Ryan — read this before publishing. This is a working draft, not legal advice. Everything in square brackets needs your real details filled in, and it should be checked by an attorney before real people sign up. Delete this box once that's done.

Privacy policy

Last updated [DATE]

CreatorMatch connects South African brands with creators. This policy explains what personal information we collect, why, and what you can do about it. It's written to meet our obligations under the Protection of Personal Information Act (POPIA).

Who we are

CreatorMatch is operated by [REGISTERED COMPANY NAME], registration number [REG NUMBER], of [ADDRESS], Cape Town, South Africa. For anything in this policy, contact us at [YOUR EMAIL].

What we collect

If you sign up as a creator: your name, email address, and optionally your city, the kind of content you make, and your social media handles. We also store a scrambled version of your IP address, which we use only to spot people gaming the referral system. It cannot be turned back into your actual IP address.

If you register as a brand: your company name, your name, your work email, your website, and what you've told us you need made.

Referrals: if you joined using someone's referral link, we record which code you used so we can credit them.

Why we collect it

To create and run your account
To match creators with briefs from brands
To credit referrals correctly
To email you about your account and about briefs that suit you
To keep the platform working and to prevent abuse

We do not sell your information. We do not send you marketing on behalf of anyone else.

Who else sees it

We use a small number of service providers to run CreatorMatch:

Cloudflare — hosts the site and stores the database
Resend — sends our emails
[ADD YOUR PAYMENT PROVIDER HERE ONCE IT'S SET UP]

Some of these providers process data outside South Africa. When you apply to a brief, the brand that posted it sees your profile and the content you submit.

How long we keep it

We keep your account information for as long as your account is open. If you ask us to delete your account, we remove your personal information within 30 days, except anything we're legally required to keep — for example, records relating to payments.

Your rights

Under POPIA you can ask us to:

Tell you what information we hold about you
Correct anything that's wrong
Delete your account and your information
Stop sending you emails

Email [YOUR EMAIL] and we'll deal with it. If you're not happy with how we've handled it, you can complain to the Information Regulator of South Africa at inforeg@justice.gov.za.

Keeping it safe

Your information is stored on Cloudflare's infrastructure and access is restricted to the people who run CreatorMatch. No system is perfectly secure, but we take reasonable steps to protect what you give us, and we'll tell you if something goes wrong in a way that affects you.

Children

CreatorMatch is for people aged 18 and over. If you're under 18, please don't sign up. If we learn that we're holding information about someone under 18, we'll delete it.

Changes

If we change this policy in a way that matters, we'll email you before it takes effect.