Last updated: September 2026
CreatorBase ("we", "us", "our") is a trading name operated as a business partnership under the laws of England and Wales. We operate an AI-powered platform for content creators at creator-base.io, helping creators find brands, write pitches, send emails, and manage their brand partnership pipeline. For all privacy enquiries, contact us at hello@creator-base.io. We aim to respond within 5 business days.
We collect the following categories of personal data: (a) Account information — your name and email address when you sign up via Google. (b) Creator profile — information you voluntarily provide, including your bio, niche, creator type, location, follower counts across Instagram, YouTube, and TikTok, and social media links. (c) Gmail data — with your explicit permission only, we access your Gmail account to send pitch emails on your behalf and scan your inbox for brand deal replies. We only process emails relevant to your brand partnerships and do not read, store, or analyse personal emails unrelated to brand deals. (d) Brand deal data — details of brands you add to your pipeline, including company name, contact information, deal stage, deal value, and notes. (e) Pitch content — pitches you create or that are AI-generated on your behalf. (f) Usage data — how you interact with the platform, including features used and actions taken, collected to improve the service. (g) Payment information — payment is processed by Stripe; we do not store your card details.
Under UK GDPR, we process your personal data on the following lawful bases: (a) Contract performance — account information, creator profile, brand deal data, pitch content, and payment processing are necessary to provide the CreatorBase service you have signed up for. (b) Explicit consent — Gmail access and email automation are processed only with your explicit consent, which you may withdraw at any time. (c) Legitimate interests — usage data and error monitoring are processed on the basis of our legitimate interest in maintaining and improving the platform, balanced against your privacy rights. (d) Legal obligation — where required to comply with applicable law.
We use your data to: provide the CreatorBase service and maintain your account; generate AI-powered pitch content, follow-up emails, and bio suggestions personalised to your creator profile; send pitch emails from your connected Gmail account on your behalf; scan your Gmail inbox for brand deal replies and surface them in your pipeline; find brand contact emails using our email discovery tools; track and manage your brand deal pipeline; analyse competitor brand activity to inform your outreach strategy; send you transactional emails from hello@creator-base.io; monitor platform errors and performance; and comply with legal obligations. We do not use your data for advertising purposes and do not sell your data to any third party.
CreatorBase requests the following Gmail permissions with your explicit consent: (a) Send emails — to send pitch emails and follow-ups on your behalf from your Gmail address; (b) Read emails — to scan your inbox for replies from brands and surface them in your pipeline. We only read emails that appear to be brand deal related. We do not read, store, or share personal emails unrelated to your brand partnerships. You can revoke Gmail access at any time from your Google Account settings (myaccount.google.com/permissions) or from within CreatorBase Settings. Revoking access stops all email sending and inbox scanning but does not affect your other account data. Our use of Gmail data complies with Google's API Services User Data Policy.
Where you use CreatorBase to send outreach emails to third parties, you are solely responsible for ensuring that your outreach complies with the UK Privacy and Electronic Communications Regulations (PECR) and any other applicable laws. CreatorBase acts as a technical facilitator only — all emails are sent in your name and on your behalf. You must ensure that recipients have either consented to receive your communications or that you have a legitimate interest basis for contacting them. CreatorBase does not verify or warrant the legality of your outreach campaigns and accepts no liability for any regulatory action, complaint, or claim arising from emails sent using the platform.
CreatorBase uses Anthropic's Claude AI to generate pitch emails, follow-up messages, bio suggestions, prospect lists, and competitor analysis. To provide this functionality, we share relevant parts of your creator profile (niche, follower counts, bio, location) and your search queries with Anthropic's API. We do not share your Gmail content or personal emails with Anthropic. AI-generated content is provided as a starting point — you remain solely responsible for reviewing and editing anything sent in your name. We do not use your content to train AI models.
To help you find brand contact details, we use Hunter.io, an email discovery service. When you search for a brand, we may query Hunter.io with the brand's domain to find a relevant contact email. We cache contact results in our database to reduce repeated lookups. Contact data found through Hunter.io relates to business contacts and is used solely for the purpose of brand outreach within the platform. Hunter.io operates under its own privacy policy available at hunter.io. You are responsible for ensuring your use of discovered contact data complies with applicable law.
Your data is stored securely using Supabase (PostgreSQL) hosted in the EU, with row-level security ensuring users can only access their own data. We use Upstash Redis for rate limiting. Errors are monitored using Sentry. All data is encrypted in transit using TLS. We implement reasonable technical and organisational measures to protect your data against unauthorised access, loss, or destruction. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the Information Commissioner's Office (ICO) without undue delay and where feasible within 72 hours of becoming aware of the breach.
CreatorBase integrates with the following third-party services, each operating under their own privacy policy: Google OAuth and Gmail API (authentication and email); Anthropic Claude API (AI content generation); Hunter.io (email discovery); Supabase (database and authentication infrastructure); Resend (transactional email delivery); Stripe (payment processing); Upstash (rate limiting); Sentry (error monitoring). We only share data with these services to the extent strictly necessary to provide the CreatorBase service. We are not responsible for how third-party services process your data.
We retain your personal data for as long as your account is active and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce our agreements. If you delete your account, we will delete your personal data, creator profile, pitch history, and pipeline data within 30 days. Certain data (such as billing records) may be retained for longer where required by law. Anonymised, aggregated data that cannot identify you may be retained indefinitely for service improvement purposes.
Under UK GDPR, you have the following rights: (a) Access — request a copy of the personal data we hold about you; (b) Rectification — request correction of inaccurate data; (c) Erasure — request deletion of your data ('right to be forgotten'); (d) Restriction — request that we restrict processing of your data; (e) Objection — object to processing based on legitimate interests; (f) Portability — receive your data in a structured, machine-readable format; (g) Withdraw consent — withdraw consent at any time, including for Gmail access. To exercise any of these rights, contact us at hello@creator-base.io. We will respond within 30 days. We will not discriminate against you for exercising your rights.
We use essential cookies for authentication and session management only. We do not use tracking, advertising, or third-party analytics cookies. Essential cookies cannot be disabled as they are required for the platform to function. By using CreatorBase, you consent to our use of essential cookies.
CreatorBase is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us immediately at hello@creator-base.io and we will delete that data promptly.
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of significant changes by email or by displaying a notice within the app at least 14 days before changes take effect. Continued use of CreatorBase after changes take effect constitutes your acceptance of the updated policy.
For any privacy concerns, data subject requests, or to exercise your rights under UK GDPR, contact us at hello@creator-base.io. We will acknowledge your request within 5 business days and respond in full within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.