Privacy Policy

Last updated: October 29, 2026. Effective: October 29, 2026.

This Privacy Policy explains how Craze Software, LLC (d/b/a ContentCraze) ("ContentCraze," "we," "us," or "our") collects, uses, discloses, and protects personal information when you use our services, including our websites, brand web portal, creator applications, and related services (collectively, the “Services”). It also explains your choices and rights.

Plain-English note (privacy vs. ownership): This Privacy Policy is about personal information. Content ownership is governed by Section 10 of our Terms of Service and by our Creator Assent. In general, a Brand owns a creator’s video once it is Accepted (expressly approved or purchased) and paid for, even though the video may still contain the creator’s likeness, voice, or handle.

1) Who we are & how to contact us

  • Company: Craze Software, LLC (d/b/a ContentCraze)
  • Email: nick@contentcraze.io
  • Postal address: 131 Continental Dr Ste 305, Newark, DE 19713, USA

2) Scope

This Policy applies to personal information we process when:

  • Creators use our creator applications to browse campaigns and submit content.
  • Brands use our brand portal to create programs and review submissions.
  • Anyone visits our websites or communicates with us (e.g., support).

This Policy does not cover:

  • TikTok’s, Instagram’s, or other third-party platforms’ processing of your information on their platforms (see their respective policies).
  • A Brand’s processing of information outside ContentCraze (e.g., the Brand importing content into its own systems).
  • Third-party sites or services you access through links in our Services.

3) Key terms (for privacy context)

  • “Brand”: a business or organization using the Services.
  • “Creator”: an individual using the Services to submit content.
  • “Marketplace”: where Brands post briefs and Creators submit finished deliverables that may be purchased/Accepted.
  • “Campaign”: a program a Brand runs through the Services in which Creators make and submit content.
  • “Submission”: content a Creator uploads, links, or provides through the Services (including edits, versions, captions, scripts, and related assets).
  • “Accepted”: a Submission expressly approved or purchased through the Services, as defined in Section 10.1 of our Terms of Service. A Submission that has simply not been rejected is not Accepted.

4) Information we collect

A) Information you provide

Creators

  • Account information (e.g., email, username/handle, password hashed, profile image if provided).
  • Eligibility/age confirmation where required.
  • Submissions and metadata you provide (e.g., TikTok link/ID, captions/hashtags, revisions/alternate cuts, thumbnails, scripts, on-screen text, raw files if required by Program Rules).
  • Messages, feedback, and support requests.

Brands

  • Account and team information (e.g., company name, contact name, work email).
  • Brand profile details you provide (e.g., industry, goals, guidelines, creative direction, uploaded assets).
  • Program setup details (briefs, campaign rules, resources, prize details, budgets, review notes).

Everyone

  • Communications you send us (emails, forms, surveys, feedback).
  • If you opt in to SMS: phone number, opt-in status, opt-in timestamp, and messaging preferences. We do not sell, rent, or share your phone number or SMS opt-in consent with third parties for their marketing purposes.

B) Information we receive from connected platforms (e.g., TikTok, Instagram, YouTube)

If you connect a social media account (e.g., TikTok, Instagram), we receive information via that platform’s APIs only with your authorization and limited to the scopes you grant. This may include:

  • Basic profile information (e.g., user ID, display name, avatar) and other profile fields provided by the platform.
  • Video/content lists and metadata as permitted.
  • Performance metrics for Submissions (e.g., views, likes, comments, shares, saves) for verification, leaderboards, and earnings calculations.

We also read public Instagram posts and their public metrics through a third-party data provider, to check posts submitted to a campaign and to count their views.

When you connect a YouTube channel, ContentCraze uses YouTube API Services. With your permission we read your channel’s id and name to prove the channel is yours, and its subscriber count. We read the public videos you post for a campaign to find them and count their views. We do not post, edit or delete anything on YouTube. Google’s Privacy Policy applies to YouTube: https://policies.google.com/privacy. You can remove our access at any time in your Google Account’s security settings at https://myaccount.google.com/permissions, or by removing the account in ContentCraze.

