Last updated: June 2025. Controller: BZNlabs Limited, Ireland (DPC jurisdiction).
Creator accounts: email address, hashed password, username, display name, bio.
Fan opt-ins: email address, IP address fingerprint (SHA-256 hashed — we cannot recover your raw IP), timestamp, which creator's page was used, and the exact consent text you agreed to.
Fan emails are collected on behalf of creators — CreatorSafe is the data processor; the creator is the data controller for fan data. We hold it to deliver the service: sending confirmation emails, creator broadcasts, and drip sequences.
Legal basis: explicit consent (GDPR Art. 6(1)(a)). You opted in via the creator's capture page.
Fan data is retained as long as you remain subscribed and for 90 days after unsubscribing (to maintain the consent audit trail). You can request deletion at any time.
You have the right to: access your data, correct it, delete it, object to processing, and receive a copy in a portable format. Email [email protected] for any of these requests. We respond within 30 days.
You can also unsubscribe at any time using the link in any email we send you.
Creators can export their fan list as a CSV file. Once exported, the data is under the creator's control. If you want your data deleted from a creator's exported copy, contact them directly. We delete from our systems on request.
Data is stored on Cloudflare's EU-region infrastructure. Email delivery uses Resend (EU SCCs in place). Payments are handled by Stripe — see Stripe's privacy policy for payment data.
BZNlabs Limited, Ireland. Email: [email protected]. Supervisory authority: Irish Data Protection Commission (dataprotection.ie).