CTopia — Powered by Creatortopia, Inc.
Effective Date: August 17, 2026 · Last Updated: August 17, 2026
Welcome to CTopia, operated by Creatortopia, Inc. ("Company," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and protect information about you when you access or use the CTopia mobile and web application (the "App"), our website, and any related services, features, or content (collectively, the "Services"). By creating an account or using the Services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use the Services. This Privacy Policy applies to all users of the App, including creators, consumers, and marketplace participants. It covers information collected online through the App and through any associated emails or communications with our team. For questions or concerns about this Privacy Policy, please contact us at: Creatortopia, Inc., 26 Broadway, 3rd Floor, New York, NY 10004. Email: support@ctopia.co.
We collect information you provide directly, information collected automatically through your use of the App, and information from third parties. The specific types of data we collect are described below.
Account Registration: When you create an account, we collect your name, email address, username, password, and profile information (such as a bio, profile photo, or social media handles). Creator Profile: If you use the App as a creator, we may collect additional professional information such as your content categories, portfolio links, audience demographics you choose to share, and payment details. Payment and Financial Information: When you subscribe to paid features or transact on our marketplace, we collect billing information including cardholder name, billing address, and payment method details. Payment card data is processed by a PCI-DSS-compliant third-party payment processor (such as Stripe) and is not stored directly on our servers. Communications: If you contact us for support, provide feedback, or respond to surveys, we collect the content of those communications. User-Generated Activity: We collect information you post, share, comment on, like, or otherwise interact with on the platform.
Device and Technical Data: We automatically collect device type, operating system, browser type, IP address, device identifiers (such as IDFA or GAID), and app version. Usage Data: We collect information about how you interact with the App, including features used, pages viewed, time spent, clicks, searches, and content interactions. Location Data: With your consent, we collect precise or approximate location information from your device. You may disable location access through your device settings at any time. We use location data to provide location-relevant features and improve the App. Cookies and Tracking Technologies: We and our third-party partners use cookies, web beacons, pixel tags, SDKs, and similar tracking technologies to collect information about your browsing behavior, session activity, and preferences. You can manage cookie preferences through your browser settings or our in-app consent manager. Log Data: Our servers automatically record information including your IP address, the date and time of your request, referring URLs, and crash data.
Third-Party Logins: If you choose to sign in using a third-party service (such as Google, Apple, or a social media platform), we receive certain profile information from that service, such as your name, email address, and profile photo, consistent with the permissions you have granted that service. Analytics Partners: We receive aggregated and pseudonymized data from analytics providers such as Google Analytics, Mixpanel, Amplitude, or similar tools to understand App performance and user behavior. Social Platforms: If you connect your social media accounts, we may receive audience data or platform-level metrics to support creator tools and benchmarking features (always in aggregated, anonymized form).
We use the information we collect for the following purposes:
Creating and maintaining your account and profile; processing transactions, subscriptions, and payments; enabling creator tools, marketplace features, and community interactions; personalizing your experience and delivering relevant content; diagnosing technical problems and improving App performance; developing new features and products.
We use data from user activity to produce industry benchmarks, performance insights, and analytical reports. This data is always aggregated and anonymized before use — no individual user is identified or identifiable in any benchmarking output. Benchmarking data may be used internally or shared externally in aggregate form only.
Sending transactional communications, such as receipts, account confirmations, and security alerts. Sending marketing communications, such as newsletters, product updates, promotional offers, and platform announcements. We may reach out for marketing purposes using the contact information you have provided. You may opt out of marketing communications at any time by clicking the "Unsubscribe" link in any email, adjusting your notification preferences in the App, or contacting us at support@ctopia.co. Opting out of marketing does not affect transactional communications related to your account.
Detecting, investigating, and preventing fraud, abuse, and unauthorized access; enforcing our Terms & Conditions and other policies; complying with applicable laws, legal processes, and regulatory obligations; responding to law enforcement requests or court orders.
We do not sell, rent, trade, or otherwise transfer your personal information to third parties for their own commercial use or marketing purposes. This commitment applies regardless of your location.
