Privacy Policy
Scope and company
Creator Program Inc., owned by TapTrap, LLC, operates Creator Program. This policy explains how we handle personal information when you sell or buy digital content, use our application, contact us or visit our marketing website.
This policy accompanies the terms accepted during creator onboarding. The application and marketing website use different technologies; their cookie and analytics practices are explained separately below.
1. Information we collect
If you email information about a payment dispute, authorized staff review the message and attachments and may include relevant material in a response to Stripe and the payment dispute process. We record case references, receipt and submission verification, and administrative actions separately from the email. Email material, financial records and provider-held copies follow their applicable retention policies; deleting data in our application does not delete copies held by email or payment providers.
For creator accounts, we collect the information you provide during registration and in settings: your email, legal name, username, profile picture, birthdate, country, phone number, language, onboarding responses, PayPal payout details and notification preferences. We also keep account status, acceptance of the terms and sign-in records.
When you upload content, we store the files, their versions and previews, file details, prices and publication status. When someone buys content, we receive their email and payment references and status from Stripe, and keep the purchased file version, price, fees, earnings, refunds, disputes and access records. Buyers do not need a creator account to purchase.
The iOS app uses Apple App Attest to verify app and device integrity. We store verified key identifiers, public keys, attestation environment, assertion counters and short-lived verification/session records. Private attestation keys remain on your device. We also process information you send in support conversations or account reviews, together with technical records needed to operate and protect the service. These may include device and browser information, IP addresses, request logs and the random browser identifier used to count unique content visits.
Free access claims collect the recipient’s first name, last name and email together with the content and access record, without a payment. Bank-withdrawal setup also involves Stripe Connect account, verification and bank-status references. Authorized administrators can see recorded account activity, app/version information and reported notification status for support and security; these records are observations, not proof of continuous activity or delivery.
1.1. Identity and address verification
Before withdrawing payments, you must complete identity and residential-address verification through Didit. Didit processes the identity document, selfie and liveness capture, proof-of-address document and technical fraud signals needed for the configured checks, including biometric face matching and IP analysis. Creator Program sends your account identifier and expected address to connect the checks to your account.
Creator Program stores your entered address, verified name, verification-session references, outcomes and audit events. Documents, selfies and biometric captures are handled by Didit. Verification may use automated checks and human review. Contact support to ask about a decision or request correction or deletion; payment and legal obligations may limit deletion. Didit's notice describes its processing and retention, including the application retention settings.
1.2. Push notifications
Push notifications are optional. If you opt in, we store your Expo notification token, a one-way fingerprint of the native APNs token (not the raw APNs token), a random app installation identifier linked to your verified app key, your permission state and separate sales and payout push preferences. We send the notification token and a brief sales or payout update through Expo Push Service and Apple Push Notification service. Notifications include account and payment or payout identifiers to open the correct private screen; the app verifies your account before navigating.
We keep notification jobs, provider acceptance and receipt outcomes to prevent duplicate sends and handle errors. Provider acceptance does not confirm device delivery. You can change push preferences in app Settings and notification permission in iOS Settings; email preferences are separate. Signing out or switching accounts removes delivery registration for that installation, and account closure removes all account registrations.
2. How we use information
We use this information to create and manage accounts, confirm eligibility, authenticate sign-ins, host and deliver files, display previews, count visits and buyers, process purchases, calculate earnings and fees, administer withdrawals and handle refunds or disputes.
We also use it to send access links and service communications, provide the purchase and payout updates you choose, respond to support requests, investigate fraud or ownership claims, protect accounts and comply with legal obligations. Identity or rights evidence may be requested when needed to review an account or transaction.
Where data-protection law requires a legal basis, service and transaction processing is tied to performing the requested agreement; legally required records and disclosures support legal obligations; proportionate security, support and service improvement may rely on legitimate interests; processing that requires consent must have the appropriate consent. Special rules can apply to identity and biometric information. Accepting these terms is not blanket consent to all processing.
3. Public profiles and private information
Your creator username, profile picture and previews of published content are public. Your drafts, legal name, email, birthdate, country, phone number and payout details are not displayed on your public profile. Creators see sales and earnings information and visitor and buyer counts.
Full files are delivered through authorized access links after purchase. A link gives access to the version purchased, including when the creator later replaces or removes it, subject to the access restrictions in our terms. Treat your access link as private: anyone you share it with may be able to use it. Necessary administrators and service providers may access information to operate the service, resolve support requests or investigate abuse.
Creators can receive information associated with their buyers or free recipients, including names and email addresses where provided, to fulfill access and handle support. Creators are responsible for their own lawful use of that information. Claiming or purchasing content does not by itself consent to a creator’s unrelated marketing.
4. Service providers and disclosures
We do not sell personal information or share it for advertising within the application. We use service providers for hosting, data and content storage, file processing and delivery, service reliability, security, email and customer support. These providers process account and contact information, content and technical records as needed to perform their respective services. If you contact us through WhatsApp, that platform and our messaging service providers also process your contact details and messages.
Stripe collects and processes payment details through its checkout under its own policies. Our application stores transaction references and payment results rather than your full card number. PayPal handles payout information under its own policies. We may disclose information when required by law or needed to address fraud, security issues, rights claims or other legitimate legal obligations.
