Legal & policies

Privacy Policy

Last updated 2026-08-14

This Privacy Policy explains how Creatly (“we”, “us”, or “our”) collects, uses, and protects your information when you use our website creatly.me and related services (the “Platform”).

By using the Platform, you agree to this Policy. If you do not agree, please do not use the Platform.

1. Who we are

Creatly is operated by AIKAY TECHNOLOGIES PRIVATE LIMITED, a company registered in India. Creatly is a platform that helps creators sell digital products, services, and subscriptions to their audience.

2. Information we collect

We collect the following information:

  • Information you give us: Name, email, phone number, profile picture, username/slug, password, and any content or files you upload to your storefront.
  • Payment information: For Creators, your bank account, UPI ID, PAN, and KYC documents needed to receive payouts. For Buyers, your payment is processed directly by Razorpay — we do not store your card or banking details.
  • Information collected automatically: IP address, device type, browser, pages visited, and basic usage data.
  • Information from third parties: If you sign up using Google, we receive your name, email, and profile picture from Google. If you connect optional integrations (such as Google Calendar, Google Meet, Zoom, Instagram, Mailchimp, or ConvertKit), we receive data from those services as described in Section 5.

3. How we use your information

We use your information to:

  • Create and manage your account
  • Run your storefront and process orders
  • Send you transactional emails (order confirmations, payout notifications, support replies)
  • Send you marketing emails, newsletters, and updates (only if you've opted in — you can unsubscribe anytime)
  • Process payments and payouts
  • Operate the third-party integrations you connect to your account
  • Comply with Indian law, including tax laws and KYC requirements
  • Prevent fraud and improve the Platform

4. Who we share your information with

We do not sell your data. We share it only with:

  • Payment partners: Razorpay (for accepting payments) and Cashfree (for paying out to Creators).
  • Authentication: Google (if you sign in with Google).
  • WhatsApp delivery and messaging: Meta Platforms, through the WhatsApp Business Cloud API, so we can send order confirmations, download links, community invites, and — where you have opted in — Creator broadcasts. See below.
  • Community platforms: Telegram and Discord, when a Creator gates a paid community on them. See below.
  • Email delivery: Resend, which sends our transactional and (opted-in) marketing email on our behalf.
  • Infrastructure: Supabase (authentication), Amazon Web Services (application servers, database, and file storage), and Cloudflare (content delivery and file storage).
  • Analytics: tools that tell us how the Platform is used.
  • Integration partners you connect: Google, Zoom, Meta (Instagram/Facebook), Mailchimp, and ConvertKit — only when you explicitly connect them. Data shared with each is described in Section 5.
  • Government or legal authorities: when required by law, court order, or to protect our rights.
  • In a business sale: if Creatly is acquired or merged, your data may transfer to the new owner.

WhatsApp (via Meta)

Creatly delivers orders over WhatsApp using Meta's WhatsApp Business Cloud API, from a Creatly-operated business number shared by all Creators on the Platform. To send those messages we share the Buyer's phone number and name, and the order details that appear in the message (Creator or brand name, product name, amount, and the download, invoice, or community join link), with Meta.

  • Order confirmations, download links, community invites, and booking reminders are sent as part of fulfilling an order, to the phone number given at checkout.
  • Creator broadcasts and follow-up messages are sent only to Buyers who opted in at checkout.
  • Replies a Buyer sends to that number are received by Creatly and shown to the Creator whose order the reply relates to, so they can respond.
  • A Buyer can stop all WhatsApp messages at any time by replying STOP, or via the unsubscribe link in a broadcast. Order delivery then falls back to email.

Messages sent through WhatsApp are also governed by Meta's and WhatsApp's own privacy policies.

Telegram and Discord

When a Creator gates a paid community on Telegram or Discord, we use those platforms' APIs to add a Buyer when they pay and to remove them when the membership ends. On Telegram we generate a personal join link and receive the Buyer's Telegram user ID when they use it. On Discord the Buyer authorises Creatly through Discord's own consent screen, and we receive their Discord user ID so we can add them to the Creator's server and grant the paid role. We store only those identifiers, linked to the membership they belong to, and we do not read community messages.

