How CreatorIndex uses and stores information.
Effective 22 October 2026.
This policy describes CreatorIndex’s public creator index, viewer and marketer features, creator onboarding and private creator workspace. CreatorIndex is operated by Prince Mredlana, trading as CreatorIndex. For support and privacy enquiries, contact hello@creatorindex.co.za.
When you sign in, we receive an account identifier, your email address and, where provided by your sign-in provider, your name. We store your saved creators, creator requests, update read state, saved marketer lists and briefs, and email-update preferences. Briefs may contain brand and campaign information you choose to enter. Please avoid entering sensitive personal information.
Google sign-in requests basic profile and email information to identify your account and verify your email. It does not request access to Gmail, Google Drive or your contacts. Email sign-in uses a one-time link. ChatGPT sign-in uses the identity provided by the hosting platform. Linking sign-in methods connects them to the same CreatorIndex account when you explicitly choose to do so.
If you choose to connect TikTok, TikTok handles sign-in and consent. CreatorIndex exchanges the authorization code on its server and requests your app-specific TikTok identifier, display name, profile image URL and, when authorized, username. We use these details to show which account you are connecting and save your explicit confirmation of account control. We do not receive your TikTok password. This connection does not request posting, messaging or statistics permissions. Access and refresh tokens are not retained for later use. We retain the linked identifiers, returned profile details, confirmation time, claim status and claim history as historical account-control evidence. This does not imply ongoing account control or TikTok endorsement. You can reconnect to confirm control again and manage authorization in TikTok’s app permissions. Removing authorization in TikTok does not itself delete records already held by CreatorIndex.
We store the profile suggestions, portfolio links, public contact preferences, collaboration interests, availability, notification preferences and optional private rates that you submit. Profile suggestions are private drafts pending separate editorial review; saving a suggestion does not automatically publish it. The public contact field is intended for possible publication after review, so do not enter details there that you want to keep private. Optional rates remain private. Workspace sample statistics are labeled synthetic and kept separate from recorded observations. Connecting an account does not automatically admit a creator to the public index. After a reviewed profile match, marketers can see the CreatorIndex account-control badge and whether you are open to in-app proposals. We do not disclose your private rates or manager contact through this status.
When a marketer chooses to send a proposal, we share their message and the previewed campaign brief with the matched creator in their private workspace. We store sender and recipient identifiers, the brief snapshot, delivery time and proposal status. Creators can express interest or decline, and the sender can see that response or withdraw a proposal. Private shortlist notes and match scores are excluded. Brand details are supplied by the sender and are not independently verified by this delivery feature. No email notifications are sent automatically. Pausing your availability blocks new proposals; existing proposals remain accessible. Closing an account does not automatically recall information already shared with another user; requests concerning shared records are assessed and any necessary retention explained.
The index uses observed public profile and post information, such as handles, names, images, follower counts, post metrics and discovery notes. A listing does not mean that the creator has joined CreatorIndex or endorsed the service. Rankings and insights are based on available observations and can be incomplete or outdated.
We use account information to sign you in, keep your saved items, review creator requests and support the marketer and creator workspaces, confirm platform account control and review creator profile suggestions. We use public creator observations to maintain the index and explain performance and rank movement. Sign-in requests also use short-lived flow records and hashed rate-limit identifiers to help prevent abuse.
Signing in does not subscribe you to a digest. Weekly updates require a separate opt-in, and the consent choice is stored with your account. You can change it under Account & email updates. Creator collaboration preferences do not guarantee work, and email brief notifications are not currently active. In-app brief proposals are available to eligible verified creators who are open to brand enquiries. Sign-in emails are service messages needed for email authentication.
Supabase provides Google and email authentication. Resend delivers authentication emails. The hosting platform and Cloudflare infrastructure serve the site and store its application records. Google and ChatGPT process sign-in through their own services. TikTok processes TikTok sign-in and authorization through its own services. These providers may process information outside South Africa. Their handling of information is also governed by their applicable service terms and privacy notices. You may contact us for information about the providers used for your account.
We use cookies to maintain sign-in sessions and complete authentication. Temporary browser storage can preserve a creator request while you sign in. Infrastructure may also process technical information needed to serve requests and secure the service. Application browser storage may also preserve unsaved marketer drafts and saved selections on your device. You can remove that storage through your browser settings. TikTok connection cookies and flow records bind authorization to your signed-in account and browser. Authorization and pending confirmation are valid for 15 minutes. Expiry prevents reuse; it does not mean every expired database record is immediately deleted. Connection failure diagnostics may include the stage, provider error category/status and a troubleshooting reference.
We keep ordinary workspace records while your account is active and they are needed to provide the service. You can request access, correction, deletion, account closure or object to processing by emailing hello@creatorindex.co.za. Prince Mredlana handles these requests, with a target acknowledgement within three business days. We verify your identity and clarify the request before disclosing or changing account information. Our target is to remove ordinary account records within 30 calendar days of a verified closure request. This is a manual process; automated account-wide deletion is not available. Limited records may be retained where necessary for a documented dispute or legal obligation, with restricted access and a review date. Provider records, operational logs and backups may remain subject to their own retention and deletion mechanisms. Our 30-day target applies to ordinary active application records, not a guarantee that every backup copy is erased in that period. We will explain applicable limits when responding to a request. Closing a workspace does not automatically remove independently sourced public creator information; requests about a public listing are assessed separately. You can already remove favourites and change digest preferences in your account.
For support, privacy questions or requests concerning your information, email hello@creatorindex.co.za. South African users can find information about privacy rights and complaints through the Information Regulator at inforegulator.org.za.