Back to Home
Data Protection & Privacy

Privacy Policy

How we collect, use, and protect your personal information across Southeast Asia.

Last updated: September 2026

1. Information We Collect

We collect personal information necessary to deliver marketplace, communication, and payment services. This includes account credentials, legal identification for KYC verification, public social media profile statistics, banking payout coordinates, and communication messages between buyers and creators.

2. Purposes of Data Processing

Data is processed to facilitate creator discovery, campaign matchmaking, order execution, payment clearing, fraud prevention, regulatory compliance, and system security auditing. We never sell your personal contact or banking data to third-party advertisers.

3. Payment & Ledger Security

Payment card and bank transaction processing are executed via PCI-DSS compliant payment gateways (such as Midtrans and Stripe). Sensitive card tokens are never stored directly on CreatorOS infrastructure. Ledger entries are encrypted and strictly access-controlled.

4. Cross-Border Data Transfers

Because CreatorOS operates regionally across Indonesia, Malaysia, and Singapore, data may be stored and processed in secured cloud regions equipped with ISO 27001 / SOC2 Type II certifications. Standard contractual clauses and encryption protect cross-border transmissions.

5. User Privacy Rights

Users have the right to inspect, update, export, or request deletion of their account data subject to mandatory statutory tax and accounting retention requirements. Contact [email protected] to exercise these rights.