Privacy Policy

Operated by MayaCre8o Systems (Website: https://mcre8o.in)

Effective Date: 11 August 2026 • Last updated: 16 October 2026

1. Legal Entity & Overview

MayaCre8o Systems ("MayaCre8o", "We", or "Us") operates the website and services at https://mcre8o.in connecting corporate brands and agencies with social media creators. This Privacy Policy explains how we collect, process, store, and protect your information under applicable Indian privacy laws.

2. What Information We Collect

What we collect depends on how you use our site:

  • Brands: We collect your name, work email, mobile number if you give it, company details, and the billing details we need for invoices.
  • Registered Creators: When you sign up, we collect your mobile number (confirmed with a one-time code), your Instagram handle, your name, your email if you add it, bank details for payouts, and the Instagram data you allow us to read.
  • Public Creators: We also look at public information (like your public follower count) to help brands find you.
  • Website forms: When you fill in a form on this site, we also record which site or campaign link sent you (for example a utm_source tag).

3. How We Use Your Information

We use your information to:

  • Run our website and services.
  • Match creators with the right brand campaigns.
  • Make sure everyone gets paid securely.
  • Catch fake accounts, bots, and scammers.

4. Connecting Your Social Media

If you connect your social media accounts to our platform, we only use your data to help you get deals. We never publish posts on your behalf. If you switch on DM automation, we send only the replies you set up.

  • YouTube: By connecting your YouTube account, you agree to be bound by the YouTube Terms of Service. We use YouTube API Services to fetch your statistics. Please also refer to the Google Privacy Policy. You can easily disconnect our access to your YouTube at any time by going to your Google Security Settings.
  • Instagram & Facebook: With your permission we read your profile (handle, name, follower count), your posts and reels, and their insights (such as views, reach, likes, comments, shares and saves). If you switch on DM automation, we also read the comments on your posts and the messages sent to your account, only to send the replies you set up. You can remove our access in Instagram at any time, or ask us to delete this data.

5. Who We Share Your Data With

We do not sell your data. We only share it with:

  • Brands: A brand reviewing a creator's application sees that creator's Instagram audience and performance insights. A brand working with a creator sees the results of that campaign's posts.
  • Link in bio viewers: When a creator publishes their Link in bio, anyone with the link sees the creator's links, photo, bio, chosen categories and languages, followers, average Reel views, engagement rate and top 3 Instagram posts. People who sign in with a verified email also see the creator's city, Instagram insights, rates, verified contact email if the creator lets brands email them directly, and the results of the creator's past MCRE8O campaigns with the brand names. If the creator unpublishes, this stops showing at once.
  • Service Providers: We share data with the tools we use to keep our site running safely : Google Cloud and Firebase (hosting, database and sign-in; our main database is stored in India), Resend (email), Google Gemini (AI features such as script drafts and content analysis) and WhatsApp, a Meta service, which may deliver a creator's sign-in code and updates about the creator's own campaigns (selection, requested changes and deadlines). A creator can turn the updates off in Settings. We share the creator's mobile number and the campaign title with Meta only to send these messages.
  • The Law: We will share data if the government or a law strictly requires us to.

Signing in to a creator's Link in bio creates a free MCRE8O brand account. We keep your name, email and organisation, the creators' pages you opened, whether you agreed to emails from MCRE8O about creators, and the time and IP address of each agreement. A sign-in lasts 6 hours and is kept in a cookie named __session. The creator sees your organisation name and whether you used a work or personal email. A creator who lets brands email them directly also sees the domain of a work email. We keep the record of which pages you opened for 1 year, and delete it if your brand account is deleted.

6. Keeping & Retaining Your Data

We use strong security and encryption to lock up your personal information. We only keep your data for as long as your account is active. If you ask us to delete your account, we delete your social media data and personal information from our active systems within one year. We keep only what the law or a contract requires: invoices and payment records for tax law (up to 8 years), campaign content a brand has already paid for, which stays with that brand's campaign, and a short record that a creator agreed to publish their Link in bio, kept as proof of that consent.

7. Your Rights

You are in control of your information. At any time, you can ask us to:

  • Show you what information we have about you.
  • Fix or delete your information (deleting your data means brands can no longer find you on our site).
  • Stop using your data.
  • Transfer your account rights to someone else if something happens to you.

You can also complain to the Data Protection Board of India. If you are under 18, a parent or guardian must agree to your use of MCRE8O.

8. Links and Page Analytics

Some links we hand out (in a creator's bio page, a brand's campaign link, or an automated message) are short links on our own domain so we can tell how often they are opened. When one of these links is opened, we record the time, which link was opened, and the browser type. We do not store your network address (IP address): instead we keep a code that changes every day and is derived from it, so it cannot be used to build a history of your activity across days. We do not set cookies to do this.

The daily-changing code is deleted within 2 days. What is kept afterwards is only the daily total number of opens: an anonymous count, not a record tied to any person or device.

9. Support Access, Activity and Messages

To fix a problem, our support team may view your account, or use it on your behalf for up to 15 minutes. While doing so they cannot move money, accept terms, sign contracts, apply to or leave campaigns, change your prices, read your chats, or export or delete your data. Every action is logged, and we tell you each time it happens.

If you belong to an agency account, the agency owner can see when you were last active in the brand app.

We record which days you use MCRE8O so we can measure how the service is used. We keep these records for 24 months, and we delete them if you ask us to erase your data.

We send campaign and offer emails only if you switch them on in Settings, and every such email has an unsubscribe link. We may also show campaign and offer notices inside the app, and you can turn these off in Settings. We keep a record of each change to these choices, and we delete it if you ask us to erase your data.

We calculate internal quality scores from your connected Instagram data to help our team review applications. They are not shared with brands as a rating, and we delete them if you ask us to erase your data.

10. Contact Us

If you have any questions, complaints, or want to delete your data, please contact our Grievance Officer. We will reply within 7 days and solve the issue within 30 days.

  • Grievance Officer: Pranav Tripathi
  • Email: admin@mcre8o.in
  • Address: MayaCre8o Systems, Beawar, Rajasthan 305901, India