C) Payments & subscriptions (via Stripe and other providers)

Creators (payouts): Payment providers may collect identity/KYC and tax information (e.g., W-9/W-8BEN) and payout details. We typically receive limited information (e.g., onboarding status, payout status, and transfer identifiers), not full payment-instrument details.

Brands (subscriptions/purchases): Payment card details are handled by our payment processor(s). We may receive and store billing contact info, subscription plan, invoices/receipts, and limited payment status (e.g., last 4 digits, expiration month/year, payment success/failure).

D) Technical, device, and usage data

  • IP address, approximate location (e.g., city/state derived from IP), timestamps.
  • Device type, OS version, app version, language, time zone.
  • Log data (pages/screens viewed, clicks, referrers, crash/error logs).
  • Cookies or similar technologies on web; mobile SDK identifiers on app (see Cookies & analytics below).

E) Information we infer or generate

  • Program participation, review status, and integrity/fraud signals (e.g., suspected inauthentic behavior).
  • Aggregated statistics and reporting (e.g., total views across a program).
  • Ranking/ordering signals for leaderboards or program views (e.g., sorting by performance).
We do not intentionally collect sensitive categories of personal information (e.g., health data). Some “sensitive” information (as defined by certain laws) may be processed incidentally (for example, a creator’s likeness/voice appearing in a Submission).

5) How we use personal information

We use personal information to:

  1. Provide and operate the Services (accounts, program participation, submission workflows, messaging, support).
  2. Review and moderate Submissions for compliance with Program Rules and platform integrity (including admin review/approval workflows).
  3. Verify performance (including through TikTok APIs where authorized), calculate earnings, and operate leaderboards/analytics.
  4. Process payments and payouts, including subscriptions, purchases, and creator payouts via payment providers.
  5. Communicate with you (service notices, receipts, support, policy updates). With consent where required, send marketing communications.
  6. Run optional SMS programs (verification codes, alerts, updates; and marketing texts only where you opt in).
  7. Protect the Services (fraud prevention, security monitoring, dispute handling, enforcement of Terms/Program Rules).
  8. Improve the Services (analytics, troubleshooting, research, product development, quality assurance).
  9. Provide AI features that help draft scripts and edit videos, as described in Section 6.

6) AI features

A) What the AI features do

The Services use AI to help draft scripts and other campaign text, and to transcribe and edit creator videos.

  • Inputs: may include Brand profile information, campaign briefs, scripts, metadata you provide in the Services, and the audio and video of Submissions.
  • Outputs: are suggestions or automatic edits; users remain responsible for compliance and accuracy.

B) General AI disclosures

  • Model improvement: we may use aggregated and de-identified information to improve our features. We do not use your personal information to train publicly available foundation models.
  • Third-party AI providers: We use third-party AI service providers (including for transcription, text generation, and data retrieval) to deliver these features. These providers process data under contractual protections, access controls, and data-processing agreements. We select providers whose terms prohibit using customer data to train general-purpose models.

7) Legal bases (EEA/UK where applicable)

Where GDPR/UK GDPR applies, we process personal information based on:

  • Contract (to provide the Services and Program Rules you request).
  • Legitimate interests (to secure, improve, and measure the Services; prevent fraud; provide analytics and planning tools).
  • Consent (e.g., TikTok connection, certain cookies/SDKs, marketing email/SMS where required).
  • Legal obligations (tax, accounting, KYC, responding to lawful requests).

8) How we share and disclose information

We may share personal information with:

A) Brands (program operations)

We share information with a Brand as needed to operate a Marketplace brief or Campaign, such as:

  • Creator Submissions and related metadata (including creator handle/username, and performance metrics);
  • Review status (Accepted/rejected) and feedback;
  • Program analytics shown in the Services.

