Privacy Policy

This Privacy Policy describes how CreatorVault (“we”, “us”, or “our”), a brand and service operated by WooGlobe Ltd, collects, processes, stores, and safeguards personal and catalog information when you access or use our website (creatorvault.io), client portal, onboarding flows, and related digital rights management and syndication services (collectively, the “Services”).

Please read this Policy carefully. By registering for an account, linking your creator channels, or submitting video assets to CreatorVault, you acknowledge that your information will be handled in accordance with this Policy. If you do not agree with our practices, please do not use our Services.

1. Identity of the Data Controller

For the purposes of the General Data Protection Regulation (GDPR), the UK GDPR, and applicable international data protection statutes, the data controller responsible for your personal information is:

2. Information We Collect and How We Collect It

To effectively manage your digital rights, detect unauthorized reuploads, license content to media partners, and disburse royalty payments, we collect the following categories of information:

2.1 Personal Identification & Contact Details

• Contact Information: Full legal name, professional/channel pseudonym, email address, phone number, and physical mailing address.
• Tax & Compliance Identifiers: Tax identification numbers (e.g. SSN, EIN, or VAT ID), country of tax residency, and IRS tax forms (such as W-8BEN or W-9) necessary for statutory withholding and lawful international royalty disbursements.
• Identity Verification Data: Government-issued ID or business entity registration documentation, where necessary to establish authorized signatory rights over valuable media catalogs.

2.2 Channel, Platform & Authentication Information

• Platform Channel Identifiers: Channel IDs, handles, URLs, and account identifiers across YouTube, Meta (Facebook / Instagram), TikTok, Snapchat, and other social distribution networks.
• Official API Access Tokens: When you connect your channels, we utilize official OAuth 2.0 authorization flows (e.g., YouTube Partner API, Facebook Rights Manager Graph API). We never request, collect, or store your channel passwords.
• Channel Performance Metrics: View counts, geographic subscriber demographics, historic monetization metrics, and video engagement analytics used solely to forecast earnings and verify catalog value.

2.3 Video Catalog & Content Assets

• Media Files: Video footage, audio stems, raw footage, masters, thumbnails, captions, and related artistic materials submitted for licensing or fingerprinting.
• Metadata & Digital Fingerprints: Video title, publication timestamps, duration, ISRC/ISWC codes, and audio/video digital fingerprint hashes generated for enrollment into YouTube Content ID and Facebook Rights Manager.

2.4 Financial & Payout Information

• Disbursement Details: Bank account numbers, routing numbers, IBAN/SWIFT codes, PayPal email addresses, or Wise account handles used strictly to disburse your monthly royalty earnings.
• Accounting Records: Itemized payment histories, statement generation records, and currency exchange logs.

2.5 Automatically Collected Technical & Log Data

• IP addresses, browser types and versions, operating system details, referring/exit URLs, session durations, and cookie identifiers used for security verification, fraud prevention, and session management.

3. Legal Bases for Processing (GDPR & UK GDPR)

Under European and United Kingdom privacy laws, we only process your personal data when we have a valid lawful basis:

• Performance of a Contract (Art. 6(1)(b) GDPR): Processing your identity, channel tokens, and video files is strictly necessary to execute our distribution and rights management agreement with you—including claiming pirated views, syndicating catalog videos to MSN and TV networks, and calculating and transferring royalty payments.
• Legal & Regulatory Obligations (Art. 6(1)(c) GDPR): Retaining tax identification records, payout statements, and anti-money laundering (AML) verification data to comply with statutory fiscal obligations.
• Legitimate Business Interests (Art. 6(1)(f) GDPR): Protecting copyright owners from piracy, scanning web networks for digital theft, maintaining platform security, detecting fraudulent claims, and preventing abuse of our whitelisting tools.
• Consent (Art. 6(1)(a) GDPR): Where you explicitly opt in to receive non-essential creator newsletters, industry updates, or promotional communications. You may withdraw consent at any time.

4. How We Use Your Information

We use your information exclusively to provide and enhance our creator monetization services, specifically to:

• Deploy CreatorShield: Enroll your catalog into YouTube Content ID and Meta Rights Manager to monitor, fingerprint, detect unauthorized reuploads, and claim ad revenue on your behalf.
• Deploy CreatorScale: Syndicate your videos to premium media partners including Microsoft (MSN), Snapchat Discover, TikTok feeds, broadcast television stations, and 3,000+ digital publishers.
• Maintain ContentVault: Deliver access to verified, rights-cleared viral video clips and assets.
• Maintain Whitelists: Prevent copyright claims against approved partner channels or personal secondary profiles that you designate.
• Process Royalties: Calculate itemized revenue splits, audit third-party platform reports, and disburse monthly earnings to your designated bank or PayPal account.
• Enforce Legal Rights & DMCA: Issue formal digital takedown requests against bad-faith copyright infringers upon your instruction.

