Who we are
Omnicrea is a creator marketing platform headquartered in Beirut, Lebanon. We connect brands with niche creators across the MENA region. This policy explains what personal information we collect from brands and creators, how we use it, and the choices you have. For any privacy question, write to us at [email protected].
What we collect
Brands: We collect the company name, the primary contact's name and email, the country of operation, the website, and the content of any campaign briefs you submit. We may also collect billing details when an engagement begins.
Creators: We collect your name, email, social handles, declared audience demographics, payout method details, and any screenshots of your analytics that you upload to verify reach and engagement. We also store your declared red lines and content categories.
Both: We store authentication tokens issued by our login provider (NextAuth sessions) and basic technical data such as IP address and user agent. We use these to keep your account secure and to detect abuse.
How we use it
We use your information to run the matching engine that surfaces creators to brands and briefs to creators, to send transactional emails through our delivery provider (Resend), and to coordinate payments. Payout method details are stored with encryption at rest where applicable. We do not use your data for advertising, and we do not run behavioral profiling.
Who we share it with
When a match progresses, the matched counterparty sees the data needed to evaluate the engagement: brands see the creator card you have built, and creators see the brief you have been matched to. We share operational data with our infrastructure providers strictly to deliver the service: Resend for email, Railway for application hosting, Cloudflare R2 for screenshot storage, and a managed Postgres database for application data. We never sell your data to third parties.
Your rights
You can request access to the data we hold about you, ask us to correct anything inaccurate, or ask us to delete your account. We will respond to verified requests within thirty days. Some requests may take longer if we need to confirm your identity or untangle data that is shared with a counterparty in an active engagement.
Contact: [email protected]
Cookies and tracking
We use only the cookies that are strictly necessary to keep you signed in and to keep your session secure. We do not run third-party analytics cookies, advertising pixels, or cross-site trackers at this time. If we introduce analytics in the future, we will update this policy and tell you before any non-essential tracking begins.
Data retention
We keep your account data for as long as your account is active. If you request deletion, we remove your account data within twelve months, except for records we are required to keep for financial or audit reasons. Payment-related records are kept for seven years in line with typical regional finance and tax obligations.
Cross-border data
Our application and primary database are hosted on Railway infrastructure in the European Union. If you access Omnicrea from outside the EU, your data is transferred to and processed in the EU. We work to honor the data-protection principles you would expect under GDPR-aligned frameworks, regardless of where you sign up from.
Changes to this policy
We may update this policy as the product evolves. If we make a material change, we will email registered users before the change takes effect and update the date at the top of this page.