Privacy Policy
1. Introduction
CTRL:// ARTSPACE (“Creative Ctrl”, “we”, “us” for operation) is an independent culture archive and creator marketplace. Brand and platform IP are owned by Creative Ctrl Artspace (CAC-registered, Nigeria). The websites and apps are operated by Sasky Mali Music, a sole proprietorship in Canada.
This policy explains how we collect, use, store, share, and delete personal information when you use https://artspace.creativectrl.org, including when you Sign in with Google.
2. Information We Collect
2.1 Account information
- Email address
- Username, display name, bio, location, website, and social links
- Profile picture and press-kit photos you upload
- Account role (viewer, creator, or admin)
2.2 Content you publish
- Artwork, audio embeds, exclusive-drop metadata, liner notes, and 3D gallery settings
- Event listings, spotlight submissions, comments, and other community activity
2.3 Payments
- Unlock and tip amounts, currency, and processor transaction references
- Creator payout account identifiers (for example a Stripe Connect account id)
- Card numbers and bank credentials are handled by Stripe or Paystack and are never stored on Creative Ctrl servers
2.4 Technical data
- IP address, browser, device type, and basic usage / playback metrics needed to run and secure the service
3. Google User Data
When you choose Sign in with Google, we request only the basic OpenID profile scopes needed to create or recognize your Creative Ctrl account: email address, name, and profile photo. We do not request Google Drive, Gmail, Contacts, Calendar, YouTube, or any other Google product data.
3.1 How we use Google data
- Authenticate you and create or link a Creative Ctrl profile
- Pre-fill your email and (if available) name and avatar on first sign-in
- Prevent duplicate accounts and recover access to your session
3.2 How we do not use Google data
- We do not read your Gmail, contacts, files, or other Google services
- We do not post to your Google account
- We do not sell Google user data
- We do not use Google user data for advertising or credit decisions
- We do not transfer Google user data to third parties except as needed to operate authentication (see below)
3.3 Sharing and processors
Google sign-in is processed by Supabase Auth on our behalf. Your Google email / name / avatar are stored in our Supabase project to keep you signed in. We do not share that Google data with Stripe, Paystack, Netlify, Resend, or other vendors except as required to send you account email (the email address itself) or to comply with law.
3.4 Retention and deletion
Google-derived profile fields are kept for as long as your Creative Ctrl account exists. You may delete your account from your profile settings or by emailing legal@creativectrl.org. We will delete or anonymize associated personal data, including Google-provided email, name, and avatar, unless we must retain a limited record for legal, security, or payment-dispute reasons.
3.5 Google API Services User Data Policy (Limited Use)
Creative Ctrl's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
4. How We Use Information
- Operate the archive, profiles, 3D galleries, exclusive vault, and events
- Process exclusive-drop unlocks and creator payouts (85% creator / 15% platform). Payout balances may remain pending until the creator’s payout sub-account is approved; see the Terms of Service for release timing and dispute freezes.
- Review creator upgrade and spotlight submissions
- Send essential account email (security, password reset, payout notices)
- Prevent abuse, fraud, and unauthorized vault access
5. Payment processors and other services
We use Stripe and Paystack for payments, Supabase for auth/database/storage, Google Cloud Storage for private audio masters (time-limited signed URLs), Netlify for hosting, and Resend for transactional email. Those providers process data only to deliver the service.
6. Your rights
- Access, correct, or export your account data
- Delete your account and, where allowed, published creator releases. Deleting a release or account does not erase payment records, unlock entitlements, or logs we must keep for chargebacks, fraud prevention, or law.
- Withdraw consent where processing is based on consent
Requests: legal@creativectrl.org
7. Contact
Creative Ctrl Artspace (Nigeria, CAC) · Operated by Sasky Mali Music (Canada)
Privacy & compliance: legal@creativectrl.org
Support: artspace@creativectrl.org