Privacy Policy

1. Who we are

Creators Vista is a platform for developers to create profiles, publish projects, and interact with other members. It is operated by Satheesh Pv, an individual developer based in Kerala, India; no separate company is identified as the operator by this Policy. For the personal information described here, the operator determines why and how it is processed and acts as the controller where that concept applies under applicable data protection law.

Postal address for legal and privacy correspondence: [Add the operator's complete postal address before publishing this Policy]. You can also contact the operator at privacy@creatorsvista.com. This is the dedicated privacy contact.

2. Information we collect

Depending on how you use Creators Vista, we may collect these categories:

• Account information: your name or display name, username, email address, authentication and account identifiers, and information you provide when contacting support. During registration, we also record your confirmation that you are at least 18 and your acceptance of the Terms of Service and acknowledgment of this Policy.
• Pricing notifications: if you submit your email address through the pricing page notification form, we store it separately from account information and use it only to email you about pricing.
• Profile and portfolio information: profile details such as biography, location, avatar, skills and links; and project titles, descriptions, technologies, images, media, external links, and other content you submit.
• Community activity: follows, likes, comments, replies, and related timestamps associated with your account.
• Subscription and payment information: we store your Creators Vista account and checkout-request identifiers, PayPal subscription ID, plan and billing interval, subscription status, billing-period dates, and the time of the latest PayPal event. To create and manage subscriptions, our server also receives PayPal API responses and webhook payloads. Those payloads can include payer identifiers, transaction references, or billing contact details; our current integration processes them transiently and does not save payer identifiers, individual transaction records, billing contact details received from PayPal, or complete webhook payloads in the Creators Vista database. Your Creators Vista account email is stored separately as account information. PayPal processes payment credentials. Creators Vista does not receive or store your full card or bank-account number through our PayPal subscription flow.
• Technical information: information about technical information needed to maintain sign-in sessions and authenticate requests, including necessary session cookies. For project-password abuse prevention, we also process a short-lived, keyed hash of the client IP address provided by Cloudflare to limit repeated password attempts; we do not store the raw IP address for this purpose. These records are removed when a later password attempt triggers cleanup of records older than one day, so a record may be kept longer than a day if no further attempts occur.
• Usage information: pages viewed, navigation, device and browser details, and interactions collected through browser analytics tools. PostHog browser analytics runs only when you allow Performance cookies and your browser does not send an opt-out signal. Separately, we send server-side request-error diagnostics to PostHog to troubleshoot service issues. These diagnostics may be sent when Performance cookies are off and can include error details, stack information, and a PostHog identifier read from a request cookie when available. Browser-based PostHog activity may be associated with your Creators Vista user ID and profile details such as your email, username, and display name. Clarity helps us understand how visitors use Creators Vista through behavioral metrics and heatmaps. If you allow Performance cookies, Clarity can connect activity into sessions and collect session replay data. When Performance cookies are off, Clarity may still collect limited page-view information without cookies.

We collect information when you register, use account or portfolio features, interact with content, contact support, or complete a subscription checkout. Some technical information is generated automatically when you use the site. We do not intentionally request sensitive personal information for ordinary account use.

3. Public profiles and content

Creators Vista is designed to display developer profiles, projects, and blog posts. Information and content you publish as public may be viewed by anyone, indexed by search engines, copied, or shared outside Creators Vista. Do not include information in a public profile or project that you do not want to make public. Public content may remain in search engine caches or copies made by others after you edit or remove it from Creators Vista.

Account information, authentication credentials, private account records, and payment credentials are not intended to appear on public profile or project pages. Where a feature offers privacy controls, those controls apply as described in that feature. Public blog posts and publicly displayed comments and interaction details may identify your Creators Vista username and display name.

Project passwords are stored as salted cryptographic hashes, not as readable passwords. A protected project's content and metadata are withheld until the password is verified. External links remain subject to the sharing settings of the service that hosts them.

4. How we use information

We use personal information to:

• Create and secure accounts, authenticate members, and provide profile, portfolio, and community features.
• Send pricing updates to email addresses submitted through the pricing page notification form.
• Process and manage subscriptions, respond to support requests, and communicate about your account or the service.
• Send product news or marketing newsletters where permitted. You can unsubscribe from marketing messages at any time.
• Operate, maintain, and secure Creators Vista, and troubleshoot service issues. For troubleshooting, we send server-side request-error diagnostics to PostHog separately from browser analytics; this processing may occur when Performance cookies are off.
• Understand site usage and improve Creators Vista using PostHog browser analytics and Microsoft Clarity. PostHog browser analytics runs only when you allow Performance cookies and your browser does not send an opt-out signal.
• Protect members and the service, prevent abuse, enforce our terms, and meet legal obligations.

