Privacy Policy

Effective date: 29 July 2026

Creator Valley (“we”, “us”) provides link-in-bio pages, portfolios and invoicing for creators and creative freelancers at creatorvalley.co. This policy explains what information we collect, why, and what control you have over it.

What we collect

• Account details — your email address (via magic link or Google sign-in), display name, username, country, and profile content you add (bio, photos, links, rates, collaborations).
• Invoice details— invoices you create, including the client’s business name, contact email and address you enter, line items, and amounts.
• Business identifiers and bank details — if you add them: your tax identifier (e.g. ABN, PAN, EIN) and the bank account details you want displayed on invoices (e.g. BSB and account number). These exist solely so they can appear on the invoices you send — the same place they would appear on any traditional invoice. We never ask for card numbers, online-banking credentials or payment passwords, and we do not move money.
• Usage records — when an invoice link is first opened, we record a timestamp so you can see the invoice was viewed.

What is public

Your public profile (creatorvalley.co/your-username) shows what you choose to put on it: display name, bio, links, portfolio, rates and collaborations. Your email, tax identifiers, bank details and invoices are never shown on your public profile. A hosted invoice page is only reachable through its private, unguessable link and shows only what you chose to include on that invoice.

How we protect it

• Data is stored with Supabase on infrastructure in Sydney, Australia, encrypted at rest and in transit.
• Row-level security ensures only you can read your bank details, tax identifiers and invoices.
• Sign-in uses one-time links or Google OAuth — we never store passwords.

Services we rely on

• Supabase — database, authentication and file storage.
• Vercel — application hosting.
• Resend — sending sign-in and invoice emails.
• Google — optional Google sign-in; favicons on link pages are loaded via Google’s favicon service.

Each processes data only as needed to provide their service. We do not sell your data or use it for advertising.

Cookies

We use only the cookies required to keep you signed in. No advertising or cross-site tracking cookies.

Your choices

• You can edit or remove your bank details, tax identifiers and any profile content at any time in Settings.
• You can delete individual invoices, links, photos and collaborations at any time.
• To delete your account and all associated data, email us and we’ll action it promptly.

Contact

Questions or requests: bixustudio@gmail.com

Changes

If this policy changes materially, we’ll note the new effective date here and flag it in the app.