PRIVACY POLICY
Effective Date: 1-8-2026]
Last Updated: [1-8-2026]
Welcome to Project Creator (“Company”, “we”, “our”, or “us”). Project Creator provides an integrated, all-in-one financial, tax, legal, and compliance management platform designed exclusively for content creators, influencers, artists, media production houses, and entertainment professionals.
We respect your privacy and recognize that handling multi-platform monetization, brand deals, tax filings, and intellectual property requires the highest standards of confidentiality and security. This Privacy Policy outlines how we collect, use, store, share, and protect your personal, financial, and proprietary operational data when you visit our website https://projectcreator.co.in (the “Site”) or engage our shared CFO, compliance, and wealth governance services.
By providing personal data and, where applicable, expressly consenting to its processing, Data Principals acknowledge that they have read, understood, and agreed to be bound by this Privacy Policy. If a Data Principal does not agree with any part of this Privacy Policy, they shall discontinue the use of our Site and services immediately.
1. Definitions
For the purposes of this Privacy Policy:
- “Data Principal” shall mean the individual to whom the personal data relates (referred to as “you”, “your”, or “User”).
- “Data Fiduciary” shall mean Project Creator, which determines the purpose and means of processing personal data.
- “Personal Data” shall mean any data about an individual who is identifiable by or in relation to such data.
- “Digital Personal Data Protection Act” or “DPDP Act” shall mean the Digital Personal Data Protection Act, 2023 of India, alongside any statutory rules, regulations, or amendments enacted thereunder.
“Minor” shall mean an individual who has not completed eighteen (18) years of age.
2. Information We Collect
To deliver customized CFO, tax, IP protection, and cross-border financial advisory services, the Company shall collect comprehensive information tailored to your creator ecosystem:
A. Creator Identity & Personal Data
- Basic Identifiers: Legal name, stage name/channel alias, date of birth, nationality, and government identifiers (e.g., PAN, Passport details, or statutory tax identification).
- Contact Details: Official email address, phone number, registered billing address, and residential address.
B. Multi-Platform & Revenue Data
- Monetization Accounts: Income reports, payment receipts, and API/dashboard read-only data from social media, streaming, creator economy, payment gateway, and monetization platforms (including YouTube, Instagram, Spotify, Twitch, Patreon, affiliate networks, and e-commerce/merchandise storefronts).
- Brand Invoicing & Contracts: Brand sponsorship deals, agency representation agreements, campaign invoices, payout terms (Net-30/60/90), and historical payment tracking.
- Foreign Income & Forex: Form W-8BEN/W-8ECI records, international wire transfer details, Foreign Inward Remittance Certificates (FIRC), and export-of-services documentation.
C. Accounting, GST, TDS & Financial Data
- Banking & Asset Records: Business and personal bank statements, payment gateway account data (e.g., Stripe, PayPal, Razorpay), credit/debit receipts, cancelled cheques, and loan/credit records.
- Tax & Compliance Filings: Income Tax Returns (ITR), Form 26AS, AIS/TIS reports, GST registration data, Input Tax Credit (ITC) receipts for production equipment/gear, routine ROC/incorporation filings, and TDS deduction records.
- Production & Team Expenses: Shoot production budgets, vendor receipts, payroll records, team contracts, and freelancer payouts.
D. IP, Corporate & Family Office Data
- Intellectual Property: Registered and pending Trademarks, Copyright filings, channel logos, licensing agreements, and royalty distribution statements.
- Corporate & Equity Structures: Articles of Incorporation, LLP agreements, partnership deeds, co-founder equity splits, and manager/talent agency agreements.
- Wealth & Net Worth Governance: Asset declarations, Key-Man insurance policies, real estate holdings, equity/stock portfolios, and family trust or holding company documents.
E. Automated Technical & Device Data
- Log Information: IP address, browser type, operating system, access times, and referring website URLs.
- Cookies & Tracking: The Company shall use session and persistent cookies to streamline portal access, analyze traffic flow, and ensure platform security. Data Principals may adjust browser settings to reject cookies; however, certain platform functionalities may consequently become restricted or unavailable.
F. Additional Service-Specific Data
Other Operational & Regulatory Information: The Company may, from time to time, request additional specific information, documentation, or operational data from the Data Principal as may be reasonably required, on a need-to-know basis, to deliver customized CFO, tax, legal, or compliance services, or to comply with applicable statutory mandates.