Where the GDPR or similar laws apply, our legal basis depends on the activity: providing the service or processing a subscription is generally necessary to perform our contract with you; security, support, and service operation may rely on legitimate interests; marketing relies on consent where required; and certain records may be processed to comply with legal obligations. You may withdraw consent at any time, without affecting processing that already took place.

5. Cookies and technical information

• Strictly Necessary: Creators Vista uses necessary session cookies to maintain sign-in, authenticate requests, and support core account features. These are always on. Disabling them may prevent sign-in or affect account features.
• Performance: Microsoft Clarity collects limited page-view information without cookies, even when this choice is off. If you allow Performance cookies, Clarity can use cookies and other tracking technologies to connect activity into sessions and provide session replay and behavioral analytics, including heatmaps. We use these insights to improve Creators Vista and troubleshoot site issues. Our integration keeps Clarity advertising storage denied; we do not use Clarity for targeted advertising. Change this choice anytime using Privacy choices in the footer.
• PostHog browser analytics: PostHog may use browser storage and other tracking technologies to collect page views and product interactions. It is off by default and starts collecting only if you allow Performance cookies; turning that choice off stops future browser analytics. This choice does not control the separately described server-side request-error diagnostics. We do not use PostHog for targeted advertising.
• Browser opt-out signals: if your browser sends Global Privacy Control (GPC) or Do Not Track, we treat Performance cookies as off, even if you previously allowed them. PostHog browser analytics stays off, and Clarity analytics storage is denied.
• Functionality: Creators Vista does not currently use Functionality cookies.

You can also manage cookies through your browser settings. Blocking cookies may affect sign-in or other site features.

6. When we disclose information

We may disclose information to the following parties for the purposes above:

• Supabase: provides database and authentication services and processes account, profile, portfolio, and related service data on our behalf.
• Cloudflare: provides Turnstile verification on our sign-up, sign-in, and password-reset forms to help distinguish legitimate users from automated abuse. When you use these forms, Cloudflare processes verification signals, which may include browser, device, and interaction information. See Cloudflare's privacy policy for more information.
• Microsoft Clarity: provides website analytics. It processes page-view, interaction, and device information to provide behavioral metrics, heatmaps, and, when you allow Performance cookies, session replay. Limited page-view information may still be collected without cookies when Performance cookies are off. Clarity processes this information under its privacy statement. We configure Clarity advertising storage as denied and do not use it for targeted advertising.
• PostHog: provides browser analytics and server-side request-error diagnostics. Browser analytics processes page views, product interactions, and device and browser details only when you allow Performance cookies and your browser does not send GPC or Do Not Track. Separately, we send server-side request-error diagnostics to troubleshoot service issues; these may be sent when Performance cookies are off and can include error details, stack information, and a PostHog identifier read from a request cookie when available. Browser activity may be linked to your Creators Vista user ID and profile details such as your email, username, or display name. PostHog processes this information on our behalf under its privacy policy.
• PayPal: currently processes recurring Pro subscription checkout and payments only. Creators Vista processes PayPal subscription API responses and webhook events to maintain subscription status, and sends webhook data to PayPal's verification service to verify those events. PayPal handles payment credentials under its own terms and privacy notice. Marketplace payments and seller payouts are planned for a later phase, but are not currently supported; we will update this Policy before introducing them.
• Legal and safety recipients: authorities or other parties where we reasonably believe disclosure is required by law, necessary to protect rights or safety, or needed to investigate fraud or protect the service.

We may also disclose information in connection with a reorganization, merger, financing, or transfer of all or part of our business, subject to applicable law and appropriate protections. Public content is visible to the public as described above. Creators Vista does not exchange personal information for money. Some laws define a personal-information “sale” or “sharing” more broadly than a cash exchange. You may contact us to exercise any applicable opt-out right.

7. International data transfers

Creators Vista and the providers we use may process information in countries other than the one where you live. Those countries may have different data protection laws. Where required, we use an appropriate transfer mechanism, such as an adequacy decision or approved contractual safeguards, and take additional measures when necessary. Contact us for more information about applicable safeguards.

8. How long we keep information

We keep information for as long as needed to provide the service and account you requested, maintain security, resolve disputes, enforce agreements, and meet legal, tax, or accounting requirements. Retention depends on the type of information and why it was collected. When information is no longer needed, we delete it or remove identifying details, subject to legal requirements and limited backup or recovery cycles. Public content may persist in third-party caches or copies after removal from Creators Vista.

When pricing plans are publicly available on the pricing page, we will immediately delete the complete separate set of pricing notification submissions, including all email addresses and any other information stored with them.

9. Your privacy rights and choices

Depending on where you live, you may have the right to access or obtain a copy of your personal information, correct it, request its deletion, restrict or object to certain processing, withdraw consent, or opt out of certain uses or disclosures. You may also complain to a data protection authority. We describe below how to exercise these rights and what happens to the information involved.

