🔒 Our Privacy CommitmentCreatorFinder AI takes your privacy seriously. This policy explains what data we collect, how we use it, and how we protect it. We follow a minimal data principle and never sell user data.
1What We Collect
| Data Type | How Collected | Purpose |
|---|
| Email address (optional) | Voluntarily entered on the payment page | Send activation code backup email |
| Payment reference number | Alipay / WeChat Pay callback | Order verification & refund processing |
| Activation code | System-generated | Subscription status verification |
| Fast Analyze request log | When extension calls Fast Analyze (creator handle/URL + timestamp) | Usage quota enforcement & abuse prevention; deleted after 90 days |
| Password hash and salt | Created after email-code verification during first-time setup or password reset | Authenticates the account; the plaintext password is never stored |
| Session credential | Generated on our server after successful login | The website stores it in a Secure, HttpOnly cookie that page scripts cannot read. The Chrome extension stores its separate session credential in chrome.storage.local. Both are invalidated on logout, password reset, or after 30 days. |
| Anonymous device identifier | For guest searches, the extension creates a SHA-256 summary from limited browser and device environment characteristics, and the server issues a signed device cookie | Limits the guest allowance per device; raw characteristics are not sent to the server |
| Extension and favorites data | When the user operates on supported creator and bio-link pages | Candidates, contacts, settings, favorite collections, saved creator snapshots, tags, and private notes remain in the current browser's local extension storage. |
| Auto-Discover and AI inputs | When the user starts an AI-assisted or Auto-Discover task | Runs the requested campaign planning, search, recovery, and public creator enrichment |
| Optional AI-training interaction | Only after a signed-in user affirmatively consents in Settings | Creator matching and AI-model improvement; future collection can be disabled in Settings |
We do not collect: your real name, ID number, bank card number, raw hardware serial numbers, general browsing history, or any personal information beyond the above.
2How the Chrome Extension Handles Data
The CreatorFinder AI extension runs locally in your browser. Below is a complete description of every data-touching behaviour:
- Content script injection: The extension injects a content script into TikTok, Instagram, and YouTube pages, as well as certain bio-link pages (e.g. linktr.ee, beacons.ai, carrd.co and similar). On these pages the script reads publicly visible page text and link elements to extract creator handles, bios, follower counts, and contact links. No data is sent to our servers during this step.
- Background tab — bio link email extraction: When a creator's profile contains an external bio-link (e.g. a link-in-bio page), the extension may open that URL in a hidden background browser tab to scan visible text for a contact email address. The tab is closed automatically within seconds. This behaviour is limited to a pre-approved allowlist of bio-link domains and never accesses arbitrary URLs.
- Scroll trigger on TikTok profiles: To load video-grid metrics (views, likes, etc.), the extension may programmatically scroll a TikTok profile page. No data is transmitted during this action.
- Local favorites: Favorite collection structure, saved creator snapshots, tags, and private notes are stored only in the current browser's
chrome.storage.local. They do not automatically appear on another computer or browser. The web workspace can read or update them only through the connected extension in that same browser. Export JSON backups regularly if you need to move or restore them.
- Guest device verification: For guest searches, the extension converts limited browser and device environment characteristics into an irreversible SHA-256 summary locally. The server also issues a signed, HTTP-only device cookie. These identifiers prevent reinstalling the extension from resetting the guest allowance; raw characteristics are not uploaded.
- Subscription authentication: You normally log in with your email and password. First-time password setup and password resets require a one-time code sent to your email. Passwords are processed with scrypt and a random salt; only the resulting hash and salt are stored. Website sessions use a Secure, HttpOnly, SameSite cookie; page scripts cannot read this credential. Chrome extension sessions continue to use the extension's protected local storage. Sessions expire after 30 days, logout, or password reset.
- Fast Analyze: When triggered, the extension sends the creator's profile URL or handle and a timestamp to our server for enriched data parsing. Results are returned immediately; we do not persistently store creator profile content beyond the request log (deleted after 90 days).
- AI analysis and Auto-Discover: User-entered campaign goals, product descriptions, budgets, selected creator types, search terms, and the public creator candidates required to complete the requested task are sent to CreatorFinder's backend. CreatorFinder may send the relevant request data to its server-managed DeepSeek or Gemini provider. The extension does not ask you to store provider API keys.
- Optional AI-training interactions: Signed-in users may optionally consent in Settings to recording certain AI interactions with public creator profiles. A consented record may contain the account email, public creator identifier, interaction type, related cache key, and timestamp. Collection is off unless the user agrees. Turning collection off stops future records but does not automatically delete earlier consented records; deletion can be requested by email.
- Apify enrichment (optional): Apify requests are made by CreatorFinder's backend using a server-managed token. The extension does not ask you to store an Apify API token.
- Data export: CSV / Excel exports are generated locally and downloaded directly to your device, never passing through our servers.
3Data Sharing
We do not sell or rent user data. Data is transferred only as needed for the user-requested feature or another allowed purpose:
- CreatorFinder backend: receives account data, campaign inputs, Auto-Discover actions and public creator candidates needed to run and recover the requested feature
- AI providers: DeepSeek or Gemini receives the relevant campaign and public discovery input for a user-triggered AI feature
- Apify: receives selected public creator identifiers or URLs for optional enrichment
- Payment processing: Alipay and WeChat Pay receive necessary payment information during transactions, subject to their respective privacy policies
- Legal and security requirements: we may disclose necessary information when required by law or needed to protect against fraud, abuse, or security threats
4Data Storage & Security
- Server data is stored on cloud servers in mainland China, transmitted via HTTPS encryption
- Passwords are protected with scrypt and a unique random salt; plaintext passwords are never stored
- Email verification codes are stored as keyed hashes, never in plaintext
- Payment reference numbers are used only for order verification — full payment account numbers are never stored
- Fast Analyze request logs (creator URL/handle + timestamp) are automatically deleted after 90 days
5Cookies & Tracking
This payment website does not use cookies for tracking, third-party ad tracking, or user behaviour analytics. No Google Analytics, Facebook Pixel, or similar tracking code is integrated.
6Your Rights
You may exercise the following rights at any time by email:
- Access: Ask what data we hold associated with your email
- Deletion: Request deletion of your account data and consented AI-training interaction records, subject to legal retention requirements
- Correction: Correct identifiable information such as your email address
- Choice: Decline optional AI-training interaction collection or turn future collection off in extension Settings
Email: support@creatorfinder-sub.com — we will respond within 7 business days.
7Minors
This Service is not intended for users under 18. If you are a minor, please use it with a guardian or have a guardian make the purchase on your behalf.
8Governing Law
This Privacy Policy is governed by the laws of the People's Republic of China. For users located in the European Economic Area or the United Kingdom, we additionally commit to handling personal data in accordance with the principles of the General Data Protection Regulation (GDPR). For users located in California, we additionally comply with the California Consumer Privacy Act (CCPA).
9Policy Updates
This Privacy Policy may be updated as the service evolves. Major changes will be noted at the top of this page with an updated date and communicated to subscribers via in-extension notification or email.
10Chrome Web Store Limited Use
CreatorFinder's use of information received from Chrome extension APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Extension user data is used only to provide or improve the disclosed creator-research purpose and related security, reliability, and abuse-prevention operations. We do not sell user data, use it for personalized advertising or credit decisions, or transfer it to data brokers. Humans do not read extension user data except with the user's specific consent, when required for security or legal compliance, or in aggregated and anonymized form for internal operations.