Privacy Policy

1. Scope of this policy

This Privacy Policy explains how StreetCreator, operated by Splashmax Creative Ltd, collects, uses, stores, shares and protects personal information when people use the StreetCreator website, marketplace, accounts, booking tools, payment-related features, verification tools, support channels and related services.

The policy applies to buyers, creators, business users, applicants, visitors and other people who interact with StreetCreator. It should be read together with the Terms of Service and any notices shown when information is collected.

2. Information you provide directly

Account information may include your name, email address, phone number, account role, company, job title, profile image and authentication-related information.

Creator information may include biographies, specialties, work samples, portfolios, rates, service descriptions, equipment, locations, languages, social links, availability and other professional information you choose to provide.

Buyer and project information may include creative briefs, project descriptions, dates, budgets, locations, campaign requirements, attachments, references, deliverables and communications with creators.

Support and dispute information may include messages, evidence, screenshots, files, complaint details, refund requests and other information you provide when seeking assistance.

3. Google Sign-In and authentication data

StreetCreator offers Google Sign-In as an optional way to create an account or sign in. If you choose Google Sign-In, Google may provide StreetCreator with basic account information that you authorize, such as your name, email address, profile image and a unique Google account identifier.

StreetCreator uses this Google-provided information only to authenticate you, create or maintain your StreetCreator account, display basic profile information where appropriate, support account security, prevent abuse and provide the services you request.

StreetCreator does not request access to your Gmail messages, Google Drive files, Google Contacts, Google Calendar or other unrelated Google services as part of normal sign-in. StreetCreator does not sell Google user data and does not use Google Sign-In data for targeted advertising.

Authentication may be processed through trusted infrastructure providers that support StreetCreator's sign-in and account systems. Information is shared only as necessary to provide authentication, security and platform functionality, subject to appropriate safeguards.

If you disconnect Google Sign-In or request account deletion, StreetCreator will handle associated account data in accordance with this policy, applicable law and any legitimate record-retention requirements.

4. Verification and identity information

Where verification is required, StreetCreator may collect identity, business or tax-related information and supporting documents. This can include identity document details, business registration information, legal names and related verification records.

StreetCreator may store document references, verification status, document metadata and limited identifying information needed to support trust, safety, fraud prevention and account review. Verification information is not displayed publicly unless a specific field is expressly intended to be public.

5. Booking, payment and payout information

StreetCreator records booking identifiers, payment status, transaction references, amounts, provider names, timestamps, payout records, refund information, reversals, chargebacks and related operational data needed to maintain an accurate marketplace ledger.

Payment providers may collect card, mobile-money or banking information directly. Where a payment provider handles those credentials, StreetCreator does not receive or store full card numbers or security codes.

Creator payout information may include payout method, provider references and contact or account details required to route settlement. Access to this information is restricted to legitimate operational use.

6. Information collected automatically

When you use StreetCreator, technical information may be collected automatically, including device type, browser, operating system, IP address, session information, timestamps, page or feature usage, error information and security events.

This information may be used to keep the service functioning, understand product usage, detect abuse, investigate incidents and improve reliability.

7. Cookies and similar technologies

We use PostHog US Cloud for anonymous product and website usage analytics, including selected page and action events, device information and referring domains. Analytics identifiers are stored for the browser tab session. We do not send names, email addresses, form contents, payment credentials or authentication tokens to PostHog. Session replay is disabled. Our integration respects browser Do Not Track and Global Privacy Control signals.

StreetCreator may use cookies, local storage and similar technologies to keep users signed in, remember preferences, support security features, measure product usage and improve the user experience.

Where required by applicable law, non-essential tracking technologies are used only with appropriate notice or consent. Browser settings may allow users to block or remove some cookies, although doing so may affect functionality.

8. How StreetCreator uses personal information

StreetCreator may use personal information to create and maintain accounts, provide marketplace discovery, support bookings, enable messaging, record delivery, process supported payments, prepare creator settlements and maintain transaction history.

Information may also be used to verify identity or business details, prevent fraud and abuse, investigate disputes, respond to support requests, enforce platform rules, secure accounts, improve features, troubleshoot problems and comply with legal obligations.

StreetCreator may use aggregated or de-identified information for analytics, product planning, marketplace insights and service improvement where the information no longer reasonably identifies an individual.

9. Legal bases and lawful processing

Where applicable data-protection law requires a lawful basis, StreetCreator may process information because it is necessary to provide the service or perform a contract, because there is a legal obligation, because the user has given valid consent, or because StreetCreator has a legitimate interest that is not overridden by the user's rights.

The specific lawful basis may depend on the type of information and the purpose for which it is used.

10. Public profile information

Certain creator information is intended to be visible in the marketplace, such as display name, profile image, professional title, portfolio, service information, location, categories, reviews and verification indicators where applicable.