3. How We Use Your Information
The Company shall utilize personal, professional, and financial information solely to execute its service suite effectively, including:
- Automated Bookkeeping & Invoicing: Consolidating earnings from social platforms, matching invoices against bank credits, deducting foreign fee adjustments, issuing GST-compliant invoices, and tracking late brand payments.
- Tax Optimization & Compliance: Monitoring TDS deductions to prevent over-deduction, processing Input Tax Credit (ITC) claims on gear, executing zero-rated GST export filings, and optimizing cross-border/US AdSense tax withholdings.
- IP Protection & Royalties: Auditing royalty payouts, supporting trademark/copyright applications, and monitoring unauthorized brand usage.
- Cash Flow & Corporate Structuring: Designing shoot budgets, setting up agency payroll/team contracts, forming corporate entities (Pvt Ltd/LLP), and structuring global hubs.
- Family Office & Wealth Aggregation: Aggregating assets into unified net-worth dashboards, structuring passive income shields, and maintaining strict separation between personal and business finances.
- Legal & Regulatory Obligations: Complying with statutory reporting, anti-money laundering (AML) laws, statutory tax audits, or valid court orders.
4. Compliance with the DPDP Act (India)
The Company processes all personal data in strict compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and applicable Indian privacy regulations.
- Lawful Basis & Consent: Personal data shall be processed strictly for specified, lawful purposes after obtaining express, informed, and unambiguous consent from the Data Principal, or as permitted under applicable law for legitimate uses.
- Withdrawal of Consent: Data Principals shall have the right to withdraw consent for data processing at any time by issuing written notice to the designated Grievance Officer. Upon receipt of such withdrawal, the Company shall cease processing the specified personal data unless processing is required or authorized under statutory Indian law.
- Grievance Redressal: A dedicated Grievance Officer has been appointed to address queries, concerns, or grievances regarding personal data processing (refer to Section 12).
5. Provisions Regarding Minor Users & Legal Guardians
- Age Restriction: The services provided by Project Creator are strictly intended for individuals who have attained the age of majority (18 years or older). The Site and services are not directed at Minors without lawful authorization.
- Verifiable Parental/Guardian Consent: If a Data Principal is a Minor, or if services are sought on behalf of a Minor creator/artist, the parent or lawful legal guardian shall provide verifiable consent and execute all relevant agreements on behalf of the Minor.
- Processing Restrictions: The Company shall not engage in processing activities that are likely to cause any detrimental effect on the well-being of a Minor. Furthermore, the Company shall not undertake targeted tracking, behavioral monitoring, or targeted advertising directed at Minors.
- Account Structure: All contracts, banking relationships, and tax filings pertaining to Minor creators shall be routed, managed, or co-signed through their verifiable parent or legal guardian in accordance with Indian contract and tax laws.
6. Data Protection & Confidentiality Safeguards
- Given the sensitive nature of creator earnings, contract terms, and private family office assets, the Company maintains strict privacy protocols:
- Non-Disclosure & Confidentiality: All creator financial data, brand contract figures, and personal wealth disclosures shall be treated as strictly confidential and accessed only on a strict need-to-know basis by assigned professionals bound by legal non-disclosure obligations.
- Technical Security: The Company shall employ appropriate technical and organisational measures reasonably designed to protect personal dataincluding industry-standard encryption during transmission and at rest (TLS/SSL encryption), secure cloud server infrastructure, multi-factor authentication (MFA), and restricted administrative roles—to prevent unauthorized access, alteration, disclosure, or loss of data.
Security Disclaimer: While we employ reasonable technical and organisational safeguards, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
7. Disclosure & Sharing of Information
- The Company shall not sell, rent, trade, or lease personal, commercial, or financial information to third parties or advertisers. Information shall be shared solely under the following limited conditions:
- Authorized Third-Party Service Providers: Necessary data may be shared with vetted cloud-accounting platforms, tax-filing software, banking partners, or secure server infrastructure providers solely for the performance of agreed services.
- Governmental & Statutory Authorities: Information shall be disclosed to statutory authorities (including the Income Tax Department, GST Network, regulatory bodies, or law enforcement agencies) when legally mandated by statutory provisions, court orders, or compliance requirements.
