Privacy Policy

What we collect

• Your application: name, email, city, links you choose to share (Instagram, LinkedIn, website), what you create, and what you're hoping to find at CBC.
• Your account: login credentials (your password is stored securely by our auth provider — we never see it).
• Activity on the site: which events you RSVP to, your directory listing (only if you choose to be listed), any opportunities you post, your profile picture (if you upload one), and your email notification preferences.
• Photos & video taken at CBC events, where you've given consent.

Why we use it, and our legal basis

• To run your membership, your account and event RSVPs — on the basis of our agreement with you as a member.
• To review applications and keep the community relevant and safe — our legitimate interest in running a curated community.
• To send you the newsletter and the event/opportunity emails you opt into — on the basis of your consent, which you can withdraw at any time.
• To show you in the member directory and display opportunities you post — only when you choose to.
• To use photos and video from events — on the basis of the consent you give.

Who we share it with

We don't sell your data. We use a small set of trusted service providers ("processors") to run CBC:

• Framer — hosts this website.
• Supabase — stores your account, profile, RSVPs, directory and opportunity data, and your profile picture.
• Resend — sends our emails (welcome, notifications).
• Cloudflare — runs the small server functions behind the site.
• Anthropic — powers the directory's AI search; it processes your search text and the public directory listings to rank results.
• Substack — delivers the newsletter.
• Google Drive — where we store and share event photos.

Some of these providers may process data outside the EEA. Where they do, that transfer is covered by appropriate safeguards such as the EU Standard Contractual Clauses.

Photos & video

If you've consented, we may use photos and video taken at CBC events on CBC's own channels and on the channels of our partners (for example a venue or collaborator). You can withdraw this consent at any time by emailing us, and we'll stop using new material and remove existing material where we reasonably can.

How long we keep it

We keep your data for as long as you're a member, and for a reasonable period afterwards. If you ask us to delete your account, we'll remove your personal data except anything we're required to keep.

Your rights

Under the GDPR you have the right to access your data, correct it, delete it, restrict or object to how we use it, receive a copy (portability), and withdraw consent at any time. To exercise any of these, email hello@creatorbrunchclub.com and we'll respond promptly.

If you're unhappy with how we've handled your data, you can complain to the Norwegian Data Protection Authority (Datatilsynet).

Cookies & storage

We keep your login session in your browser's local storage so you stay signed in. We don't currently use advertising or third-party tracking cookies. If that changes, we'll update this policy and ask for consent where required.

Changes

We may update this policy from time to time. We'll change the "last updated" date above, and for significant changes we'll let members know.