5. Third-party integrations you connect

If you choose to connect optional integrations from your dashboard, we request only the permissions required for each integration to function. You can disconnect any integration at any time from Dashboard → Integrations, or by revoking access directly from the third-party provider.

Use of Google API services

Creatly's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We do not:

  • Use Google user data for advertising
  • Sell Google user data or share it with third parties for unrelated purposes
  • Use Google user data to train AI or machine learning models
  • Allow humans to read Google user data, except where required for security investigations, legal compliance, or with your explicit consent

Google Calendar and Google Meet

When you connect your Google account, we access:

  • Your basic Google profile (name, email, profile picture) for account identification
  • Your calendar's availability and event details, only to check when you're free, add buyer bookings to your calendar, and generate Google Meet links for those bookings

We do not read or modify any calendar events that were not created by Creatly. You can revoke our access at any time at myaccount.google.com/permissions.

Zoom

When you connect your Zoom account, we access your basic Zoom profile and the meetings created through Creatly, so that we can create and manage Zoom meetings for paid call bookings on your behalf. We do not access or modify your other Zoom meetings. You can revoke access from your Zoom account under Settings → Apps.

Calendly

Calendly is listed on your Integrations page as coming soon and cannot be connected yet — we currently receive no data from Calendly. If we enable it, we would read your scheduled events and create scheduling links on your behalf, so that buyers can book sessions through your Creatly storefront, and we would not modify or delete events outside of those created through Creatly. We will update this policy before the integration goes live.

Instagram (via Meta)

When you connect your Instagram account through Meta, we access:

  • Your Instagram username and basic profile
  • Comments and direct messages on your account, only to enable the Auto-DM feature you have configured (for example, replying to comments or sending DMs to buyers)
  • Basic information about the Facebook Page connected to your Instagram Business account, as required by Meta's API

We do not sell, share with advertisers, or use Instagram data for any purpose other than the features you have explicitly configured. We retain Instagram data only for as long as the integration is connected and delete it within 30 days of disconnection, except where retention is required by law. You can revoke our access at any time from your Facebook Business Integrations page.

Mailchimp and ConvertKit

When you provide a Mailchimp or ConvertKit API key, we store it in encrypted form and use it solely to add buyers to the lists or tags you have configured on Creatly. We do not access, export, or modify your existing subscribers, lists, or campaigns.

Google Analytics and Meta Pixel

When you provide your own tracking ID, we include the standard Google Analytics or Meta Pixel snippet on your storefront so that events flow directly to your own tracking account. Creatly does not access, store, or process the data collected through these tracking pixels — that data is governed by Google's and Meta's respective privacy policies.

We use the permissions granted by these integrations only to provide the features described above.

6. Cookies

We use cookies to keep you logged in, remember your preferences, and understand how people use the Platform. You can disable cookies in your browser, but parts of the Platform may stop working.

7. Data storage and security

Your data is stored on secure servers (some operated by our infrastructure partners, which may be located outside India). We use encryption, hashed passwords, and access controls to protect your information. No system is 100% secure, but we take reasonable steps to keep your data safe.

8. Your rights

You can:

  • View, update, or delete your information from your account settings
  • Withdraw consent for marketing emails anytime
  • Request deletion of your account by emailing us
  • Raise complaints about how we handle your data

We process such requests within a reasonable time as required under Indian law, including the Digital Personal Data Protection Act, 2023.

9. Data retention

We keep your data only as long as needed to provide the Platform or as required by law. Transaction and tax records are retained for 8 years as required under Indian tax law. Data from third-party integrations is retained only while the integration is connected, and deleted within 30 days of disconnection (except where retention is required by law). After that, we delete or anonymize your data.

10. Children

Creatly is not intended for users under 18. We do not knowingly collect data from minors. If you are under 18, please do not use the Platform.

11. Changes to this policy

We may update this Policy from time to time. We will post the updated version on this page and update the “Last updated” date. Major changes will be notified by email.

12. Contact us

If you have any questions about this Privacy Policy, you can contact us: