Privacy Policy

CreatorSecure — Privacy Policy

Effective date: 3 October 2025

1. Who we are and how to contact us

Controller: Atlan Digital Research and Development Limited. Contact: enquiries@atlan.digital. Address: 86-90 Paul Street, London, EC2v 4NE. Data protection contact/DPO: enquiries@atlan.digital.

2. Scope

This Privacy Policy explains how CreatorSecure collects, uses, and shares personal data when you use the Service. It applies to consumers in the UK and EEA and is aligned with the UK GDPR, EU GDPR, and the Data Protection Act 2018.

3. Personal data we collect

  • Account data: name/alias, email, password hash, billing country.
  • Usage data: IP, device info, logs, timestamps, crash/diagnostics, feature usage.
  • Content you submit: links, files, metadata, prompts, responses.
  • Payment data: processed by our payment processor; we only receive limited records (e.g., last 4 digits, expiry month/year).

4. How we use your data and legal bases

  • Provide the Service (contract): create accounts, process scans, deliver results, customer support.
  • Improve and secure the Service (legitimate interests): debugging, analytics, preventing abuse, quality assurance.
  • Marketing with consent: newsletters and product updates (you can opt out).
  • Compliance/legal obligations: fraud prevention, responding to lawful requests.

5. Sharing and international transfers

We share data with service providers acting on our instructions, including hosting (e.g., Vercel/AWS), malware scanning (Sophos attachmentAV), LLM processing (e.g., OpenAI), analytics, email delivery, and payments. Some providers are outside the UK/EEA; when transferring data we use appropriate safeguards such as Standard Contractual Clauses or the UK IDTA.

6. Retention

We keep personal data only as long as necessary for the purposes above. Scan artefacts (e.g., file hashes, verdicts) may be retained for security and audit. You may request deletion, subject to legal/legitimate interests (e.g., fraud prevention).

7. Your rights

You have rights to access, rectify, erase, restrict, object, and data portability, and to withdraw consent at any time. You also have the right to complain to the UK ICO or your local authority.

8. Security

We use technical and organisational measures (encryption in transit, access controls, audit logging). No system is 100% secure.

9. Children

The Service is not directed to children under 16. Do not use the Service if you are under the age of digital consent in your country.

10. Automated decision-making

We do not perform solely automated decisions with legal or similarly significant effects.

11. Changes

We will post updates to this Privacy Policy and adjust the effective date.

12. Contact

Questions or requests? support@creatorsecure.com