Last updated: October 28, 2025

This Privacy Policy explains how Craze Software, LLC ("ContentCraze", "we", "us", or "our") collects, uses, discloses, and protects personal information when brands use our web app and creators use our iOS/Android app (together, the "Services"). It also describes your choices and rights.

Plain‑English note: ContentCraze runs skill‑based short‑form video competitions designed for TikTok‑native content. Ownership of content is governed by our Official Contest Rules (brands own winning content in perpetuity). This Policy is about personal information, not IP ownership.

1) Who we are & how to contact us

• Controller: Craze Software, LLC (doing business as ContentCraze)

• Email: nick@contentcraze.io

• Postal address: 131 Continental Dr Ste 305, Newark, DE 19713, USA

2) Scope

This Policy applies to personal information we process when:

• Creators browse, sign up, and submit entries through our mobile app.

• Brands sign up, create competitions, and review entries in our web app.

• Anyone visits our websites, support pages, or receives communications from us.

It does not cover TikTok's own processing of your information (see TikTok's policies), nor sponsors' processing that occurs off ContentCraze.

3) Information we collect

A. Information you provide

• Account & profile (creators): name, display name/handle, email, password (hashed), region/age confirmation.

• Account & profile (brands): company name, contact name, work email, industry, budget ranges, marketing goals, brand description, and any materials you upload.

• Competitions: briefs, rules, prize details, and assets you upload (logos, product shots, example clips) for creators to use.

• Submissions (UGC): TikTok video links/IDs and related captions/hashtags you submit via our app.

• Support & communications: messages you send us (email, forms), feedback, and survey responses.

• SMS program (optional): your mobile number, opt‑in/consent timestamp, and message preferences (e.g., transactional alerts, marketing texts).

B. Information from TikTok (when a creator connects)

We access information via TikTok's APIs only with your authorization and limited to allowed scopes. Today these include (subject to TikTok's scope names and your consent):

• user.info.basic (e.g., open_id, avatar, display name)

• user.info.profile (e.g., profile_web_link, profile_deep_link, bio_description, is_verified)

• user.info.stats (e.g., likes count, follower count, following count, video count)

• video.list (e.g., your public videos' IDs/metadata as permitted by TikTok)

We also collect performance metrics for your submissions during a competition (e.g., views, comments, shares, likes, saves, reposts) to compute our Impact Score.

C. Payments & tax (creators)

Via Stripe: payout information, identity/KYC and tax forms (e.g., W‑9/W‑8BEN) are handled through Stripe. We receive status indicators and limited payout details from Stripe (not full payment instrument data). See Stripe's privacy policy for details.

D. Technical & usage data

• Device & app data: device type, OS version, app version, language, time zone.

• Log data: IP address, timestamps, pages/screens viewed, referrer, error logs.

• Cookies/SDKs: we use cookies and mobile SDKs to operate, secure, and improve the Services.

We do not knowingly collect sensitive categories (e.g., health data) through the Services.

4) How we use information (purposes)

We use personal information to:

1. Provide and operate the Services (account creation, log‑in, contest setup, submission intake, leaderboards).

2. Compute metrics and Impact Score and display leaderboards.

3. Verify eligibility, prevent fraud/abuse, and ensure rule compliance.

4. Process payouts and taxes via Stripe; manage creator rewards.

5. Communicate with you (transactional emails, policy updates, service notices) and, with consent where required, send marketing communications via email or SMS.

6. SMS program operations: send transactional texts (e.g., verification codes, submission confirmations, payout notices) and marketing texts where you've opted‑in; manage opt‑ins/opt‑outs (STOP/HELP) and preferences.

7. Support and improve the Services (debugging, analytics, research, training, and quality assurance).

8. AI features for brands and creators: use brand‑provided profile data (industry, budget, goals, descriptions) and competition metadata to power our AI‑Viral Assistant that analyzes TikTok trends and suggests creative directions. We may use aggregated and de‑identified data to improve AI models and features; we do not train public foundation models with your personal information.

9. Protect the Service, our users, and our partners (security monitoring, abuse investigation).

10. Comply with law, enforce our Terms and Official Contest Rules, and respond to lawful requests.

Automated processing: Impact Score and ranking involve automated calculations of performance metrics. You can contact us to contest or seek human review if an automated decision significantly affects you (where required by law).

5) Legal bases (EEA/UK where applicable)

Where GDPR/UK GDPR applies, we rely on:

• Contract (to provide the Services you request, including competitions and payouts).

• Legitimate interests (to secure and improve the Services; prevent fraud; measure performance; run brand‑facing analytics and AI features that support campaign planning).

