Privacy Notice

The Creator Toolkit is operated by Princess Karil Aguilar Lirio, trading as The Creator Toolkit. We are the data controller for the personal data described in this notice, which means we decide what data is collected and why. You can contact us at createwithcess@gmail.com.

• Account data — email address, password credentials (stored hashed by our authentication provider), display name, and, if you sign in with Google, the basic profile information Google returns. Used to create and secure your account and to identify you across devices. Legal basis: performance of our contract with you.
• Your tool content — the deals, rates, notes, checklist progress and calendar plans you enter. Used to provide the Service and sync your saved progress between your devices. Legal basis: performance of our contract.
• Purchase records — the order reference, product purchased, amount, currency, purchase status and date. Used to confirm your payment, grant and maintain lifetime access, and handle refunds. Card, wallet and bank details are collected and processed by Paddle, never by us. Legal basis: contract and legal obligation.
• Technical and security data — IP address, device and browser information, and error or usage logs. Used to keep the Service secure, prevent fraud and abuse, and diagnose faults. Legal basis: legitimate interests in securing and improving the Service.
• Support messages — the content of any enquiry you send us. Used to answer you. Legal basis: legitimate interests and contract.

We do not sell your personal data. We only send marketing email where you have consented, and you can withdraw that consent at any time.

• Merchant of Record — Paddle.com, our reseller, which processes your payment, invoicing, sales tax and refunds. We only see the order reference and the amount received. Our payouts from Paddle are received through Payoneer.
• Service providers / subprocessors — our hosting, database and authentication providers, who store and process data on our behalf under contract.
• Professional advisers — legal, accounting or tax advisers where necessary.
• Authorities — where we are required to disclose data by law or to protect our legal rights.

Some of these providers are located outside your country, so your data may be transferred internationally. Where required, such transfers rely on appropriate safeguards such as standard contractual clauses or an adequacy decision.

We keep account data and tool content for as long as your account is active. If you ask us to delete your account, we delete or anonymise your account data and tool content within 30 days, except where we must retain purchase and tax records for the period required by law (typically up to 7 years). Security and error logs are retained for a short period, usually no more than 12 months.

Depending on where you live, you may have the right to access your personal data, correct it, delete it, restrict or object to its processing, receive a portable copy, and withdraw consent where processing is based on consent. To exercise these rights, contact us — we will respond within one month. If you are in the UK or EEA, you also have the right to complain to your local data protection supervisory authority.

We use appropriate technical and organisational measures to protect your data, including encryption in transit, encrypted storage, row-level access controls so each account can only reach its own records, and least-privilege administrative access. No system is completely secure, so please use a strong, unique password.

We use strictly necessary cookies and browser local storage to keep you signed in, remember your session, and cache your tool progress so pages load instantly. We do not use advertising cookies. Our payment provider may set cookies needed to run the checkout. You can clear or block cookies in your browser settings, but signing in will not work without the essential ones.

We may update this notice; the “last updated” date above will change. See also our Terms & Conditions and Refund Policy.