We share information with trusted third-party vendors and service providers who assist us in operating the App and delivering the Services. These include: Payment processors (e.g., Stripe) for handling financial transactions; Cloud hosting and infrastructure providers (e.g., AWS, Google Cloud); Analytics providers (e.g., Google Analytics, Mixpanel, Amplitude); Customer support and communication tools; Email and push notification delivery services; Security and fraud prevention services. All service providers are contractually bound to use personal information only on our behalf and in accordance with our instructions and this Privacy Policy.
If you use a third-party login (e.g., Google, Apple), we share limited identification data with those providers consistent with your permissions. We do not control those providers' privacy practices and encourage you to review their policies.
In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred to the acquiring entity. We will provide notice before your personal information is transferred and becomes subject to a materially different privacy policy.
We may disclose your information when we believe in good faith that disclosure is necessary to: (a) comply with applicable law or legal process; (b) protect the rights, property, or safety of our users, employees, or the public; or (c) detect, prevent, or address fraud or security issues.
We may share aggregated, anonymized, or de-identified data — such as industry benchmarks, usage trends, or performance reports — that cannot reasonably be used to identify you. This data is not subject to the restrictions in this Privacy Policy.
We retain your personal information for as long as your account is active, as necessary to provide the Services, or as required by applicable law. When you delete your account, we will delete or anonymize your personal information within 90 days, unless we are required by law to retain it longer. Certain information may be retained in our backup systems for up to 180 days following deletion. Anonymized or aggregated data derived from your use of the Services (such as benchmarking data) is not subject to account deletion requests and may be retained indefinitely.
You have the right to access, update, or correct your personal information through your account settings at any time. You may also request deletion of your account and associated personal data by contacting us at support@ctopia.co. If you have connected your Instagram account and wish to request deletion of the Instagram-derived data CTopia holds, you can do so here: Request Instagram Data Deletion
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA): Right to Know: The right to request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the third parties with whom we share it. Right to Delete: The right to request deletion of your personal information, subject to certain exceptions. Right to Correct: The right to request correction of inaccurate personal information we hold about you. Right to Opt-Out of Sale/Sharing: We do not sell or share personal information for cross-context behavioral advertising. If that practice changes, we will provide a "Do Not Sell or Share My Personal Information" link. Right to Limit Use of Sensitive Personal Information: The right to limit our use of sensitive personal information to what is necessary to provide the Services. Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights. To exercise your CCPA rights, contact us at support@ctopia.co with the subject line "CCPA Rights Request." We will respond within 45 days.
If you are located in the EEA, UK, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR) or applicable equivalent legislation: Right of Access (Article 15): Request a copy of the personal data we hold about you. Right to Rectification (Article 16): Request correction of inaccurate or incomplete data. Right to Erasure (Article 17): Request deletion of your personal data ("right to be forgotten") under certain conditions. Right to Restriction of Processing (Article 18): Request that we limit how we use your data while a dispute is resolved. Right to Data Portability (Article 20): Receive your personal data in a structured, machine-readable format. Right to Object (Article 21): Object to processing based on legitimate interests, including direct marketing. Right to Withdraw Consent: Where processing is based on your consent, withdraw it at any time without affecting the lawfulness of prior processing. Our lawful bases for processing personal data include: performance of a contract (providing the Services), compliance with legal obligations, our legitimate interests (improving the App, preventing fraud, marketing), and your consent (for location data and marketing communications). To exercise your GDPR rights, or to lodge a complaint, contact us at support@ctopia.co. You also have the right to lodge a complaint with your local data protection authority.
You may revoke the App's access to your device location at any time through your device operating system settings. Revoking location access may limit certain features of the App.
To stop receiving marketing emails from us, click the "Unsubscribe" link in any marketing email, or contact us at support@ctopia.co. You will continue to receive transactional and account-related messages.
We implement industry-standard technical, organizational, and administrative safeguards to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS/SSL), encryption of sensitive data at rest, access controls and least-privilege principles, regular security assessments, and employee training on data protection. No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. In the event of a data breach affecting your rights and freedoms, we will notify you as required by applicable law.
The App may contain links to third-party websites, services, or integrations. This Privacy Policy does not apply to any third-party services, and we are not responsible for the privacy practices or content of those services. We encourage you to review the privacy policies of any third-party services you interact with through the App. When you connect third-party social media accounts (e.g., Instagram, TikTok, YouTube) to your CTopia profile, you authorize us to access certain account data as permitted by those platforms and consistent with your authorization. You can disconnect these integrations at any time through your account settings.