- Corporate Restructuring: In the event of a merger, acquisition, corporate reorganization, or sale of assets, client data and records shall be transferred to the successor entity, subject to the terms of this Privacy Policy.
- Cross-Border Transfers: Personal data may be processed or stored outside India where required for foreign revenue processing, cross-border tax compliance, or secure third-party server hosting, provided such transfers comply with applicable provisions of the DPDP Act and Indian regulations.
8. Retention, Account Closure & Data Governance
- Standard Retention: Personal and financial data shall be retained only for as long as necessary to fulfill the operational purposes for which it was collected, or to provide continuous accounting, tax, and CFO services.
- Mandatory Statutory Retention: Notwithstanding service completion, certain accounting records, tax filings (ITR, GST, TDS), invoices, and contract data shall be retained for mandatory statutory periods as prescribed under the Income Tax Act, 1961, the Companies Act, 2013, and related GST laws.
- Account Closure, Disablement, or Termination: In the event of account closure, disablement, or termination of engagement (whether voluntary or initiated by the Company), personal data shall not be immediately deleted if retention is necessary to:
- Comply with mandatory multi-year tax and statutory audit retention mandates under Indian law;
- Resolve active or potential legal, contractual, or royalty disputes;
- Enforce client agreements or prevent fraudulent activities.
- Secure Archival & Erasure: Upon the expiration of statutory retention timelines, or when data is no longer necessary for any lawful purpose, all corresponding personal data shall be permanently erased or securely anonymized in accordance with applicable data governance standards.
9. Rights of Data Principals
- Under the DPDP Act and applicable legal frameworks, Data Principals shall have the following rights, subject to statutory limitations:
- Right to Access Information: Data Principals shall have the right to request a summary of personal data being processed, the identities of third parties with whom data has been shared, and related processing details.
- Right to Correction & Erasure: Data Principals shall have the right to request the correction, updating, or erasure of inaccurate or incomplete personal data, subject to statutory retention obligations.
- Right to Nominate: Data Principals shall have the right to nominate an individual who shall, in the event of death or incapacity of the Data Principal, exercise their rights in accordance with the law.
- Right of Grievance Redressal: Data Principals shall have access to readily available mechanisms to address grievances regarding personal data processing.
10. Limitation of Liability
- To the maximum extent permitted under applicable law, Project Creator, its directors, employees, affiliates, and advisors shall not be held liable for:
- Direct, indirect, punitive, or consequential losses resulting from inaccurate, delayed, unverified, or incomplete financial or contractual information provided by the creator, their talent agency, or designated representatives;
- Unauthorized access, cyberattacks, or data loss occurring outside the direct control of the Company or on third-party cloud platforms/networks;
- Delays, payment gateway failures, or unexpected monetization/algorithm adjustments executed by third-party platforms (e.g., YouTube, Meta, Spotify).
- Advisory & Client Decisions: All financial calculations, tax estimations, corporate structuring options, and regulatory guidance provided by the Company are indicative and for advisory purposes only. The final decision, commercial evaluation, and ultimate execution of any strategy or filing rest solely with the Data Principal, and the Company shall bear no liability for outcomes resulting from client-directed decisions.
11. Updates to This Privacy Policy
- We reserve the right to amend or update this Privacy Policy at any time to reflect operational changes, new service offerings, or legal updates. Modified policies will take effect immediately upon being posted on this page with an updated “Last Updated” date. Continued engagement with our services indicates acceptance of the revised policy.
12. Governing Law & Dispute Resolution
- This Privacy Policy shall be governed by, and construed in accordance with, the laws of India. Any legal disputes, claims, or proceedings arising out of or in connection with this Privacy Policy or data processing practices shall fall under the exclusive jurisdiction of the competent courts located in Jaipur, Rajasthan, India.
13. Contact Us & Grievance Redressal
- For any privacy-related queries, data correction requests, exercise of statutory rights, or grievances under the DPDP Act, please reach out to our designated officer:
- Entity Name: Project Creator LLP
- Website: https://projectcreator.co.in
- Attn / Grievance Officer: Ayush Jain / Aayush Dadhich
- Email: support@projectcreator.co.in
- Phone: +91 9541103633