Privacy Policy
Last updated: August 7, 2026
Our Commitment to You
CreateCollect is built for freelancers and creatives who deserve straightforward, honest privacy practices. We do not sell, share, or trade your personal data with third parties for marketing purposes. Ever.
CreateCollect is intended for business use by adults 18 and older.
What Data We Collect
Account Information
Your name, email address, and a securely hashed version of your password. We never store your actual password.
Business Data
Client information, invoices, products, and branding settings you create within the app.
Payment Information
We do NOT store your credit card details. All payment processing is handled directly by Stripe, a PCI-DSS Level 1 certified processor.
How We Use Your Data
- To provide our service: Creating invoices, managing clients, processing payments, and sending emails on your behalf.
- To communicate with you: Sending transactional emails like invoice confirmations and payment receipts.
- To improve our service: Understanding how features are used to make CreateCollect better.
Email Tracking
CreateCollect tracks email opens and link clicks for invoice emails and marketing campaigns you send through our platform. This data is used solely to show you delivery and engagement metrics in your dashboard. We do not share this information with third parties for advertising or profiling purposes.
What We Do NOT Do
- We do NOT sell your data to advertisers, data brokers, or any third parties.
- We do NOT share your client lists or business information with anyone.
- We do NOT use your data for targeted advertising or create marketing profiles.
- We do NOT store credit card numbers — Stripe handles all payment card data.
Third-Party Services
We use the following trusted services to operate CreateCollect. Each has their own privacy policy:
Stripe
Payment processing for subscriptions and invoice payments
Mailgun
Sending transactional emails (invoices, reminders, campaigns)
Data Security
Secure Storage
Your data is transmitted over encrypted connections (HTTPS) and stored with restricted access. Payment card details are handled entirely by Stripe and never touch our servers.
Secure Transmission
All data is transmitted over HTTPS with TLS encryption.
PCI Compliance
Payment processing through Stripe meets PCI-DSS Level 1 standards.
Password Hashing
Passwords are hashed using industry-standard bcrypt algorithm.
Data Retention and Deletion
We retain your account and business data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law (e.g., financial records for tax purposes). Anonymized, aggregated data may be retained for analytics.
Your Rights
You have the right to:
- • Access your personal data stored in our system
- • Update your account information at any time
- • Delete your account and all associated data
- • Export your invoices and client data
- • Unsubscribe from marketing communications
To exercise any of these rights, please contact us at support@createcollect.com
Questions?
If you have any questions about this Privacy Policy or how we handle your data, please reach out to us at support@createcollect.com or visit our Support page.