Privacy
Collect less. Protect what matters.
Kind Creators & FOM uses one invitation-only member account for training, creator directories, battle-poster tools and approved future member services. We collect only what is needed to provide and protect that access.
What we collect
For an invited account we collect an email address, full and display names, TikTok username, region, agency or sub-agency name, membership role, access status, invitation and security records, legal-document acceptance, lesson progress and directory-listing consent. We do not ask for or store TikTok passwords, banking details, payout details, identity documents or government identifiers for ordinary member access.
Why we use it
We use member information to verify invitations, provide the member portal and tools, show approved creators in the private directory, restrict managers to their assigned region, deliver security and account messages, record consent, protect the service, investigate misuse and meet legal obligations. Newsletter consent remains separate and optional.
Control and visibility
- Creators can access and correct their account details and withdraw directory-listing consent.
- Regional managers can manage creator invitations and listings only for their assigned region.
- Agency owners can manage AU, UK and US; only the global administrator can grant manager or owner authority.
- Privileged changes and invitation use are audited; passwords are handled by Supabase Auth and are not visible to Kind Creators managers.
Storage, providers and overseas processing
Private member records and authentication are hosted with Supabase in its configured Sydney region. The website uses Vercel, account email uses Resend and business email uses Google Workspace. Those providers may process limited service data in Australia, the United States or other locations where they or their subprocessors operate. We limit what each provider receives and use access controls, encryption in transit and audited permissions.
Retention and contact
Unused creator invitations expire after 7 days and privileged invitations after 72 hours. Expired invitation metadata is removed or anonymised within 30 days. Active member data is kept while access is required; after closure it is deactivated promptly, removed from active systems within 30 days where legally possible and may remain in protected backups for up to 90 days. Security, audit and consent records may be retained for up to 24 months. Request access, correction, closure or make a privacy complaint at privacy@kindcreators.com.au. We aim to acknowledge privacy requests promptly and respond within 30 days.