Important: Brands may use Accepted Submissions outside our Services. Their use is governed by their own policies and our Terms/Program Rules.

B) Service providers and vendors

We share information with vendors that help us run the Services (hosting, storage, analytics, advertising measurement, customer support, email, SMS delivery, fraud prevention, security, payments, and AI processing). These providers may access information only to perform services for us and are required to protect it under contractual data-processing agreements.

C) Platform integrations (TikTok, Instagram, YouTube, and others)

If you connect TikTok, Instagram, YouTube, or another integration we offer, information is exchanged as part of that integration and subject to the third party’s policies.

We may disclose information to comply with law, respond to lawful requests, enforce our agreements, and protect users, partners, and the public.

E) Business transfers

If we are involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction.

F) Your ContentCraze link page (creators)

If you are a Creator, we host a public page at contentcraze.io/c/ followed by your handle. It shows your handle, your connected TikTok and Instagram profile links when your TikTok account is connected, and the Brands whose campaigns you are currently in that ask for a link in your bio, with a link to each Brand’s site. We label these as paid partnerships. If you are under 18, the page shows none of this. The page does not show your name, photo, age, earnings, or contact details, and we ask search engines not to index it. If you delete your account, the page stops showing your information and shows that the link is no longer active.

No sale for money: We do not sell personal information for money. Some privacy laws define “sell” or “share” broadly (e.g., for targeted advertising). See Your choices & rights for opt-out options.

9) Cookies, analytics, and interest-based advertising

We may use cookies and similar technologies on our websites and SDKs in our apps to:

  • operate essential site/app functions,
  • remember preferences,
  • understand usage and improve performance,
  • detect fraud and secure accounts,
  • measure our advertising.

Advertising partners. Our marketing website (contentcraze.io) uses the Meta Pixel (Meta Platforms, Inc.) and the Google tag for Google Ads (Google LLC). They set cookies and receive information about your visit, such as the pages you view, the buttons you press, your IP address and your browser, so Meta and Google can measure our ads and show them to people likely to be interested. Our brand portal (app.contentcraze.io) loads neither.

Signups and payments we report. When a Brand account is created, pays for its first plan, or has its first campaign go live, our servers tell Meta (through its Conversions API) and Google (through Google Ads enhanced conversions) that it happened, so they can measure which ads work. We send only what they need to match it: the account's sign-in email address and an account identifier, each hashed (turned into a one-way code) before it leaves our servers; the ad click identifiers from the link you arrived through; and, for Meta, its cookie values, your IP address and your browser. We never send your name, phone number, postal address, or payment details. We keep the IP address, browser, and Meta cookie values from signup for 30 days, then delete them.

Your choice. If you press Decline on our cookie banner, or your browser sends a Global Privacy Control signal, the Meta Pixel and the Google tag do not load on our website, and our servers send nothing about your account to Meta or Google. Your choice is saved in a cookie on contentcraze.io so our brand portal honors it too. You can also opt out by emailing nick@contentcraze.io. Meta's and Google's own use of this information is governed by their privacy policies.

Where required by law, we provide choices for non-essential cookies. You can also control cookies through browser settings and mobile OS privacy settings.

10) Data retention

We keep personal information only as long as reasonably necessary to:

  • provide and secure the Services,
  • operate programs (including verification, payouts, and dispute handling),
  • comply with legal and accounting requirements,
  • enforce our agreements and policies.

We may retain archival copies of Submissions and related metadata for integrity verification, audits, recordkeeping, and enforcement, even if a Submission is removed from view in the Services, as permitted by law.

When information is no longer needed, we delete it or de-identify it.

11) Security

We use reasonable technical and organizational measures to protect personal information (access controls, encryption in transit, logging, and other safeguards). No system is 100% secure; please use strong passwords and keep account credentials safe.

12) International data transfers

We may store and process information in the United States and other countries. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

13) Age requirement

You must be at least 18 to have a ContentCraze account, as a Creator or as a Brand account holder. The Services are not directed to anyone under 18, and we do not knowingly collect personal information from children under 13.

