Privacy policy
Last updated: February 2026
The short version
Big Cave Studios is a discovery and verification platform for creators and brands looking for legit, high-quality collaborations. We collect only the data we need to verify creators, deliver briefs, and improve the marketplace. Because we don't handle payments or take commission on your deals, we don't collect financial or transaction data from your closed collaborations either. This policy explains exactly what we do collect, why, and what your rights are.
1.Who we are
“Big Cave Studios” (“BCS”, “we”, “us”) is the operator of bigcavestudios.com. We're the data controller for the personal information you submit while using the platform.
2.What we collect
Depending on how you use the platform, we may collect:
- Account basics — name, email, hashed password (or your Google profile info if you sign in with Google), mobile number.
- Creator profile — avatar, handle, bio, niches, location, starting fee, social channel links and follower counts you provide, portfolio links.
- Verification documents — ID or passport (required for creators), trade license (optional). Stored securely; only accessible to our review team.
- Interactions — briefs you send/receive, chat messages, reviews you leave.
- Technical data — device, browser, IP address, basic usage events (page views, feature use) collected via Google Analytics / Google Tag Manager for aggregate reporting.
- Subscription payments — if a creator buys a featured tier, PayPal handles the card details; we store only the resulting transaction receipt (amount, tier, timestamp, PayPal reference).
3.What we don't collect
Because BCS is not part of the payment flow between creators and their clients, we do not collect:
- Bank details, card numbers, or wallet addresses for your closed deals.
- Invoices or receipts from work you delivered to clients off-platform.
- Contract terms you agreed with your client via WhatsApp, email or any other channel.
4.How we use your data
- To verify creators are legitimate and to filter spam/fake accounts.
- To let brands discover creators and send them briefs.
- To notify you about briefs, chats, reviews and application status (in-app + email).
- To operate optional paid tiers (featured placement) and record their receipts.
- To improve the product — understand which features work, catch abuse, fix bugs.
- To comply with our legal obligations.
We do not sell your personal data. We do not use your data to train third-party AI models. Your ID documents are used only for verification and never shown publicly.
5.Who we share it with
- Other users — your public creator profile (name, handle, avatar, bio, niches, location, starting fee, follower counts) is visible to everyone. Clients only see your private contact info once you accept their brief.
- Sub-processors we rely on to run the platform:
- MongoDB Atlas — database hosting.
- Resend — transactional email delivery.
- PayPal — subscription payments for featured tiers.
- Emergent object storage — file uploads (avatars, portfolio thumbnails, ID docs).
- Google (Analytics, Tag Manager, Sign-In) — usage analytics and optional Google-based sign-in.
- Authorities — if legally required (court order, valid law enforcement request).
6.Cookies & analytics
We use a session cookie to keep you signed in and Google Tag Manager / Analytics to collect aggregated, anonymized usage stats (page views, funnels). You can disable these in your browser without losing access to your account.
7.Data retention
We keep your account data as long as your account exists. If you delete your account (Dashboard → Danger zone → Delete my account), we immediately purge your profile, briefs, chats, messages, reviews, favorites and notifications. We retain transactions and uploaded documents as required for financial audit and legal compliance, and anonymized analytics events that no longer identify you.
8.Your rights
You can, at any time:
- Access, correct or update the data on your profile via your dashboard.
- Request an export of your data by emailing us.
- Delete your account and personal data yourself from the dashboard.
- Withdraw consent to marketing emails (transactional emails will still be sent for account and brief notifications).
If you're in the EU/UK you can also lodge a complaint with your local data protection authority.
9.Security
Passwords are stored using bcrypt (never in plain text). Data is transmitted over HTTPS. Verification documents are stored in access-controlled object storage. Access to the raw data is restricted to authorized team members only.
10.Children
Big Cave Studios is intended for users 18 years and older. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us and we will remove it.
11.Changes to this policy
Material changes will be communicated in-app or by email. You can always see the “Last updated” date at the top of this page.
12.Contact
Data questions or requests? Email privacy@bigcavestudios.com.