Privacy Policy

This Privacy Policy explains how PingCreator (“we”, “us”) — operated by Alex Papas, see our Legal Notice — collects, uses, and protects your information when you use our platform as a Creator.

Information we collect

• Account information: name, email address, age, and password (stored securely as a hash — we never see or store your plain-text password).
• Profile information: everything you choose to add to your creator profile, including photos, social media handles, niches, content types, and portfolio media.
• Application & submission content: the pitch videos, messages, and finished campaign videos you upload when applying to and delivering campaigns, and any note you attach to a delivery.
• Shipping address: for campaigns that ship you a physical product, the name and address you provide — used only to send that product to you, and shared only with the shipping provider used for that campaign.
• Bank/payout details: account holder name, address, IBAN/account number, SWIFT/BIC, and bank name — used solely to pay you your campaign compensation and, if applicable, affiliate referral commissions, by bank transfer. Only our team can see these; they’re never shared with brands.
• Payment information: your signup fee and monthly membership fee are processed entirely by our payment partner, Stripe. We never see or store your card details — we only receive confirmation that each payment was completed and basic billing status (e.g. active, cancelled).
• Legal acceptance records: when you accept our Terms, accept a specific campaign, or confirm content-submission rights, we record that you did so, when, which version of the relevant document, and — where legally relevant, such as the checkout withdrawal waiver — the IP address the acceptance came from, as evidence of what you agreed to.
• Technical logs: standard server request logs (such as IP address and timestamp) automatically generated by our hosting provider for security, abuse prevention, and troubleshooting purposes.

How we use your information

We use your information to operate your account, match you with relevant brand offers, process your platform access payment, pay out campaign compensation, ship products where applicable, send you notifications about offers and messages, keep a record of what you legally agreed to, and improve the platform over time.

Who can see your profile

Your public creator profile (name, niches, content types, socials, and portfolio) is visible to brands browsing the creator network and to our team for moderation and support purposes. Your email address, bank/payout details, and shipping address are never shared with brands.

Who we share data with

We use a small number of service providers to run PingCreator, each of which only processes the data needed to perform their service for us:

• Supabase — hosts our database, authentication, and file storage (including uploaded videos and images).
• Stripe — processes your platform access fee, as described above.
• Resend — sends account and notification emails on our behalf.
• Vercel — hosts and serves the PingCreator website and application itself, and so processes the technical logs described above (e.g. IP address) for every visit.
• Google Analytics — helps us understand overall site traffic (e.g. how many people visit, which pages). Only active if you’ve accepted cookies — see below.

We don’t sell your data, and we don’t share it with brands beyond what’s described under “Who can see your profile” above.

International data transfers

Some of the service providers listed above (including Stripe, Resend, and Vercel) may process data outside the European Economic Area, including in the United States. Where that happens, we rely on the safeguards these providers make available for this purpose, such as the European Commission’s Standard Contractual Clauses, to ensure your data continues to receive a comparable level of protection.

Cookies

Here’s exactly what PingCreator stores in your browser:

• Login session (essential) — set by our authentication provider, Supabase, to keep you signed in. Without it you’d be logged out on every page.
• Bot protection (essential) — Cloudflare Turnstile, used on registration to block automated signups, sets a cookie while its verification widget is active.
• Your cookie choice (essential) — remembers whether you accepted or declined optional cookies, so we don’t ask again every visit.
• Referral credit (optional — requires your consent) — if you arrive via an affiliate’s link, this credits that affiliate for referring you. It’s only set once you accept cookies via the banner; declining, or choosing “Necessary only,” keeps it off entirely.
• Analytics (optional — requires your consent) — Google Analytics cookies that help us understand site traffic. Same as above: only set if you accept cookies via the banner.

The essential ones can’t be disabled — they’re what makes the platform work at all. You can change your choice on the optional one at any time via the “Cookie Preferences” link in the footer.

Data retention

We retain your account information for as long as your account exists. Bank/payout details and shipping addresses are kept only as long as needed for the payouts or shipments they relate to, plus any period we’re required to keep financial records under applicable law. Legal acceptance records are kept for as long as needed to demonstrate what you agreed to, which may extend beyond account deletion where we have a legal basis to retain them (for example, to defend against a legal claim). You can request deletion of your account and associated data at any time by contacting us — see below.

Your rights

Under GDPR, you can ask us to access, correct, delete, or export your personal data, or object to or restrict certain processing. To exercise any of these, contact us as below — we’ll respond within the timeframes required by law. You also have the right to lodge a complaint with the Greek Data Protection Authority (Hellenic DPA) or your own country’s data protection authority.

Contact us

If you have questions about this policy or want to exercise your data rights, reach out via our contact page.