Privacy
MuchCreator Privacy Policy
This policy explains what data we process, why we process it, how connected social accounts are used, and your data rights.
Last updated: August 10, 2026Data we collect
During account creation, sign-in, social account connection, campaign participation, and video link submission, MuchCreator may process your name, email address, user identifier, connected platform information, video URL, video ownership verification result, view metrics, and records required for payment operations.
Social media data
When a user authorizes a social account through OAuth, MuchCreator obtains only the limited data required for campaign verification and performance tracking from TikTok, YouTube, and Instagram. This data is used to verify video ownership, record the initial view count, collect periodic metric snapshots, and investigate security signals. Core metric verification is not presented as optional analytics or marketing consent.
Optional website analytics
Only after you accept analytics, we process visitor and session identifiers, the query-free path and category of visited pages, safe interaction labels, destination pages, and active time on a page. If you are signed in, these records may be linked to your MuchCreator user ID. Form fields, typed text, and raw IP addresses are not stored in analytics events; the source IP is transformed server-side into a keyed digest solely for rate limiting and reporting.
Metric notice evidence
Before a video link is submitted, the system records the version, language, content SHA-256 digest, and informed acknowledgement timestamp for the metric notice in the same transaction as the submission. This evidence is not a contract acceptance or an explicit consent record; those record types are kept separately when applicable.
Why we use data
We use data to manage user sessions, verify connected social accounts, check compliance with campaign requirements, calculate valid increases in views, manage pending payments, and protect the platform.
Retention and security
Social platform access tokens are stored server-side and are not exposed in the user interface. Raw provider responses are designed to be retained for a limited period only for debugging, fraud investigation, and audit purposes. Detailed website analytics records are deleted after 90 days; daily totals that contain no personal event records may be retained longer for product performance comparisons. Users can disconnect social accounts and withdraw analytics permission from the footer preferences.
Sharing
MuchCreator does not sell personal data. Data may be processed on a limited basis by services required to operate the product, including infrastructure, authentication, database, hosting, and social media API providers.
Your rights and contact
For data access, correction, or deletion requests, contact hello@muchcreator.com. You can also use the Data Deletion Instructions page for the deletion process.