Privacy notice

01Who processes the data

Creoseen, Tirana, Albania. For any question about your data: info@creoseen.com.

02What we collect

• Account: name, email, phone (optional), role, city, country. Your password is stored only in hashed form, never readable.
• Influencer profile: public name, type, niches, bio, social accounts, follower counts, engagement, profile photo, portfolio and packages with prices. Statistics screenshots for verification.
• Tax details (all users): tax regime (self-employed individual with a NIPT, or company), NIPT, legal name and address as registered at the QKB, and whether you are VAT-registered. A NIPT is mandatory on Creoseen.
• Influencer bank details: the IBAN and bank of the NIPT’s account, where you get paid. The IBAN is shown masked everywhere except in your own form and on the team’s payout screen.
• Invoices: for each collaboration, a copy of the parties’ details at the time of invoicing (seller and buyer), the NIVF number of the invoice the influencer fiscalizes, the date and, when you upload it, a copy of the invoice (PDF or photo); the number and NIVF of Creoseen’s invoice.
• Businesses and agencies: company name, industry, website, size, logo. For agencies: the clients and contacts they add.
• Collaborations: campaigns, applications, messages, proposals, briefs, deliveries (links and photos), post statistics, the breakdown of every payment (price, commission, influencer’s invoice, Creoseen’s invoice, amount paid) and payment statuses. For businesses: favourite lists and content rights expiry dates.
• Influencer bookkeeping (Creoseen NIPT): income and expense ledger entries (date, amount, description, category), the name and NIPT of clients or suppliers they enter, the pro-formas they prepare (client, items, amounts, due dates, fiscalized invoice number), the documents they upload (PDF or photo: invoices, contracts, certificates) and obligations marked as done.
• Plans: requests and payments for Pro plans (period, amount, document number).
• Contact: the name, email, company and message you send us.
• Technical: IP address and time of actions, only for security and to limit abuse.

03Why we use it

• To create and review your account, and to show influencers’ public profiles.
• To make collaborations possible: conversations, deliveries, approvals, invoices and payment statuses.
• We use tax details (NIPT, legal name, address, regime, VAT) for split invoicing: to prepare the draft of the influencer’s invoice to the business and Creoseen’s invoice to the business, which by law must contain these details. We use the IBAN only to pay the influencer their invoice, as collection agent. We use the NIVF and the copy of the invoice to check that the invoice has been fiscalized before payment. Legal basis: our contract with you and Creoseen’s legal obligations.
• We use bookkeeping data (ledger, pro-formas, documents, your clients) only to provide the Creoseen NIPT service: to store it, calculate totals, remind you of deadlines and create the exports you give your accountant. We don’t use it for any other purpose and don’t share it with other businesses. Legal basis: our contract with you.
• For email notifications about activity that concerns you (you can turn them off under Account).
• For security, fraud prevention and legal obligations, such as keeping invoicing records.
• To reply to messages.

We don’t sell your data and don’t use it for third-party advertising.

04What is public

An approved influencer’s profile appears in Explore and on their public page: public name, photo, type, niches, city, bio, follower counts (labelled Verified or Declared), packages with prices and public portfolio. Email and phone are never shown publicly. If you don’t want your profile to be visible, write to us.

Within a collaboration, the other party sees what it needs for the work: name, messages, brief, deliveries and status.

Tax details are never public. Within a collaboration, they appear only where the law requires them for the invoice:

• The business (or agency) sees on the influencer’s invoice their legal name, NIPT, address and whether the influencer is VAT-registered. It does not see the influencer’s IBAN: Creoseen pays them; in documents, when it appears, it is masked.
• The influencer sees on the draft of their own invoice the business’s legal name, NIPT and address, which they need to fiscalize it.
• The Creoseen team that handles invoices and payments sees the full details, including the IBAN, only for that work.

The ledger, pro-formas, documents and your clients outside Creoseen are seen only by the influencer. The Creoseen team opens them only when needed to provide the service (for example when you ask for help or for a technical problem), and every uploaded document is served only to you and to administrators. You download the export for your accountant and hand it over yourself.

“Real prices on Creoseen” are aggregate statistics (min, median, max) from packages and collaboration prices, with no names and no personal data, and are shown only when there are at least 5 data points.

05Who we share it with

• With the other party to a collaboration, as far as the work requires.
• We don’t share Creoseen NIPT bookkeeping data with anyone; you export it yourself when your accountant needs it.
• With our bank, as far as the transfer requires (the legal name and IBAN of your NIPT).
• With the tax administration, through the fiscalization of Creoseen’s invoices (which contain the buying business’s details), and with our accountant, who is bound by confidentiality. The influencer’s invoice is fiscalized by the influencer, from their own NIPT.
• With our hosting and email providers, which store and send the data on our behalf.
• With Meta Platforms Ireland (WhatsApp Business Platform), only your number and the text of the notification, if you have chosen WhatsApp notifications.
• With the authorities, only when required by law.

06WhatsApp, Help and refunds

• WhatsApp. We use your phone number for WhatsApp notifications only with your explicit consent, which you give in Account. We send them through Meta’s WhatsApp Business Platform, only for platform notifications (offers, deadlines, payments, tickets); Meta Platforms Ireland processes them as a processor on our behalf. We do not use your number for marketing.
• You can withdraw your consent at any time in Account. After that, notifications arrive only in the panel and by email.
• Help and disputes. The tickets you open under Help (messages and files) and dispute files (the parties’ explanations and the decision) are seen by the Creoseen team and, for a dispute, by the other party to the collaboration. We keep them together with the collaboration records, for the same period.
• The business’s IBAN (optional, in Account) is used only for refunds after a dispute.

07Cookies

We use only one strictly necessary session cookie, when you sign in or submit a form, and one preference cookie (cs_theme) when you choose the light or dark look. We use no advertising cookies and no third-party analytics tools.

08Where and for how long

• Data is stored with our hosting provider, in a protected database. Photos and documents are stored in a folder that cannot be accessed directly from the internet.
• Photos you upload are re-encoded: metadata (e.g. the camera’s location) is removed. PDFs are stored as they are, after we check that they really are PDFs.
• We keep data for as long as the account is active. After closure, we delete or anonymise it, except invoicing records that the law requires us to keep.
• The Creoseen NIPT ledger, pro-formas and documents stay in your account even when the plan expires. You can delete them yourself or ask us to delete them; after the account is closed we delete them within 30 days, except those linked to Creoseen’s invoices and payments, which the law requires us to keep. You can export them before deletion.
• Invoices, payments and the related tax details (legal name, NIPT, address, IBAN, NIVF numbers and copies of invoices) are kept for the period required by accounting and tax legislation, even after the account is closed. After that period we delete them.
• Contact messages are kept for up to 24 months.

09Security

Encrypted connection (HTTPS), hashed passwords, access limited to the team, IBAN masked on screen and access control for every private photo. No system is unbreakable: if we detect a breach that affects you, we will notify you.

10Your rights

You have the right to ask for a copy of your data, its correction or deletion, restriction of processing, to object to processing and to receive your data in a readable format. Write to info@creoseen.com and we will reply within 30 days.

If you believe we have not handled your data properly, you can contact the Commissioner for the Right to Information and Personal Data Protection (Albania).

11Contact

info@creoseen.com · or the contact form with the topic “Data privacy”.