Legal

Privacy Policy

Creto, operated by Varkala Technologies Pvt. Ltd., collects and uses user, creator, and brand information to provide its services, process payments, facilitate connections and collaborations, and maintain a secure platform.

Effective 8 October 2026 · Version 1

Privacy Policy

Creto is operated by Varkala Technologies Pvt. Ltd. (“Creto”, “we”, “us”, or “our”). This Privacy Policy explains how we collect, use, process, store, and protect your personal information when you access or use the Creto platform, including our mobile applications for users and creators and our web-based portal for brands.

When you create an account or use Creto, we may collect information that you voluntarily provide to us, including your name, email address, phone number, profile photo, username, biography, location, social media information, creator details, brand information, payment details, and other information required to provide our services. We may also collect information relating to your activity on the platform, including creator profiles you view, calls you make or receive, call duration, transactions, applications for brand campaigns, campaign participation, content or deliverables submitted, and interactions with other users.

Creto uses this information to operate and improve the platform and to provide its core services. This includes allowing audiences to discover and connect with creators through paid calls, enabling creators to manage their profiles, calls, brand collaborations and earnings, and allowing brands to discover creators, publish campaigns and manage collaborations. We may also use information to process payments, facilitate creator withdrawals, provide customer support, communicate important account or service updates, prevent fraud and misuse, improve platform security, analyze usage and performance, and comply with applicable laws and regulations.

Creto facilitates paid calls between users and creators through a pay-per-minute model. To provide this service, we may process information such as the participants in a call, call start and end times, call duration, applicable charges, payment status, and related transaction information. This information may be used to calculate charges, process creator earnings, resolve disputes, provide customer support, maintain transaction records, and protect the platform from misuse. Creto does not guarantee that communications made through the platform are completely confidential beyond the protections provided by applicable law and our technical and organizational safeguards.

Creto also provides a marketplace for brand collaborations. When a creator applies for or participates in a brand campaign, certain information from the creator's profile, portfolio, social media presence, audience information, application, and campaign activity may be made available to the relevant brand. This allows brands to evaluate creators and manage collaborations. Similarly, information provided by brands may be shared with creators when necessary to facilitate campaigns and collaborations.

Payments made through Creto may be processed through third-party payment service providers. We may receive information relating to a transaction, such as the amount, payment status, transaction reference, and related account information. Payment providers may independently process payment information in accordance with their own terms and privacy policies. Creators may also be required to provide bank or other payout information so that Creto can process their earnings and withdrawals.

We may share personal information with third parties when reasonably necessary to operate Creto. These third parties may include payment processors, hosting and cloud service providers, analytics providers, communication and notification providers, authentication services, customer-support providers, and other technology partners that help us provide and maintain the platform. We may also disclose information when required by applicable law, regulation, legal process, government authority, or when reasonably necessary to protect the rights, safety, property, and security of Creto, its users, creators, brands, or others.

We take reasonable technical and organizational measures to protect personal information from unauthorized access, loss, misuse, alteration, or disclosure. However, no internet-based service, electronic transmission, or storage system can be guaranteed to be completely secure. Users are responsible for maintaining the confidentiality of their account credentials and should notify us if they believe their account has been accessed without authorization.

We retain personal information for as long as reasonably necessary to provide our services, maintain account and transaction records, support legitimate business purposes, resolve disputes, prevent fraud, comply with legal and regulatory obligations, and enforce our agreements. When information is no longer required for these purposes, we may delete, anonymize, or securely retain it where required or permitted by applicable law.

Depending on applicable law, you may have certain rights regarding your personal information, including the right to request access to or correction of your information, request deletion of certain information, withdraw applicable consent, or close your account. Some information may need to be retained where required by law or where necessary for legitimate business, security, fraud-prevention, or dispute-resolution purposes.

Creto may use third-party services, integrations, analytics tools, authentication providers, social platforms, payment providers, and other external services. These third parties may independently process information according to their own privacy policies and terms. Creto is not responsible for the privacy practices of third-party services that it does not control.

Creto is not intended for children who are below the minimum age permitted to use the platform under applicable law. We do not knowingly collect personal information from children in violation of applicable legal requirements. If we become aware that such information has been collected, we may take reasonable steps to delete it.

We may update this Privacy Policy from time to time to reflect changes in our services, technology, business practices, or applicable legal requirements. Any updated version may be made available through the Creto platform, and continued use of the platform after an update may constitute acceptance of the revised policy to the extent permitted by law.

If you have any questions, concerns, requests, or complaints regarding this Privacy Policy or the way your information is handled, you can contact us at support@creto.app.

Creto is operated by Varkala Technologies Pvt. Ltd.