Privacy Policy

Creator Lock is operated by MERIDIAN VERTEX LLC, a limited liability company registered in Texas, United States, which is responsible for the personal data described here.

Our mailing address is 817 S MacArthur Blvd, Ste 115 #1040, Coppell, TX 75019, USA. For any privacy question or request, contact privacy@creatorlock.app.

• Account details — your email address, the name you choose to give us (optional), and your password, which is stored only as a one-way hash.
• Your files — the files you upload, and information about them: file name, type, size and when you uploaded them.
• Subscription details — your plan, its status and renewal date, and the customer and subscription references Paddle gives us. Paddle, not us, handles your card or other payment details.
• Technical information — like most websites, our hosting and sign-in providers record your IP address, browser type and the time of requests, to keep the service running and secure.

We do not use advertising or analytics trackers, and we do not build profiles of you.

• to create and secure your account, and let you sign in;
• to store your files and give them back to you when you ask;
• to apply your plan’s storage allowance and manage your subscription;
• to send account emails, such as confirming your address or resetting your password, and important notices about the service or your plan;
• to prevent abuse, investigate security problems, and meet our legal obligations.

Where laws such as the GDPR apply, we rely on: performing our contract with you (running your account and vault), our legitimate interest in keeping Creator Lock secure, and our legal obligations. We do not send marketing emails unless you have agreed to receive them.

• Your files are stored in private storage. Each file is tied to your account, and access rules enforced by the database stop any other user from listing, opening or downloading them.
• Downloads use short-lived links issued only to you.
• Files travel over encrypted connections and are stored with a provider that encrypts data at rest.
• We do not browse, analyse, sell or share your files. Technical access is limited to what is needed to run the service, investigate abuse or a security problem, or comply with the law.

If you find a security vulnerability, please report it to security@creatorlock.app.

We use a small number of trusted providers. Each processes data only to provide its part of the service:

• Supabase — database, sign-in and file storage. Your account data and files are stored in its Mumbai, India region. Privacy policy
• Vercel — hosts the website and app; requests are processed in the United States. Privacy policy
• Resend — sends account emails, such as confirmation and password-reset messages. Privacy policy
• Paddle — our Merchant of Record for payments, tax and invoicing. When you buy a plan, Paddle collects your payment details directly, under its own privacy policy. Paddle’s checkout script loads only on the Plan page. Privacy policy
• Cloudflare — provides the domain name service for creatorlock.app.

Because these providers operate in different countries, your data may be processed outside the country where you live. Where the law requires it, we rely on appropriate safeguards such as standard contractual clauses.

We never sell your personal data.

We use only the cookies needed to keep you signed in. They are essential for the service to work, so there is no cookie banner. We do not use advertising or tracking cookies.

• Your files stay until you delete them or close your account. When you delete a file, it is removed from active storage straight away.
• When you close your account, we delete your account data and files within 30 days. Encrypted backups kept by our providers may take a short while longer to expire.
• Paddle keeps payment and tax records for as long as the law requires.
• Technical logs are kept only for as long as needed to operate and secure the service.

You can download or delete any of your files yourself, at any time. Depending on where you live — including under the GDPR in the EU and UK and India’s Digital Personal Data Protection Act — you may also have the right to access, correct, or delete your personal data, to object to or restrict how it is used, and to receive a copy of it.

To use any of these rights, or to close your account, email privacy@creatorlock.app from the address you signed up with. We will reply within 30 days. If you are unhappy with our answer, you can complain to your local data protection authority.

Creator Lock is not intended for anyone under 16, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

If we change this policy in a way that matters, we will email you before the change takes effect. The date at the top shows when it last changed.