If you believe someone under 18 has an account, or that we collected information from a child, contact nick@contentcraze.io and we will look into it.

14) Your choices & rights

A) Account controls

You may be able to access, correct, or update certain information in-app or in the brand portal.

B) Marketing choices

  • Email: unsubscribe using the link in marketing emails or in-app settings (where available).
  • SMS: reply STOP to any message to opt out of all text messages; reply HELP for support. Message frequency varies. Standard message and data rates may apply. Consent to receive SMS is not a condition of purchase or use of the Services. We do not share your phone number or opt-in consent with third parties for marketing. See Section 14 of our Terms of Service and our SMS Terms for the ContentCraze Alerts program details.

C) Platform connections

You can disconnect TikTok, Instagram, YouTube, or other platform access in the Services (where available) and/or through the respective platform's settings.

D) Privacy rights requests

Depending on where you live, you may have rights to:

  • request access to personal information we hold,
  • request correction,
  • request deletion,
  • request a copy/portability,
  • opt out of certain processing (including “sale/sharing” or targeted advertising where applicable),
  • restrict or object to certain processing (where applicable),
  • appeal a denied request (where required by law).

To exercise rights, email nick@contentcraze.io. We may verify your identity and request additional information to process your request.

EU/UK: You may lodge a complaint with your data protection authority.

California and other US states: We will not discriminate for exercising rights. You may authorize an agent to submit requests where permitted by law (we may require proof of authorization).

15) California & US state privacy disclosures (summary)

Depending on your state of residence, you may have privacy rights under laws such as the CCPA/CPRA (California), CPA (Colorado), VCDPA (Virginia), CTDPA (Connecticut), and others.

Categories of personal information (examples)

We may collect the following categories (as defined by applicable laws), depending on how you use the Services:

  • Identifiers: name, email, account IDs, IP address.
  • Commercial information: subscription plan, purchases, invoices.
  • Internet/network activity: usage logs, interactions with our Services.
  • Geolocation (approximate): derived from IP address.
  • Audio/visual information: likeness/voice as included in Submissions.
  • Professional information: brand/team contact details.
  • Inferences: program participation signals or fraud-risk indicators.

“Sale” / “Share”

We do not sell personal information for money. Our use of the Meta Pixel, the Google tag, and the signup and payment reports described in Section 9 may be “sharing” for cross-context behavioral advertising under some state laws. You can opt out by pressing Decline on our cookie banner, by turning on Global Privacy Control in your browser, or by emailing nick@contentcraze.io.

16) SMS / text message communications

If you provide your phone number, you may separately opt in to ContentCraze Alerts, our SMS text message program. We send two kinds of messages: (a) one-time verification codes to confirm your phone number, and (b) transactional account notifications such as submission approvals, payout confirmations, campaign status updates, and new-message alerts. We do not send marketing or promotional SMS.

Message frequency varies with your account activity. Message and data rates may apply. Consent to receive SMS is not a condition of any purchase or of using the service. You can opt out at any time by replying STOP to any message, and you can reply HELP for assistance. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Full program terms: SMS Terms.

17) Third-party links and platforms

Our Services may include links to third-party sites or services (including TikTok). Their privacy practices are governed by their own policies.

18) Changes to this Privacy Policy

We may update this Policy from time to time. If we make material changes, we will provide notice (e.g., in-app or by email) and update the “Last updated” date above.

19) How this Policy relates to our other terms

  • Our Terms of Service govern your use of the Services, including when ownership of content transfers (Section 10).
  • Our Creator Assent governs creator participation, posting duties, and creator rights.
  • The Program Rules shown on each campaign page govern that campaign, and the brief governs each Marketplace brief.

Terms of Service: https://www.contentcraze.io/terms-of-service

Privacy Policy: https://www.contentcraze.io/privacy-policy

Contact

Questions about privacy? Email nick@contentcraze.io.