Privacy Policy
Last updated 8 September 2026
creatorSea is an Egypt-based creator opportunity ecosystem. This website currently operates in early access: forms on creator-sea.com collect interest from creators and brands. They do not complete full platform onboarding. This policy explains what we collect on the early-access site today, and what we may collect when the platform opens.
Who we are
creatorSea (“we”) operates creator-sea.com and related early-access services. UG-SEA is creatorSea’s specialized managed UGC arm. For questions about this policy or your data, contact team@creator-sea.com or privacy@creator-sea.com.
What we collect during early access
Creators (early-access form)
Full name, email address, phone number, Instagram profile link, TikTok profile link, an optional note, and Privacy Policy acceptance. We do not collect niche, biography, follower counts, payout details, IBAN, or performance data at this stage.
Brands (early-access form)
Contact name, business or brand name, work email, phone number, optional website or Instagram link, an optional note, and Privacy Policy acceptance. We do not collect AOV, margins, monthly sales, fulfilment detail, or campaign qualification data in this form.
Contact form
Full name, email, phone, whether you are a creator or brand, your note, and Privacy Policy acceptance. Used only to reply to your enquiry.
What we may collect when the platform opens
The sections below describe intended platform processing once creatorSea is live. Features such as Shopify integration, automated webhooks, native apps, and automatic payouts are not presented as live on this marketing site until verified in production.
Brands
Company name, business email, industry, country, and, if you connect a store, product catalogue and order totals needed to operate opportunities. Store connection tokens, where used, are stored only to run the agreed integration.
Creators
Account and opportunity data needed to operate affiliate and campaign work, including social profile links you provide and performance of opportunities you join. Payout details are collected only when you request a payout, not during early access.
When you request a payout we store the details needed to send the money: the account holder name, and either an InstaPay address or mobile number, or a bank name, IBAN or account number and optional SWIFT code. You can save these for future withdrawals or enter them each time. We store them so we can pay you, and for the records we are required to keep about payments made.
These details are visible only to you and to creatorSea staff
processing your payout. Lists and queues show a masked version, such as
····4821; the full value is read only when a payment is
being made, and each read is logged. We are not a payment provider and
do not hold funds: transfers are made through a bank or payment service.
Orders and customer data
For attribution and validation we prefer order IDs, order status, and pseudonymous evidence. Where order verification requires limited customer-related fields from a connected store, we use them only for that purpose, with access limited to people who need them, and we do not use them for advertising. Customer contact details are not a product of the early-access website forms.
Shoppers (attribution)
We do not collect shopper names, email addresses, phone numbers or postal addresses through the marketing site. When attribution is live on a connected storefront, we may record:
- a randomly generated visitor identifier, stored in a first-party cookie
- the affiliate link clicked and the time
- the device class (mobile, tablet or desktop)
- a salted, truncated hash of the IP address, used only to detect abuse
- the referring page, where the browser provides one
Connected store order payloads may include customer identity fields from the merchant platform. Where those fields are not required for validation, they are discarded. Where limited fields are retained for verification, they are purpose-limited as described above.
Cookies
The early-access marketing site may use essential cookies needed for security and basic site function. Attribution cookies on merchant storefronts apply only when storefront tracking is live.
When attribution is live we may set a first-party cookie on the merchant's
storefront (_cs_ref) holding the affiliate reference and
visitor identifier, and one on our redirect domain (cs_vid)
holding the visitor identifier. They exist solely to attribute a purchase
to the creator who referred it. Storefront tracking loads only where the
shopper's consent choices permit it. Where a shopper declines, no
attribution data is collected.
Why we process this data
- to respond to early-access and contact enquiries
- to evaluate interest and invite qualified participants when capacity opens
- to attribute a sale to the creator who referred it (when the platform is live)
- to calculate and pay commission (when payouts are live)
- to show brands and creators their own performance
- to detect fraudulent or abusive activity
- to meet accounting and tax obligations
We do not sell personal data, we do not use it for advertising, and we do not carry out automated decision-making that produces legal effects.
How long we keep it
| Data | Retention |
|---|---|
| Click records | 24 months from the click |
| Attribution records | 24 months after the sale settles |
| Order references, commission and payment records | 7 years, to meet accounting obligations |
| Shopify access tokens | Deleted when the app is uninstalled |
| All other merchant data | Deleted within 30 days of uninstall |
| Payout destination details | Until you delete them, or 30 days after account closure |
| Payment records and transfer receipts | 7 years, to meet accounting obligations |
| Account data | Deleted within 30 days of account closure |
Merchants using our Shopify app
We request the minimum Shopify permissions the app needs: reading
products, reading order totals, and creating the tracking pixel. We do
not request access to customer names, email addresses, phone numbers or
addresses. We respond to Shopify's
customers/data_request, customers/redact and
shop/redact requests. On a shop redaction we delete
sessions and personal data within 48 hours, retaining only anonymised
financial records required for accounting.
Sharing
Brands can see which creators drove sales for their products and the commission owed. Creators can see their own performance. Neither can see the other's wider account data. We use Supabase for database and hosting, Shopify for merchant integration, and Vercel for this website. We share data with them only to operate the service.
Security
Data is encrypted in transit using TLS and at rest by our hosting provider. Shopify access tokens are stored in a table that no client application can read; only our server can access them. Access to production data is limited to named administrators.
Payout information
Payout details and transfer receipts are held under stricter controls than the rest of the platform. Saved destinations can only be read by the creator they belong to; administrators reach them through an audited route that records every access. Transfer receipts are kept in private storage that is never publicly reachable and are visible only to Creator Sea staff. Creators do not see receipts, because a bank receipt can expose account balances or unrelated transactions.
You can delete a saved payout destination at any time from your wallet. Records of payments already made are retained for accounting purposes.
Your rights
Depending on where you live you may have the right to access, correct, export or delete your personal data, and to object to or restrict its processing. Contact privacy@creator-sea.com and we will respond within 30 days. Shoppers who bought through a merchant using creatorSea should contact that merchant, who can raise the request with us through Shopify.
Changes
We will update this page when our practices change and revise the date above. Material changes affecting merchants will be notified directly.