Privacy policy

Last updated: 1 October 2026

This is a translation of the French privacy policy. In case of discrepancy, the French version prevails.

Data controller

The controller of your personal data is KOM, a company registered with the Paris Trade and Companies Register (RCS), SIRET 852 694 090 00022, with its registered office at 9 rue des Colonnes, 75002 Paris, France, publisher of the KREATRS platform (available at www.kreatrs.io).

Contact for any question about your data: support@kreatrs.io

1. Data collected

1.1 Your KREATRS account data

• email address and password (stored in encrypted form);
• last name, first name and, where applicable, company name;
• postal address and phone number, which identify you as a party to the contracts signed on the platform, including the rights assignment contract;
• username and profile picture chosen in the app;
• the email address at which you receive the rewards you convert your gems into;
• connection data and technical logs (IP address, device type, timestamp), for security purposes.

1.2 Data from Instagram and TikTok

When you connect your Instagram or TikTok account to KREATRS, we collect:

• your account name (public handle);
• the number of followers of your account;
• view statistics for the posts made as part of a KREATRS mission.

This data is obtained through the official APIs:

• Instagram: instagram_business_basic and instagram_manage_insights permissions, read-only.
• TikTok: equivalent permissions covering the same categories of data (account name, number of followers, view statistics).

We do not collect any password, private content or message from your Instagram or TikTok account.

1.3 Content submitted through the app

When you take part in a mission, we keep:

• the videos you submit, including their successive versions, which contain your image and your voice;
• their transcript;
• the related moderation feedback (approval or rejection decision and its reason).

2. Purposes of processing

This data is used solely to:

• create and manage your creator account;
• check your eligibility for the missions offered on the platform;
• draw up the contracts related to your missions, including the rights assignment contract;
• measure the actual performance of your posts over a 7-day window after publication;
• calculate and trigger your pay as a creator;
• display and feature your approved content within the KREATRS app and website, under the conditions of article 5 of the terms of use;
• train and improve internal tools that help select and moderate content;
• measure the audience and use of the app and website, with your consent;
• prevent fraud and misuse of the platform;
• comply with our accounting, tax and legal obligations.

This data is not sold to third parties, nor used for advertising outside KREATRS.

Display and featuring within KREATRS

Your approved content may be shown in the Community feed, the Créa du jour (creation of the day), the Top de la semaine (top of the week) and the rankings, including to visitors who are not registered. It is shown with your username, your profile picture, the name of the commissioning brand and the number of views.

You can withdraw this named featuring at any time from the app's Settings. You will then no longer be shown under your username or with your picture; your content may continue to be displayed anonymously.

Training internal selection and moderation tools

The content described in article 1.3, whether approved or rejected, is used to train and improve internal tools, including artificial intelligence models that help select and moderate content.

This use is strictly internal: for this purpose, the content is neither made public nor transferred to third parties. Training datasets contain neither your name, nor your email, nor the handles of your Instagram or TikTok accounts.

3. Legal bases

4. Minimum age

The KREATRS platform is reserved for people aged 18 or over. We do not knowingly collect data about minors. If we become aware that an account was created by a minor, the account is closed and the related data deleted.

5. Retention periods

At the end of these periods, the data is deleted or irreversibly anonymised.

6. Recipients and processors

The data can be accessed by authorised KREATRS staff and by the following technical providers, strictly to the extent necessary to run the platform:

None of these providers is allowed to use your data for its own purposes.

Postal address autocomplete. When you enter an address in France in the app, the text you type is sent directly from your device to the Base Adresse Nationale (France's national address database), a public service operated by the French National Institute of Geographic and Forest Information (IGN) on its Géoplateforme, so that it can suggest existing addresses. IGN receives the address being typed and, as with any request on the internet, your device's IP address. No other data from your account is sent to it. You can always enter your address without choosing a suggestion.

7. Transfers outside the European Union

Platform hosting, the database and audience measurement are provided within the European Union (France and Ireland). However, some providers listed in article 6 are established in the United States and may process part of the data there (Cloudflare and Google/Firebase).

