Privacy Policy
Version 2026-04-28 · Last updated 28 April 2026
Hey Creators is a trading brand of Exposure Agency Pty Ltd (the legal entity that operates the Platform and is responsible for handling your personal information under Australian privacy law). This policy explains what personal information we collect, why, who we share it with, and the rights you have under the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth).
1. What we collect
- Account info: name, email, phone number, country, social handles (Instagram, TikTok), profile photo, ABN status, age confirmation.
- Payment info:we don't store your bank account or card data ourselves — Stripe Connect handles all of that. We store the connected account's ID so we can pay you.
- Content you upload: the videos and notes you submit for a job, plus any messages you send through the Platform.
- Usage data:when you log in, what jobs you view, and basic analytics. We don't sell this data to third parties.
2. Why we collect it
To run the Platform: match you to briefs, let brands review your profile, deliver your work, pay you, send you transactional emails about your jobs (we use Resend for this), and improve the experience.
3. Who we share it with
We use a small set of third-party service providers, each bound by their own privacy and security commitments:
- Supabase — our database, auth, and file storage (servers in Sydney, Australia)
- Stripe — payment processing and Connect payouts
- Resend — transactional email delivery
- Vercel — application hosting
- ClickUp / Air — internal project management and asset review (used by the Hey team to coordinate jobs)
- Brands you're assigned to — they see your profile, deliveries, and any messages you send on a job
We don't sell your personal information to anyone, ever.
4. International transfers
Some of our service providers (e.g. Stripe, Vercel, Resend) process data on servers in the United States and other countries. Where this happens we take reasonable steps to ensure your information is handled consistently with the APPs.
5. Storage and security
Personal data is stored in our Supabase Postgres database in Sydney, encrypted at rest. Auth uses email magic links — we never store passwords. Access to the production database is restricted to authorised Hey Creators staff.
6. Your rights
Under the Australian Privacy Principles you can:
- Request a copy of the personal info we hold about you
- Ask us to correct anything that's wrong
- Ask us to delete your account and data (subject to record-keeping obligations for completed jobs)
- Withdraw consent for direct marketing
To exercise any of these, email gabe@heycreators.com. We'll respond within 30 days.
7. Direct marketing
We may send you transactional emails about jobs (these you can't opt out of without leaving the Platform) and occasional updates about new features or briefs you might be interested in (these you can unsubscribe from at any time via the link in the email footer).
8. Cookies and tracking
We use cookies for authentication (so you stay logged in) and for basic analytics. We don't use third-party advertising trackers.
9. Complaints
If you think we've mishandled your personal information, contact us first at gabe@heycreators.com— we'll investigate and respond within a reasonable time. If you're not satisfied, you can escalate to the Office of the Australian Information Commissioner (OAIC): oaic.gov.au.
10. Changes to this policy
We'll notify you in-app or by email if we make material changes. The current version is shown at the top of this page; a new version date means a material update.
Contact
Questions about how we handle your data? Email gabe@heycreators.com. See also the Terms of Service.
The data controller for personal information collected through the Platform is Exposure Agency Pty Ltd, Sydney, Australia, trading as Hey Creators.