• Consent (where required, e.g., connecting your TikTok account; certain cookies/SDKs; marketing emails/SMS).

• Legal obligations (tax, accounting, KYC, regulatory compliance).

6) Sharing & disclosure

We share information with:

• Service providers (e.g., hosting, storage, security, email, support tooling, fraud prevention, SMS delivery providers) under contract and only as needed to perform services for us.

• Stripe (payouts, KYC, tax forms for creators).

• TikTok (when you interact through their APIs; subject to your authorization).

• Sponsors/brands (competition operations: entries, metrics, leaderboards, and post‑contest winner details as needed to deliver rewards and related services; brand account data is visible to your brand team in‑product and used to power AI recommendations).

• Legal & safety (to comply with law, enforce policies, protect rights, investigate abuse).

• Business transfers (if we're involved in a merger, financing, acquisition, or sale of assets, information may be transferred as part of that transaction).

We do not sell personal information for money. Where "sale" or "sharing" has a broader legal meaning (e.g., CPRA), see Your privacy choices & rights below for your opt‑out choices.

7) Data retention

We keep information only as long as necessary to provide the Services and for legitimate business needs, including to:

• operate competitions and verify results,

• meet legal, tax, and accounting requirements,

• resolve disputes and enforce agreements.

We also maintain archival copies of submissions/metadata for verification and integrity review. Retention periods vary by data type; we delete or de‑identify data when no longer needed.

8) Children

ContentCraze is not directed to children under 13. Creators in the US must be 13+ (with parent/guardian consent if under 18). In the EU, creators must be 13+ (with parent/guardian consent if under the local digital age of consent). Others must be 18+. If you believe we've collected information from a child improperly, contact us at nick@contentcraze.io.

9) Your privacy choices & rights

Your choices may include:

• Access, correction, deletion of your personal information.

• Portability (get a copy of key data you provided).

• Consent withdrawal (e.g., disconnect TikTok; opt out of marketing communications).

• Email marketing: unsubscribe via the email link or in‑app settings.

• SMS program: opt out any time by replying STOP; for help reply HELP. Message frequency varies. Message and data rates may apply. Consent is not a condition of purchase. Manage preferences in‑app.

• Opt‑out of sale/sharing/targeted advertising (where applicable under state laws).

• Object or restrict certain processing where permitted by law.

How to exercise: email nick@contentcraze.io or use in‑app controls. We may ask for verification. You can also disconnect TikTok access in‑app or via TikTok.

EU/UK users: you may contact your data protection authority and have the right to lodge a complaint.

California/US state residents: You may have rights under privacy laws (e.g., CCPA/CPRA, CPA, VCDPA, CTDPA). We will not discriminate for exercising rights. For CPRA, you can request: access, deletion, correction, opt‑out of sale/sharing, and limit the use of sensitive information (if ever collected).

10) International data transfers

We may process and store information in the United States and other countries. Where required, we use appropriate safeguards (e.g., standard contractual clauses) to protect cross‑border transfers.

11) Security

We use technical and organizational measures to protect personal information (access controls, encryption in transit, logging, and other safeguards). No system is 100% secure; please use strong passwords and keep your account details safe.

12) Third‑party links, SMS & social platforms

Our Services may link to third‑party sites or services (including TikTok). Their privacy practices are governed by their own policies.

SMS Program Terms (summary): By opting in, you consent to receive SMS from ContentCraze at the number you provide. Message frequency varies. Message and data rates may apply. Reply STOP to cancel, HELP for help. Consent is not a condition of purchase. Carriers are not liable for delayed or undelivered messages.

13) Changes to this Policy

We may update this Policy to reflect changes to our practices or legal requirements. If we make material changes, we'll provide notice (e.g., in‑app or by email) and indicate the effective date at the top of this page.

14) Region‑specific disclosures (summary)

• California (CPRA): We provide disclosures about categories of personal information collected, purposes, sources, and disclosures for business purposes. We do not sell personal information for money. To exercise rights, see Your privacy choices & rights.

• EEA/UK GDPR: Craze Software, LLC is the controller for the Services. Legal bases are described above. Contact details are in Who we are & how to contact us. You may lodge a complaint with your supervisory authority.

15) How this Policy relates to our Rules & Terms

• Official Contest Rules govern competition mechanics, eligibility, scoring, and ownership of content (brands own winning content in perpetuity).

• Terms of Service govern your contractual relationship with ContentCraze.

• This Privacy Policy explains how personal information is handled across those contexts.

Contact

nick@contentcraze.io