admin@joincreatorlift.com.

We may also disclose data where legally required, to enforce our Terms, to prevent fraud or harm, or in connection with a merger or acquisition (in which case you will be notified). Where data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses offered by these providers.

• Google sign-in plus a six-digit email verification code for every sign-in.
• Row-level security in the database: members can read only their own profile, preferences, YouTube connections and submissions, with cross-member features served through controlled server functions.
• Encryption in transit (HTTPS/TLS) and encryption at rest by our hosting provider.
• Secrets and API keys stored in a managed secret store, never in client code.
• Role-based administrative access, stored separately from profile data, with audit notes on moderation decisions.

No online service can promise absolute security. This section describes the controls we have enabled; it is not a certification or a guarantee against breach. If we become aware of a breach affecting your personal data, we will notify you and any required regulator without undue delay.

• Account, profile and channel data: for as long as your account is active.
• Task, watch-coverage and engagement audit records: up to 24 months, so completion rates, standing and disputes can be verified.
• Messages and feedback: retained while the account is active; feedback already delivered to a creator remains with that creator's records.
• Payment and bank-transfer records: up to 7 years where required by accounting and tax law.
• Moderation, warning and appeal records: up to 24 months after closure, to prevent repeat abuse.
• Technical logs: typically 90 days.

Depending on where you live, you may have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate data — most fields are editable in Settings → Profile.
• Delete your account and associated data, subject to legal retention periods.
• Restrict or object to processing based on legitimate interests.
• Port your data in a machine-readable format.
• Withdraw consent, including disconnecting your YouTube channel at any time.
• Lodge a complaint with your local data protection authority.

Exercise any right in Settings → Privacy or by emailing admin@joincreatorlift.com. We respond within 30 days and may ask you to confirm your identity from your registered Google email.

CreatorLift's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• We request the minimum scopes needed: your email/profile for sign-in and youtube.readonly to verify channel ownership and task engagement.
• Google data is used only to deliver user-facing features you have requested; it is never sold, used for advertising, or transferred except to the providers listed above or when required by law.
• No human reads your Google data except with your explicit consent, for security or abuse investigations, or where legally required.
• You can revoke access at any time via Google account permissions; cached channel data is then deleted on your next disconnect or account deletion.

CreatorLift is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a minor has registered, contact us and we will delete the account and its data.

We update this policy when our practices change. The effective date at the top always reflects the current version, and material changes are announced in-app and by email at least seven (7) days in advance. Questions, requests or complaints: admin@joincreatorlift.com.