PlayLab Creator Services Privacy Notice
1. What we collect
- TikTok account data when you sign in: your open id, username, display name and avatar. If you grant the optional permissions, also your public profile statistics and a list of your recent public videos.
- Campaign data: your participation in PlayLab campaigns, status and dates, the video links you submit, draft videos and review feedback, documents you accept (with your typed name, the time, and a one-way hash of your IP address and browser). If secure email access is offered, we also record the invitation and its use to verify access to your own campaign.
- Shipping data: the address you give us for product shipping and the tracking number.
- Payout data: your name, date of birth, address and bank details are used to pay you. PlayLab stores your bank details encrypted and shows only the last four digits of your account number. Your details are transferred to Airwallex (Singapore and Hong Kong) to make the payment.
- Communications with your PlayLab manager (email and, later, portal messages).
- Technical data: a session cookie to keep you signed in and a language cookie. No advertising cookies.
2. Why we use it
This notice covers the portal and related current and future PlayLab creator services. We use relevant information to provide services you use or request: campaign participation, collaboration matching and management, profiles and portfolios, content review, delivery, agreements, reporting, payments and support.
- To verify that you control your TikTok account and to link it to your PlayLab record.
- To run campaigns: selection, shipping, content guidelines, upload verification, agreements, invoices and payments.
- To show you your own campaign history and status in the portal.
- To contact you about campaigns you take part in and, if you turn on the PlayLab manager, about offers that match the preferences you set.
- To meet legal duties such as accounting and tax record keeping.
- To maintain account security, prevent misuse, troubleshoot and improve these services using the information needed for those purposes.
Service notices include access, campaign deadlines, shipping, review feedback, agreements, payments and important service changes. They may be delivered by email, in the portal or through channels you enable. Optional offers, promotions and service news follow your communication choices and any separately required consent. Accepting the Terms does not opt you into every future marketing channel.
Related future features may use information for the purposes above. Before using information for a new unrelated purpose, collecting additional sensitive information or making a disclosure or transfer requiring separate consent, we will explain it and obtain that consent where required. Payout information remains limited to payment administration.
3. Who we share it with
- Public PR page: only when you choose “Make public”, people with your link can view your creator introduction, TikTok profile statistics, public videos, audience information you choose to add and completed brand collaborations. You can make the page private again in your profile. Shipping, bank details and private rates never appear on the public page.
- Brands you work with: your TikTok handle, your content for the campaign, and the campaign status. When a brand or its designated logistics partner needs to ship your campaign product, we share only the recipient, contact and address details needed for that delivery. Your bank account details are not shared with brands.
- Airwallex (Singapore and Hong Kong): your payout data, to make bank transfers for paid campaigns.
- Shipping carriers: your address and phone number, to deliver products.
- Service providers that host the portal and our database (Vercel, Supabase), store draft videos for review (Google Drive), and send our emails. Google Maps receives your address search text when you use address search. They process data on our instructions.
Your data may be processed in the Republic of Korea, the United States, Singapore and Hong Kong.
4. How long we keep it
Campaign, agreement and payment records are kept for as long as the law requires for accounting and tax purposes (in Korea, generally 5 years). Sign-in and snapshot data is kept while you use the portal and deleted on request when no legal duty requires keeping it.
5. Your rights
You can ask to see, correct or delete your data, or withdraw consent, by writing to team@creator.playxlab.com. We answer within 30 days. Withdrawing consent does not affect campaigns already completed or payments already made.
6. Changes
When this notice changes materially, the version at the top changes and we ask for your consent again at your next sign-in.