Privacy Policy
1. Introduction
CTRL:// ARTSPACE (“Creative Ctrl”, “we”, “us”) is an independent culture archive and creator marketplace. CTRL:// ARTSPACE is operated by Uche Osakwe operating as Creative Ctrl Artspace, a business name registered in Ontario, Canada and with the Corporate Affairs Commission of Nigeria. Uche Osakwe owns the brand and platform IP, trading as Creative Ctrl Artspace.
This policy explains how we collect, use, store, share, and delete personal information when you use https://artspace.creativectrl.org, including when you Sign in with Google.
2. Information We Collect
2.1 Account information
- Email address
- Username, display name, bio, location, website, and social links
- Profile picture and press-kit photos you upload
- Account role (viewer, creator, or admin)
2.2 Content you publish
- Artwork, audio embeds, exclusive-drop metadata, liner notes, and 3D gallery settings
- Event listings, spotlight submissions, comments, and other community activity
2.3 Payments
- Unlock and tip amounts, currency, and processor transaction references
- Creator payout account identifiers (for example a Stripe Connect account id, Paystack recipient code, or Bachs payout identifier)
- Card numbers and bank credentials are handled directly by our authorized payment processors (Stripe, Paystack, or Bachs) and are never stored on Creative Ctrl servers
2.4 Technical data
- IP address, browser, device type, and basic usage / playback metrics needed to run and secure the service
2.5 Contact form
Contact form. When you use our contact form, we collect your name, email address and message so we can reply. Form submissions are processed and delivered by our email service provider, Resend, Inc., and our hosting provider, Netlify, Inc., which may store and process them outside Canada and Nigeria. We keep messages only as long as needed to respond and for reasonable record-keeping, then delete them. We don't sell this information or use it for marketing without your consent. To access or delete your message, email contact@creativectrl.org. This site is run by Uche Osakwe, operating as Creative Ctrl Artspace.
3. Google User Data
When you choose Sign in with Google, we request only the basic OpenID profile scopes needed to create or recognize your Creative Ctrl account: email address, name, and profile photo. We do not request Google Drive, Gmail, Contacts, Calendar, YouTube, or any other Google product data.
3.1 How we use Google data
- Authenticate you and create or link a Creative Ctrl profile
- Pre-fill your email and (if available) name and avatar on first sign-in
- Prevent duplicate accounts and recover access to your session
3.2 How we do not use Google data
- We do not read your Gmail, contacts, files, or other Google services
- We do not post to your Google account
- We do not sell Google user data
- We do not use Google user data for advertising or credit decisions
- We do not transfer Google user data to third parties except as needed to operate authentication (see below)
3.3 Sharing and processors
Google sign-in is processed by Supabase Auth on our behalf. Your Google email / name / avatar are stored in our Supabase project to keep you signed in. We do not share that Google data with Stripe, Paystack, Bachs, Netlify, Resend, or other vendors except as required to send you account email (the email address itself) or to comply with law.
3.4 Retention and deletion
Google-derived profile fields are kept for as long as your Creative Ctrl account exists. You may delete your account from your profile settings or by emailing legal@creativectrl.org. We will delete or anonymize associated personal data, including Google-provided email, name, and avatar, unless we must retain a limited record for legal, security, or payment-dispute reasons.
3.5 Google API Services User Data Policy (Limited Use)
Creative Ctrl's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
4. How We Use Information
- Operate the archive, profiles, 3D galleries, exclusive vault, and events
- Process exclusive-drop unlocks and creator payouts (85% creator / 15% platform). Payout balances may remain pending until the creator’s payout sub-account is approved; see the Terms of Service for release timing and dispute freezes.
- Review creator upgrade and spotlight submissions
- Send essential account email (security, password reset, payout notices)
- Prevent abuse, fraud, and unauthorized vault access
5. Payment processors and other services
We use Stripe, Paystack, and Bachs (Bachs Technologies) for secure multi-currency payments, international card checkouts (USD), direct Nigerian bank transfer rails (NGN), and creator payout settlements. They handle transaction references, customer billing tokens, and banking settlement data strictly to execute payment services; card numbers and sensitive banking credentials are encrypted and processed directly by them and are never stored on Creative Ctrl servers.
We use Supabase for auth/database/storage, Google Cloud Storage for private audio masters (time-limited signed URLs), Netlify for hosting, and Resend for transactional email.
We maintain client-side encrypted, redundant offsite backups with Google Workspace and secure multi-cloud infrastructure to ensure data resilience, business continuity, and disaster recovery in compliance with statutory security safeguards.
Those providers process data only to deliver the service.
6. Your rights
- Access, correct, or export your account data
- Delete your account and, where allowed, published creator releases. Deleting a release or account does not erase payment records, unlock entitlements, or logs we must keep for chargebacks, fraud prevention, or law.
- Withdraw consent where processing is based on consent
Requests: legal@creativectrl.org
7. Contact
Operated by Uche Osakwe, trading as Creative Ctrl Artspace (registered business name: Ontario, Canada and CAC Nigeria)
Privacy & compliance: legal@creativectrl.org
Support: artspace@creativectrl.org