CTopia offers "Continue with Google" (Sign in with Google) so you can create and authenticate your CTopia account using your existing Google credentials. This section explains specifically how CTopia accesses, uses, stores, and shares Google user data in connection with Google sign-in.
CTopia utilizes Google OAuth APIs to access basic profile information and workspace identifiers. The specific Google-owned data CTopia accesses through Google Sign-In is strictly limited to: your name, email address, and profile picture (corresponding to the standard OpenID Connect scopes: openid, email, and profile). This data is strictly utilized to authenticate your account, create your CTopia workspace profile, and identify you across sessions. CTopia does NOT request, access, or scrape any of the following Google-owned assets through Google Sign-In: Gmail messages or authorized emails, Google Drive files or folders, Google Calendar events, YouTube content, channels, videos, or analytics, Google Contacts, Google Ads accounts, Google Analytics, Google Photos, Google Sheets, Google Docs, Google Forms, Google Tasks, or any other Google API service — unless you explicitly connect that service and authorize the additional permissions. There are no hidden or additional Google API scopes requested beyond the three basic scopes listed above.
We use the Google account information described above solely to: (a) create your CTopia account when you first sign in with Google; (b) authenticate you on subsequent visits; (c) populate your CTopia profile (name, email, photo) so you do not have to re-enter it; and (d) keep your account securely connected across your team workspace. We do not use your Google account information to display ads or to advertise on third-party platforms.
Your Google profile information is stored in our secure database and protected by the technical and organizational safeguards described in Section 7 (Data Security), including encryption in transit (TLS/SSL) and access controls. CTopia never receives or stores your Google password. Authentication is handled by Google, and CTopia receives only an authorization token and the profile fields you approve.
CTopia does not sell your Google user data. We do not share your Google account information with third parties for their own commercial use. We do not use your Google data to train artificial intelligence models. We do not transfer your Google account information to third parties except as described in Section 4 (How We Share Your Information) and as required by applicable law.
If CTopia later offers optional integrations with additional Google services (for example, Google Calendar or YouTube analytics), those integrations will request only the specific permissions required for the feature you enable, will be clearly labeled at the time of connection, and will be governed by this Privacy Policy and the permissions you grant. You can disconnect any Google integration at any time through your CTopia account settings, which revokes CTopia's access going forward.
You can revoke CTopia's access to your Google account at any time from your Google Account security settings (myaccount.google.com/permissions) or by disconnecting the integration from within CTopia. Revoking access stops CTopia from retrieving new information but does not delete data already lawfully stored in your CTopia account; you can request deletion of your CTopia account as described in Section 6 (Your Rights and Choices).
CTopia's use of information received from Google APIs adheres to Google's API Services User Data Policy, including the Limited Use requirements. Read Google's API Services User Data Policy
The CTopia App includes features powered by artificial intelligence ("AI") and machine learning technologies. When you use AI-powered features, your input data (such as text, images, or content you submit) may be processed by AI systems to generate outputs. We do not use your personal conversations or content submissions to train AI models without your explicit consent. AI-generated outputs should be reviewed by you before use, as they may be inaccurate, incomplete, or not suitable for all purposes. You are responsible for any AI-generated content you publish through the App.
The CTopia App is intended for users who are 18 years of age or older. We do not knowingly collect personal information from individuals under 18. If we discover that we have inadvertently collected information from a minor, we will take prompt steps to delete that information. If you believe we have collected information from a person under 18, please contact us immediately at support@ctopia.co.
Creatortopia, Inc. is headquartered in the United States. If you are accessing the Services from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These countries may have different data protection laws than your country of residence. For users in the EEA, UK, or Switzerland, we ensure that international transfers of your personal data are protected by appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission, or other lawful transfer mechanisms in accordance with applicable law.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by email (at the address associated with your account), through an in-app notification, or by prominently posting the updated policy in the App. The "Last Updated" date at the top of this policy indicates when it was last revised. Your continued use of the Services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: Creatortopia, Inc., Attn: Privacy Team, 26 Broadway, 3rd Floor, New York, NY 10004. Email: support@ctopia.co. We will respond to all legitimate privacy inquiries within 30 days, or within the timeframe required by applicable law.
© 2026 Creatortopia, Inc. All rights reserved.