5. Disclosures to Third Parties & Platform Partners

We do not sell, rent, or trade your personal information to third-party data brokers or advertisers for monetary consideration. We disclose data strictly on a need-to-know basis to the following entities:

• Distribution & Licensing Platforms: Google LLC (YouTube), Meta Platforms, Inc. (Facebook/Instagram), ByteDance Ltd. (TikTok), Snap Inc., Microsoft Corporation (MSN), and vetted broadcast TV and streaming partners, strictly for the purpose of fingerprint registration, rights claiming, and content syndication.
• Financial Institutions & Payout Gateways: Stripe, Wise, PayPal, and partner commercial banks to securely execute payment transfers and tax reporting.
• Infrastructure & Hosting Providers: Vetted cloud infrastructure providers (e.g., AWS, Cloudflare, secure database hosts) operating under strict data processing agreements with end-to-end encryption.
• Legal & Regulatory Authorities: Where mandated by enforceable subpoenas, court orders, or applicable statutory laws, or to defend CreatorVault and our creators against copyright fraud or legal claims.

6. International Data Transfers

As a global digital rights management enterprise, CreatorVault operates across international jurisdictions including the United Kingdom, the European Economic Area (EEA), and the United States. If your personal data is transferred outside your home territory:

• Transfers are safeguarded using approved Standard Contractual Clauses (SCCs) adopted by the European Commission or the UK Information Commissioner's Office (ICO).
• We enforce strict technical and organizational measures, including TLS 1.3 encryption in transit and AES-256 encryption at rest, ensuring a level of protection essentially equivalent to that guaranteed within the UK/EEA.

7. Data Security and Technical Safeguards

We implement industry-standard administrative, physical, and technical safeguards designed to protect personal and catalog data against unauthorized access, accidental loss, destruction, or disclosure:

• OAuth 2.0 tokenized authentication preventing storage of sensitive platform passwords.
• Encrypted storage of sensitive tax identifiers and banking coordinates.
• Strict least-privilege access controls restricting employee access to creator records.
• Continuous server monitoring, regular penetration testing, and automated firewall protection.

Please note: While we implement rigorous industry safeguards, no transmission over the Internet or electronic storage mechanism can be guaranteed 100% immune from security threats. We urge creators to maintain strong security on their underlying platform accounts.

8. Data Retention Policy

We retain personal data and catalog metadata only for as long as necessary to fulfill the operational purposes set forth in this Policy:

• Active Contract Period: We maintain your catalog fingerprints, channel authorizations, and contact information for the duration of your active partnership with CreatorVault.
• Post-Termination Deletion: Upon valid termination of services, digital fingerprints and automated claiming authorizations are removed from YouTube Content ID and Meta Rights Manager within thirty (30) business days.
• Statutory Fiscal Records: Tax records, payment ledgers, and transaction statements are retained for seven (7) years following payment in order to comply with statutory legal, auditing, and corporate tax regulations.

9. Your Privacy Rights (GDPR & CCPA/CPRA)

Depending on your jurisdiction, you possess specific legal rights regarding your personal information:

9.1 European Union & United Kingdom (GDPR / UK GDPR)

• Right of Access: Request a copy of the personal information we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete records.
• Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data, subject to statutory tax and legal record retention requirements.
• Right to Restrict Processing: Request suspension of certain processing operations.
• Right to Data Portability: Receive your catalog and account data in a structured, machine-readable format.
• Right to Object: Object to processing carried out under legitimate business interests.
• Right to Lodge a Complaint: Lodge a complaint with a supervisory authority (such as the UK Information Commissioner's Office at ico.org.uk).

9.2 California Residents (CCPA / CPRA)

Under the California Consumer Privacy Act as amended by the CPRA, California creators have the right to:

• Know & Access: The categories of personal information collected, sources, business purposes, and third parties with whom it is shared.
• Request Deletion: Delete personal information collected directly from you, subject to legal exceptions.
• Opt-Out of Sale or Sharing: CreatorVault does not sell or share personal information for cross-context behavioral advertising.
• Non-Discrimination: We will never discriminate against you, alter royalty rates, or degrade service quality for exercising your privacy rights.

To exercise any of these rights, please email us at [email protected]. We respond to all verifiable requests within thirty (30) days.

10. Children's Online Privacy Protection (COPPA)

CreatorVault's Services are intended strictly for professional creators aged 18 years and older (or the age of legal majority in your country of residence). We do not knowingly collect personal data from children under the age of 16. In instances where a minor is the featured on-screen talent of a channel, accounts must be established, managed, and legally authorized by a parent or court-appointed legal guardian.

11. Cookies and Tracking Technologies

Our website uses essential session cookies to keep you logged in and preserve security headers, as well as optional aggregate analytics cookies to measure page performance and conversion flow. You can configure your browser settings to reject non-essential cookies at any time without impacting core account management features.

12. Updates to this Privacy Policy

We may update this Privacy Policy periodically to reflect evolving technology, changes in our licensing networks, or updates in statutory privacy laws. When material changes are made, we will notify you by updating the “Effective Date” at the top of this page and, where appropriate, sending an advance notification to your registered account email.

13. Contact Information & Data Protection Office

If you have any questions, concerns, or requests regarding this Privacy Policy, your personal information, or our rights management practices, please contact our Data Protection Officer: