Privacy Policy

CoCreate ("we", "us", "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store and share your data when you use our platform. We are subject to UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By creating an account or using CoCreate, you agree to the practices described in this policy. If you do not agree, please do not use the platform.

Data Controller: CoCreate · Email: CoCreatePlatform@hotmail.com

Account data: Your email address and password (stored as a secure hash) when you register.

Profile data: Display name, username, bio, profile photo, banner image, location (city/country), date of birth, categories, skills, languages, social media handles and follower counts — all voluntarily provided by you.

Posts and content: Text, images and videos you publish as posts, Creative Block entries, or event listings.

Messages: Direct messages and conversation metadata (sender, recipient, timestamps). Message content is private and only accessible to participants.

Opportunities and applications: Opportunity listings you create, and application data submitted to other opportunities (including your message, portfolio URL and social handles).

Collaboration data: Collaboration requests, interest submissions, event RSVPs, and collaboration highlights you create.

Interactions: Likes, comments, reposts, bookmarks, connections, follows, and blocks.

Profile view data: When you view another creator's profile, we record that visit. Creators can see who viewed their profile unless you have disabled this in your privacy settings.

Notifications: In-app notification records including type, sender, and reference content.

Location data: City and country as entered by you. We do not use device GPS. You can hide your location from your public profile in Settings.

Activity data: Timestamps of your last meaningful activity, used only to display an optional activity status dot to other users. You can disable this in Settings → Privacy.

Reports: If you report content or a user, we store the report details to review and act on it. Report details are visible only to platform administrators.

Analytics: Aggregated, anonymised usage data (pages visited, features used) to improve the platform. We do not sell this data or use it to profile individuals.

Cookies: See our Cookie Policy for full details.

Payment data: If you subscribe to CoCreate Pro, payment is processed by Stripe. We do not store card numbers or full payment details on our servers.

We process your data on the following legal bases under UK GDPR:

• Contract performance: Providing the CoCreate service, including your profile, posts, messages, and connections.
• Legitimate interests: Platform safety, abuse prevention, and improving the service.
• Legal obligation: Complying with UK law, responding to lawful requests, and maintaining audit records.
• Consent: Marketing emails and optional analytics (you can withdraw consent at any time).

Specifically, we use your data to: operate and maintain the platform; facilitate connections between creators; personalise your experience; send transactional and service notifications; moderate content and investigate reports; and prevent fraud and abuse.

We do not sell your personal data to any third party.

Public profile: Your display name, username, bio, categories, skills, location (if not hidden), avatar, and public posts are visible to other registered users. You can control discoverability in Settings → Privacy.

Private profile: If you set your profile to "connections only" or "private", non-connected users will not see your profile in search or browse results.

Direct messages: Private between you and the recipient only. Platform administrators may access messages only if required to investigate a safety report.

Opportunities and applications: Opportunity listings are visible to all users. Applications are visible only to you and the opportunity owner.

Profile views: If you have profile view visibility enabled, creators whose profiles you visit can see your name and profile link. You can disable this in Settings → Privacy.

Activity status: A presence dot showing recent activity is visible to others by default. You can disable this in Settings → Privacy.

Blocked users: Blocked users cannot see your profile, posts, or interact with you on the platform.

Service providers: We use trusted third-party services (infrastructure, email, payment processing) who process data under contractual data processing agreements. We require all processors to maintain appropriate security.

Legal requirements: We may disclose data if required by law, court order, or to protect the safety of our users.

We retain your data for as long as your account is active. When you delete your account, we delete your personal data within 30 days, except where required by law to retain it (for example, financial records for tax compliance).

Some data (such as anonymised aggregated analytics, and report records required for safety auditing) may be retained in a non-identifiable form after account deletion.

Archived content you created may remain in archived state unless you delete it before account closure.

As a UK resident (or user covered by equivalent legislation), you have the following rights:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Correct inaccurate data (most data can be updated directly in your profile settings).
• Right to erasure ("right to be forgotten"): Request deletion of your data. You can delete your account directly from Settings → Delete Account.
• Right to restriction: Request we limit how we process your data in certain circumstances.
• Right to data portability: Request your data in a portable format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent (e.g. marketing emails), you can withdraw at any time.

To exercise any of these rights, contact us at CoCreatePlatform@hotmail.com. We will respond within 30 days.

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

You can delete your account at any time from Settings → Delete Account. Before deletion you will be shown a summary of what will be permanently removed, including your profile, posts, Creative Block entries, messages, opportunities, applications, connections, and saved items.

After deletion, your personal data will be removed within 30 days. Some anonymised or aggregated records may be retained for safety and legal compliance purposes as described in Section 5.

If you need assistance with account deletion, contact CoCreatePlatform@hotmail.com.

Any registered user can report content or profiles using the flag icon found on posts, profiles, opportunities, and comments. Reports are reviewed by platform administrators. You will not be identified to the person you reported unless required by law.

Administrators may take action including content removal, account suspension, or escalation to law enforcement where necessary.

CoCreate is operated from the United Kingdom. If you access the platform from outside the UK, your data is processed and stored in accordance with UK data protection law. Users from the European Economic Area (EEA) are protected under equivalent GDPR provisions.

We take appropriate safeguards when transferring data internationally, including use of standard contractual clauses where required.

CoCreate is not intended for use by anyone under 18 years of age. We do not knowingly collect data from minors. If we become aware that a user is under 18, we will close that account and delete the associated data.

We take reasonable technical and organisational measures to protect your data, including encrypted data transmission (HTTPS), access controls, and secure credential handling. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

If you believe your account has been compromised, contact us immediately at CoCreatePlatform@hotmail.com.

CoCreate uses cookies and similar technologies for authentication, preferences and optional analytics. See our Cookie Policy for full details including how to manage your preferences.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or a prominent notice on the platform. The date at the top of this page shows when it was last updated. Continued use after changes are posted constitutes acceptance of the updated policy.

For any questions about this Privacy Policy, data requests, or concerns:

Email: CoCreatePlatform@hotmail.com

Contact form: cocreate.app/contact

We aim to respond to all data-related requests within 30 days as required by UK GDPR.