Privacy Policy
CreatorHub – UGC & Affiliate ("the App") is a Shopify app that helps merchants run a creator (UGC, influencer and affiliate) program: applications, invitations, gifts, personal discount codes, content review, commissions and payouts. This policy explains what data the App collects, why, and how it is handled. It also covers this website, getcreatorhub.app, which sets no cookies and uses no analytics or tracking scripts.
Data the App collects
- Store data (via the Shopify Admin API): store name, domain, contact email, currency and primary locale; products and variants chosen for campaigns; discount codes the App creates; orders that use a creator code or referral link (order number, total, discount code, customer ID, cart attributes); files (videos) the creators upload through the App.
- Creator data, entered by creators themselves in the application form or portal: name, email, Instagram/TikTok handle, follower counts, audience details, answers to the merchant's questions, shipping details for packages, payout details (IBAN/PayPal) when the merchant pays commissions, messages exchanged with the merchant, and submitted content (links or uploaded videos).
- Technical data: clicks on creator short links (timestamp, referrer, hashed IP/user agent for counting), a first-party referral cookie on the storefront (
kreatorka, 30 days) used only to attribute orders to a creator.
How the data is used
Exclusively to provide the App's features to the merchant: managing the creator program, creating discount codes and gift coupons, attributing sales, calculating commissions, sending transactional emails (application received, approval, reminders, review feedback, invitations, messages) and showing reports in the merchant's admin. The App does not sell or share data with third parties for marketing.
Where the data is stored and sub-processors
- Application database: Neon (Postgres), hosted on Vercel infrastructure in the EU/US region configured for the App.
- Hosting and session storage: Vercel Inc.
- Transactional email: Resend Inc. (sender address on the App's domain, reply-to set to the merchant).
- Uploaded videos are stored in the merchant's own Shopify Files.
- Optional: Meta Graph API (Instagram Business Discovery) to look up public profile data of a handle the merchant enters.
Retention and deletion
Data is kept while the App is installed. When the App is uninstalled, Shopify sends the shop/redact webhook 48 hours later and the App deletes all data for that store. Customer data requests and erasure requests (customers/data_request, customers/redact) are processed automatically: the App exports or deletes the creator's record, applications, content, messages, clicks and attributions. Creators may also ask the merchant to delete their data at any time.
Security
All traffic is encrypted (HTTPS). Shopify webhooks are verified with HMAC. Access tokens are stored encrypted at rest in private storage. Only the merchant's staff with access to the App in Shopify admin can see creator data.
GDPR
For merchants in the EU/EEA the App acts as a data processor on behalf of the merchant (the controller). Creators can exercise their rights (access, rectification, erasure, portability) through the merchant or by contacting us.
Contact
Questions about privacy: support@getcreatorhub.app. See also the support page and the terms of service.