Last updated: 17 Dec 2025
We respect your privacy and are committed to protecting your personal data. This policy explains how we handle your information.
By using Hey Creator, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of our services.
Welcome to Hey Creator (the "Platform", "we", "our", or "us"). We respect your privacy and are committed to protecting the personal data of all users, including influencers, brands, and visitors to our platform.
This Privacy Policy explains how we collect, use, store, share, and protect your information when you use our website, applications, and services (collectively, the "Services").
We collect information you provide when you:
This may include:
When you connect or search for social media profiles, we may collect publicly available data from supported platforms such as:
This data may include:
Important: We only collect publicly available information. We do not access private messages, private content, or non-public data without explicit authorization from the account owner.
We may process aggregated, anonymized, or de-identified data such as:
This data cannot be used to identify individuals and is used only to improve analytics, discovery features, and platform insights.
When you use our Services, we automatically collect:
This helps us maintain security, performance, reliability, and improve user experience.
For brands and creators using campaign features, we collect:
We use collected data to provide and improve our Services, including:
Provide influencer discovery and analytics tools
Enable brands to find and evaluate creators
Facilitate campaign creation and management
Process applications and deliverables
Authenticate users and secure accounts
Generate insights, reports, and recommendations
Personalize your platform experience
Communicate updates, notifications, and support
Process payments and transactions
Detect and prevent fraud or abuse
Improve platform features and performance
Comply with legal and regulatory requirements
We do not sell, rent, or trade your personal data to third parties.
Our use of Meta platform data complies with:
Specifically:
We only access data permitted by granted permissions and API access
We only access Instagram Business or Creator accounts (not personal accounts)
We do not store unnecessary personal data beyond what is required for functionality
We use Instagram and Facebook data solely to support influencer analytics, discovery, and marketing insights
Aggregated data is anonymized and cannot be re-identified to individuals
We respect user privacy controls and platform limitations
We provide clear mechanisms for users to disconnect their accounts
We comply with all data retention and deletion requirements
Creators can connect their own YouTube channel to HeyCreator with Google sign-in. When you do, we ask for two read-only permissions and use them only as described here:
This data is shown to you in your analytics dashboard and, only if you choose to make your profile visible to brands, to brands evaluating you for campaigns. We never upload, modify, rate, comment on or delete anything on your channel, we do not sell YouTube data, and we do not use it for advertising. HeyCreator's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
We store a refresh token to keep your figures current (at most weekly). Disconnecting YouTube in My Profile → Settings revokes our access at Google and deletes the channel data we pulled; you can also remove access at any time from your Google Account permissions.
Creators can connect their own TikTok account to HeyCreator with TikTok login. When you do, we ask for read-only permissions and use them only as described here:
This data is shown to you in your analytics dashboard and, only if you choose to make your profile visible to brands, to brands evaluating you for campaigns. We never post, edit or delete anything on your TikTok account, we do not sell TikTok data, and we do not use it for advertising. TikTok does not share your audience demographics with us through this connection.
We store a refresh token to keep your figures current. Disconnecting TikTok in My Profile → Settings revokes our access at TikTok and deletes the account data we pulled; you can also remove access at any time from your TikTok app under Settings → Security → Manage app permissions.
Brands can give creators short links (heycreator.io/l/…) for a campaign. When someone clicks one, we record that a click happened, the time, the site the click came from, the browser family, and a one-way code derived from the visitor's network address and browser that lets us count the same visitor once per hour. We do not store the visitor's IP address, name or any account details, the code cannot be turned back into an address, and the secret used to make it is rotated daily. These counts appear on the brand's campaign report as link clicks and WhatsApp starts.
Click records are kept for up to 13 months to support campaign reporting, then deleted. If you clicked a tracked link and want to ask about the data held, contact us at the address at the end of this policy.
Where applicable under GDPR and other data protection laws, we process personal data under the following legal bases:
You have given clear consent for us to process your personal data for specific purposes (e.g., connecting social media accounts).