We share information needed for an authorized withdrawal with the selected payout provider, including Stripe Connect for bank withdrawals. External websites, social platforms, payment services and verification providers may also process information for their own purposes under their own notices. Their separate processing is not governed solely by this policy.
5. Cookies, analytics and advertising
5.1. Application cookies and payment technologies
The web application uses cookies to maintain your session and remember your language. The iOS app keeps access credentials in memory and stores refresh credentials in device-protected secure storage to restore your session. Public content pages use a first-party cookie with a random identifier to count unique visits. This identifier is not a verified identity; the same person may be counted again when using another browser or device or clearing cookies. This visitor cookie can remain for up to one year.
The application does not load advertising or session-recording tools. Stripe may use cookies and similar technologies on its checkout and sites to process payments, secure its service and detect fraud. Its other cookie uses and available controls are explained in its policies. You can manage cookies in your browser; blocking necessary cookies can affect sign-in or purchases.
5.2. Marketing website analytics and advertising
Our separate marketing website uses Microsoft Clarity and Google Ads. Clarity helps us understand website use through interaction analytics and session recordings. Google Ads helps us measure advertising performance. These providers may process browser, device, interaction and cookie information under their own policies. These tools are not loaded in the content-selling application.
Our purpose in using these tools is to understand navigation, improve the website and measure campaign performance. Clarity can receive page URLs and titles, browser and device information, language, time zone, screen dimensions and interaction data. It also receives information about page structure, content and changes to reconstruct browsing sessions, with sensitive content masking according to its configuration.
Google Ads can receive page URLs and titles, screen dimensions, visit events, browser identifiers and consent signals. Its technology can also generate requests associated with advertising functions and user lists. This does not, by itself, mean that we use your visits to run personalized advertising campaigns. These providers may process information for their own purposes as described in their privacy notices.
Microsoft Clarity and Google Ads use cookies and similar technologies to analyze browsing and measure campaign performance. They can recognize a browser or link multiple visits, even if we do not know your name.
Where applicable law requires consent, non-essential cookies or similar technologies and processing that depends on consent require your prior, freely given, informed and affirmative choice. Visiting the website, continuing to browse, or accepting our terms or this policy does not provide that consent. If processing is based on consent, you may withdraw it without affecting the lawfulness of processing before withdrawal. This policy explains these requirements; it does not itself collect or record a consent choice.
You can manage cookies through your browser and review the providers' privacy information and available controls using the links below. The application's statement about not sharing information for advertising does not describe the separate marketing website's use of these tools.
6. Retention and account closure
We retain account, content, transaction and security records as needed to operate the service, fulfill purchases, resolve disputes and meet legal obligations. Removing a file from your profile or closing your account does not automatically remove the version delivered to existing buyers or records needed for payments, refunds or legal obligations.
Request deletion in the iOS app settings, or contact support if you cannot access the app. Requests immediately stop new sales and hide your public profile. Withdrawals remain available while balances, pending payouts, unsettled earnings, fees, refunds and disputes are resolved. Support can issue a final payout below the withdrawal minimum. We complete deletion within 30 days after settlement, revoke sessions and remove unnecessary personal data. Required financial, security and purchased-file records are retained for buyer access and legal obligations. Provider retention practices are also governed by their own policies.
Retention depends on the purpose, transaction and dispute status, fraud and security needs, applicable limitation periods and legal duties. Backups and provider records may have separate retention cycles. A deletion request does not promise immediate erasure of every copy; contact us for information about a particular category.
Where we must retain certain data to meet legal obligations, fulfill purchases or resolve claims, we will explain what information we retain and why.
7. Processing locations
Creator Program and its providers may process information in the United States and other countries where they operate. Applicable protections and provider arrangements govern that processing.
Processing in another country does not remove protections that applicable law gives you. Contact us for information about relevant processing locations, recipients and transfer arrangements. We do not treat use of the service alone as a waiver of your privacy rights.
8. Security
We use access controls, protected file delivery and other technical measures to protect account and purchase information. Keep your sign-in codes and purchase links private. No method of online storage or transmission can guarantee complete security.
9. Your requests and communication choices
You can update available profile and payout details in settings and choose whether to receive purchase and payout updates by email. Necessary sign-in, purchase-access, security and legal communications may still be sent.
You can request access, correction or deletion of your data and exercise any other rights available to you by writing to the email address indicated in this policy. Describe the information or activity concerned. Depending on the law that applies to you, you may also have rights to restrict or object to processing, obtain a portable copy, withdraw consent for processing based on consent or complain to a data protection authority.
We may request proportionate information to verify your identity. We will respond to your request within the applicable legal deadlines and explain any lawful limitation on the request. Where applicable law allows, you may use an authorized representative or complain to your local supervisory authority. Withdrawing consent does not invalidate earlier lawful processing; declining information needed for a requested feature can prevent us from providing it.
10. Eligibility
Creator accounts are for people who are at least 18 and legally able to accept our terms. Contact us if you believe an ineligible person has provided information or if you have a privacy concern.
11. Changes to this policy
We may update this policy as the service or legal requirements change. We will communicate material changes and their effective date by email or within the application before applying them. The date above identifies this version.
12. Contact Us
For privacy questions or requests about your information, contact us:
Creator Program Inc.
131 Continental Dr, Suite 305
Newark, DE 19713, United States
Email: contact@creatorprogram.app
Phone: +1 270-550-1776
Website: taptrap.company