These transfers are governed by one of the mechanisms provided for in Chapter V of the GDPR:

• the provider's participation in the EU-US Data Privacy Framework, where it is certified;
• failing that, the standard contractual clauses adopted by the European Commission, together with a transfer impact assessment and additional technical measures (encryption in transit and at rest, minimisation of the data transferred).

A copy of the applicable safeguards can be obtained on request at support@kreatrs.io.

Separately from our own providers, the data you share with Instagram and TikTok is governed by the privacy policies of Meta and ByteDance, over which KREATRS has no control.

8. Data security

We implement appropriate technical and organisational measures: encrypted communications (HTTPS/TLS), encrypted passwords, API access tokens stored in encrypted form, access restricted to authorised persons only, access logging and regular backups.

In the event of a data breach likely to result in a high risk to your rights, you will be informed as soon as possible, in accordance with article 34 of the GDPR.

9. Cookies and trackers

The www.kreatrs.io website and the KREATRS app use:

• strictly necessary cookies for the service to work (session, authentication, security), which do not require your consent;
• audience measurement and product analytics trackers (PostHog), placed only after your consent has been obtained through the dedicated banner.

Measured events are linked to a pseudonymous identifier specific to your account, sent only after you have given your consent. The tracker is valid for 13 months at most and the data is kept for 25 months at most (article 5).

We do not use any third-party advertising cookies or ad network pixels on the platform.

You can change your choices at any time from the “Gestion des cookies” (cookie settings) link at the bottom of the page or, in the app, from the “Mesure d'usage” (usage measurement) option in Settings.

10. Rankings, badges and automated calculation

Your pay is calculated automatically from an objective figure — the number of views measured over the 7-day window after publication — according to rules made known to you before you take part in each mission. The badges, tiers and rankings shown in the app are derived from the same data.

No fully automated decision producing legal effects concerning you is made without a means of appeal: you can dispute a pay calculation at support@kreatrs.io and have it reviewed by a person.

11. Your rights

Under the General Data Protection Regulation (GDPR), you have the following rights over your personal data:

• right of access: obtain a copy of the data we hold about you;
• right to rectification: correct inaccurate or incomplete data;
• right to erasure: ask for your data to be deleted;
• right to restriction of processing;
• right to object to processing based on our legitimate interest;
• right to data portability: receive your data in a structured, machine-readable format, or have it transferred directly to another controller;
• right to withdraw your consent at any time, without affecting the lawfulness of processing already carried out;
• right to set instructions regarding what happens to your data after your death.

If you delete your account or request erasure, your content is removed from the datasets used to train internal tools. Models that have already been trained are neither retrained nor modified.

To exercise these rights, contact us at support@kreatrs.io, or use our data deletion page (in French). We reply within one month, which may be extended by two months for complex requests.

You also have the right to lodge a complaint with the CNIL, the French data protection authority (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr).

12. Revoking access to your Instagram or TikTok account

You can disconnect KREATRS from your accounts at any time, without deleting your KREATRS account:

• from the KREATRS app: Profil → Comptes connectés → Déconnecter (Profile → Connected accounts → Disconnect);
• from Instagram: Settings → Apps and websites → Active → Remove;
• from TikTok: Settings and privacy → Security → Manage connected apps.

Revoking access immediately stops any new collection of statistics. Data already collected for completed missions is kept for the periods set out in article 5, unless you ask for it to be deleted.

13. Compliance with third-party platforms

The use of data obtained through the Instagram and TikTok APIs complies with the terms that apply to developers on these platforms, including the Meta Platform Terms and the TikTok Developer Terms of Service. This data is used only for the purposes described in article 2, is not sold and is not transferred to data brokers.

14. Changes to this policy

This policy may be updated to reflect legal, technical or functional changes. The date of the last update is shown at the top of the page. In the event of a substantial change, you will be informed by email or through a notification in the app before the changes take effect.

15. Contact

For any question about this privacy policy: support@kreatrs.io