Processing is necessary to fulfill our contract with you (e.g., providing platform services you requested).
Processing is necessary for our legitimate interests, such as improving services, fraud prevention, and analytics, provided your rights are not overridden.
Processing is necessary to comply with legal or regulatory requirements.
We take data security seriously and implement industry-standard practices to protect your information:
Data encrypted in transit (TLS/SSL) and at rest
Cloud hosting with enterprise-grade security (Firebase/Google Cloud)
Firebase Authentication with multi-factor support
Role-based permissions and least-privilege access
Continuous security monitoring and threat detection
Regular security audits and compliance reviews
Data Retention: We retain your data only as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Inactive accounts may be deleted after 24 months of inactivity, with prior notice.
We may share your information with trusted third parties only as described below:
Parties: Cloud infrastructure (Google Cloud/Firebase), email services, analytics providers
Purpose: To operate, maintain, and improve our Services
Parties: Instagram, Facebook, YouTube, TikTok, X (Twitter)
Purpose: To access publicly available profile data via official APIs
Parties: Stripe, PayPal, or other payment gateways
Purpose: To process payments securely (we do not store full payment details)
Parties: Google Analytics, Mixpanel (aggregated data only)
Purpose: To analyze usage patterns and improve user experience
Parties: Law enforcement, regulatory authorities
Purpose: When required by law or to protect rights and safety
We do not share personal data with third parties for advertising or marketing purposes without your explicit consent.
Depending on your location, you may have the following rights regarding your personal data:
Request a copy of the personal data we hold about you
Correct inaccurate or incomplete information
Request deletion of your personal data ("right to be forgotten")
Limit how we use your data in certain circumstances
Receive your data in a structured, machine-readable format
Object to processing based on legitimate interests or for marketing
Withdraw consent at any time (where processing is based on consent)
File a complaint with your local data protection authority
To exercise your rights, please contact us at:
mail@takat.aiWe will respond to your request within 30 days (or as required by applicable law).
Need detailed deletion instructions?
View Complete Data Deletion Guide →You have full control over your data:
You can disconnect linked social media accounts at any time from your account settings. This will remove our access to that platform's data.
You can request full account deletion by contacting us. Upon deletion, we will:
Some data may be retained for legitimate purposes:
Hey Creator operates globally and may transfer data across borders. Your information may be processed in countries outside your residence, including:
We ensure appropriate safeguards are in place for international transfers:
Standard Contractual Clauses (SCCs) approved by the European Commission
Adequacy decisions by relevant data protection authorities
Privacy Shield Framework (where applicable)
Binding Corporate Rules and contractual commitments
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
What personal information we collect, use, disclose, and sell
Request deletion of your personal information
Opt-out of the sale or sharing of personal information
Correct inaccurate personal information
Limit use of sensitive personal information
Not be discriminated against for exercising your rights
Note: We do not sell personal information to third parties. We do not use or disclose sensitive personal information for purposes other than those permitted under CCPA/CPRA.
Our Services are not intended for individuals under the age of 13 (or 16 in the European Economic Area).
We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
Upon verification, we will take steps to delete such information from our systems.
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors.
Material changes will be communicated via:
Your continued use of our Services after changes indicates acceptance of the updated policy. If you do not agree with changes, please discontinue use and contact us to delete your account.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Website
https://heycreator.ioResponse Time: We aim to respond to all privacy inquiries within 30 days (or as required by applicable law).
This privacy policy has been designed to comply with Meta (Facebook/Instagram) App Review requirements and explicitly addresses:
Instagram Business Basic permission requirements
Clear description of Instagram and Facebook data usage
Anonymized analytics and aggregated data practices
User rights for data access, correction, and deletion
Prohibited data use restrictions and compliance
Third-party data sharing transparency
© 2026 Hey Creator. All rights reserved.