1. Overview
Protecting your personal data is important to us. This privacy policy explains how we process personal data on Creator Empire (creator-empire-ugc.top-waren.de).
The legal basis is in particular the GDPR and the German Federal Data Protection Act (BDSG).
2. Controller
- Service provider
- Creator Empire
- info@creator-empire-ugc.top-waren.de
- Website
- creator-empire-ugc.top-waren.de
For privacy questions, contact us at info@creator-empire-ugc.top-waren.de.
3. Data we process
Depending on use, we may process:
- Account data: name, email, password hash, plan, roles (e.g. Customer, Team, Agency, Admin).
- Usage & project data: saved scripts, products, projects, video metadata, credits and payment records.
- AI generations: inputs (prompts, briefs, product links) and outputs for compliance, billing and support.
- Communication: in-app notifications, support messages, marketplace chats.
- Technical data: IP address (short-term/logs), browser/device information, session tokens.
- Payment data: when purchasing credits/subscriptions via payment providers (e.g. Stripe) — we do not store card data ourselves.
4. Purposes & legal bases
- Contract performance (Art. 6(1)(b) GDPR): account management, script/video features, credits, production and team workflows.
- Consent (Art. 6(1)(a) GDPR): e.g. content/face rights consent before avatar uploads and generation.
- Legitimate interest (Art. 6(1)(f) GDPR): security, abuse detection, product improvement, aggregated usage statistics.
- Legal obligation (Art. 6(1)(c) GDPR): retention of invoice/payment data, disclosure obligations.
5. Recipients & processors
We use service providers where necessary, in particular:
- Hosting and server infrastructure in the European Union
- Database and cloud providers
- AI and media providers for script and video creation
- Payment providers (e.g. Stripe) for credits and subscriptions
- Email providers for verification and system emails
Transfers to third countries occur only where appropriate safeguards (e.g. standard contractual clauses) exist or a legal exception applies.
6. Retention
We store personal data only as long as necessary for the stated purposes or as required by statutory retention periods. Account-related data is deleted or anonymised within reasonable periods after account deletion unless retention obligations apply.
8. Your rights
You have in particular the right to:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object (Art. 21 GDPR)
- Withdraw consent given
You also have the right to lodge a complaint with a data protection supervisory authority.
9. Security
We implement technical and organisational measures (TLS, authentication, role-based access) to protect your data. Absolute security cannot be guaranteed on the internet.
10. Children
The service is aimed at businesses and creators with a commercial focus (e.g. TikTok Shop). Persons under 16 may not use the service without parental consent.
11. Changes
We may update this privacy policy when the service, legal situation or our processes change. The current version is always available at /datenschutz. Last updated: 15. Juli 2026.