Private account details such as personal phone numbers, identity documents, payout information, tax information and internal verification records are not intended to be exposed through public marketplace profiles.

11. Sharing with service providers

StreetCreator may share information with service providers that help operate the platform, including providers of cloud hosting, authentication, databases, file storage, email, communications, analytics, security, payments and payouts.

StreetCreator limits shared information to what is reasonably necessary for the service being provided and uses appropriate contractual, security and confidentiality safeguards where required.

12. Sharing between buyers and creators

StreetCreator may make relevant booking and project information available to the buyer and creator involved in a transaction so they can communicate, perform the work, deliver files and manage the booking.

Users are responsible for handling information received about another user lawfully and only for legitimate marketplace purposes.

13. Legal, safety and corporate disclosures

StreetCreator may disclose information where reasonably necessary to comply with law, court orders or lawful government requests; protect users or the public; investigate fraud or security threats; enforce platform terms; or establish, exercise or defend legal claims.

Information may also be transferred as part of a merger, acquisition, financing, restructuring, sale of assets or similar corporate transaction, subject to applicable legal requirements.

14. International data transfers

StreetCreator is operated from Kenya but may use technology providers that process information in other countries. As a result, personal information may be transferred across borders.

Where cross-border transfer safeguards are required by applicable law, StreetCreator uses appropriate legal, technical and contractual measures to protect the information.

15. Data retention

StreetCreator retains personal information for as long as reasonably necessary to provide the service, maintain transaction and accounting records, support disputes, prevent fraud, meet legal obligations and protect legitimate business interests.

Retention periods may vary by information type. Some information may remain after account closure where needed for legal, tax, payment, fraud-prevention, audit or dispute-resolution purposes. When information is no longer required, StreetCreator may delete it, anonymise it or securely archive it where appropriate.

16. Security

StreetCreator uses reasonable technical and organisational safeguards designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. These may include access controls, authentication, database protections, restricted operational permissions, secure payment-provider integrations and logging of important events.

No online system can guarantee absolute security. Users should use strong passwords, protect their devices and report suspected account compromise promptly.

17. Personal data breaches

StreetCreator assesses suspected personal-data incidents promptly and takes reasonable steps to contain, investigate and document them.

Where applicable law requires notification to the Office of the Data Protection Commissioner or communication to affected people, StreetCreator will make the required notifications within the applicable legal time limits.

18. Children

StreetCreator is intended for people who are legally able to enter into the relevant marketplace transactions. The platform is not designed as a service directed to young children.

If StreetCreator becomes aware that personal information was collected from a child in circumstances where parental consent or another legal basis was required and not obtained, appropriate steps may be taken to remove or restrict that information.

19. Your data-protection rights

Depending on the law that applies to you, you may have rights to request access to personal information, correction of inaccurate information, deletion in certain circumstances, restriction of processing, objection to certain processing, data portability, withdrawal of consent and information about how your data is used.

Some rights are not absolute. StreetCreator may need to retain or continue processing certain records where required by law, necessary for payment or accounting records, needed to prevent fraud, or required to establish or defend legal claims.

20. Marketing communications

StreetCreator may send service messages that are necessary for account, booking, payment, security or support purposes. Promotional communications are sent only where permitted by applicable law. Users may opt out of marketing messages using the method provided in the message, but this does not stop essential service communications.

After an opt-out, StreetCreator may keep a minimal suppression record, such as the relevant email address and opt-out date, only as needed to prevent future marketing from being sent unintentionally.

21. Automated tools and AI-assisted features

StreetCreator may introduce automated or AI-assisted features for tasks such as search, brief assistance, support, moderation or marketplace recommendations. Where such tools process user information, StreetCreator limits the information used to what is reasonably necessary and applies appropriate safeguards.

22. Third-party links and services

StreetCreator may link to or integrate with third-party services. Their privacy practices are governed by their own policies, and StreetCreator is not responsible for how independent third parties handle information outside the platform.

23. Changes to this policy

StreetCreator may update this Privacy Policy to reflect changes in the product, law, service providers, security practices or business operations. Material changes may be communicated through the platform or another appropriate channel. The updated date shown on this page indicates the latest published version.

24. Contact and privacy requests

For privacy questions, access or correction requests, deletion requests or other data-protection enquiries, contact StreetCreator at legal@streetcreator.africa.

To help protect user accounts, StreetCreator may need to verify the identity of the person making a privacy request before acting on it.

StreetCreator is operated by Splashmax Creative Ltd, P.O. Box 77213–00611, Nairobi, Kenya. If you believe a privacy concern has not been resolved, you may lodge a complaint with the Office of the Data Protection Commissioner of Kenya.