Privacy Policy

1. Scope & our role

We provide a platform for creators to sell products, run communities, and message their audience. For data about our own account holders and visitors we act as a Data Fiduciary. Where a creator uses Creator OS to process their audience's data, that creator is the Data Fiduciary and we act as a Data Processor on their instructions.

2. Personal data we collect

• Account data: name, email, username, password hash, and profile details you provide.
• Storefront & commerce data: products, prices, orders, and the email of buyers who purchase.
• Payment data: processed by our payment partner; we receive transaction status and the last-4/method, not full card numbers.
• Community data: posts, comments, reactions, messages, and gamification activity you generate.
• Technical data: IP address, device/browser type, and essential cookies (see our Cookie Policy).

3. Purposes & lawful basis

Under the DPDP Act we process personal data on the basis of your consent or for legitimate uses permitted by law, for these purposes:

4. Consent & your control

Where we rely on consent, it is free, specific, informed, and unambiguous, and you may withdraw it at any time — withdrawal is as easy as giving it and does not affect processing done before withdrawal. Manage preferences in your account or by emailing legal@starvoxlabs.io.

5. Your rights as a Data Principal

• Access a summary of the personal data we process about you.
• Correction, completion, and updating of inaccurate or incomplete data.
• Erasure of your data where it is no longer needed or you withdraw consent.
• Grievance redressal through our Grievance Officer (see the Grievance Redressal page).
• Nomination of another individual to exercise your rights in the event of death or incapacity.

To exercise any right, email legal@starvoxlabs.io. We respond within the timelines required by law.

6. Sharing & disclosure

We do not sell personal data. We share it only with:

• Processors that run the service on our behalf — hosting/infrastructure, payment gateway, and email delivery — under contract and confidentiality.
• The creator whose store you buy from or community you join (they receive your order/contact details to fulfil the service).
• Authorities where required by law or to protect rights and safety.

7. Cross-border transfers

Data is primarily stored and processed in India. If any processor operates outside India, transfers are made only to jurisdictions not restricted by the Government of India and with appropriate safeguards.

8. Data retention & deletion

We retain personal data only as long as needed for the purposes above or as required by law (e.g. tax records). Where you close your account or after a prolonged period of inactivity, we delete or anonymise your personal data, except records we must retain to comply with legal obligations.

9. Children's data

Creator OS is intended for users aged 18 and above. Consistent with the DPDP Act, we do not knowingly process the personal data of a child (under 18) without verifiable parental consent, and we do not undertake tracking, behavioural monitoring, or targeted advertising directed at children.

10. Security

We apply reasonable security safeguards — encryption in transit (TLS), hashed credentials, least-privilege access, and monitoring. See our Security & Trust page. If a personal data breach occurs, we will notify the Data Protection Board and affected users as required by law.

11. Grievance Officer

Reach our Grievance Officer at legal@starvoxlabs.io. Registered entity: StarvoxLabs Pvt. Ltd., Mumbai, India. See the Grievance Redressal page for the process and timelines.

12. Changes

We may update this policy; material changes will be notified in-product or by email. Continued use after the effective date constitutes acceptance.