Find and access your information: to locate account records, we use the Creators Vista account identifier and may match it using your username or the email address associated with the account. This can include your account and profile details, portfolio projects and media references, skills and links, comments and interactions, profile-view records, subscription status and identifiers, and support correspondence. You can review and correct profile and portfolio fields in Studio. For a copy of other information or help correcting account details you cannot edit there, contact us at privacy@creatorsvista.com. We will search the account and related Creators Vista records and provide the information required by applicable law.

Delete your account: email the privacy address with the subject “Delete my account” and your username, or use the Delete Account control in Portfolio Studio. Sign in to your account, then enter your username and confirm the irreversible action. The server checks your authenticated account, cancels any active PayPal subscription, ends your sessions, and deletes your authentication account. This removes the active Creators Vista profile, projects, project details, comments, interactions, subscription record, and related account rows through their account relationships. If subscription cancellation or account deletion fails, the page explains that the account was not deleted and provides a retry or privacy-contact path. If you cannot sign in, write from your account email where possible; we will verify the request proportionately before acting.

Creators Vista currently accepts image URLs; it does not provide direct profile or project file uploads. We remove Creators Vista references to media associated with a deleted account, but cannot delete a file hosted by another site. A later feature that stores files directly will require us to delete the associated stored objects as part of account deletion. Closing a Creators Vista account does not by itself delete information PayPal keeps under its own policies or cancel a PayPal subscription. You can cancel through PayPal or ask us to help identify and address an active subscription as part of your request; PayPal may retain transaction records required by law or its own legitimate purposes.

Some information may not be erased immediately. We may retain records required by law, tax or accounting rules, security needs, dispute resolution, or the establishment or defense of legal claims, and will limit access and use to those purposes. Deleted information may remain temporarily in provider-managed backups until the applicable backup cycle expires; individual records cannot be removed from those backups on demand. Provider-held security or authentication logs may also persist under the provider's retention rules. Public copies or search-engine caches made before removal may persist outside our control.

Consent and objections: where processing relies on consent, you can withdraw it at any time using Privacy choices in the footer or by contacting the privacy address. Turning off Performance cookies stops Clarity from using analytics storage for future activity; limited page-view information may still be collected without cookies. This choice also stops future PostHog browser analytics, but does not stop the separately described server-side request-error diagnostics. Contact us to object to other processing or request restriction of it. Withdrawal stops future processing based on that consent; it does not undo prior lawful processing or affect processing based on another legal ground. You can object to processing based on legitimate interests by describing the processing you object to. We will review the objection, restrict the processing where required while we assess it, and stop unless we have compelling legitimate grounds or need the information for legal claims. Marketing emails can also be stopped using their unsubscribe link.

We verify requests using information already associated with your account wherever possible. An authenticated request or a message from the account email will generally be enough. If it is not, we will ask only for information reasonably needed to match the account or protect it from an unauthorized change; we do not routinely require government identification or sensitive documents. We will explain the reason before requesting anything more intrusive. An authorized agent may submit a request where local law permits; we may verify the agent's authority and, only as necessary, your identity. We will not discriminate against you for exercising a privacy right.

EEA, UK, and similar jurisdictions: you may exercise rights provided by applicable data protection law, including access, rectification, erasure, portability, restriction, objection, and withdrawal of consent. You may lodge a complaint with your local supervisory authority.

California and other US state residents: subject to applicable law, you may request to know or access, correct, or delete personal information; opt out of a sale, sharing, or targeted advertising; and appeal a decision on a request where that right is provided. Microsoft Clarity collects limited page-view information without cookies. You can turn off Performance cookies using Privacy choices in the footer, which also stops PostHog browser analytics; it does not stop the separately described server-side request-error diagnostics. Creators Vista does not use targeted advertising. We process Global Privacy Control and Do Not Track signals sent by your browser as a request to turn Performance cookies off, as described above. You can also contact us to submit a privacy request. Creators Vista does not knowingly collect sensitive personal information to infer characteristics about you.

You can unsubscribe from marketing emails using the link in the message or by contacting us. Essential service messages, such as account, security, or billing notices, may still be sent.

10. Automated decisions

Creators Vista does not currently make decisions based solely on automated processing, including profiling, that produce legal effects or similarly significant effects about you.

11. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information. No system or transmission is completely secure, and we cannot guarantee absolute security. Please use a strong, unique password and contact us promptly if you believe your account has been compromised.

12. Children

Creators Vista is intended for adults aged 18 and older. Anyone under 18 may not create an account or use the service. We do not intentionally collect personal information from people under 18. If we learn that someone under 18 has created an account, contact us so we can review the account and take appropriate action, including deletion where appropriate.

If you believe someone under 18 has created an account, contact us so we can review it and take appropriate action.

13. Changes to this Policy

We may update this Policy as our practices or legal requirements change. We will post the revised version here and change the effective date. If a change materially affects your rights or how we use information, we will provide additional notice where required by law.