Version crm-2026-10 · Draft for review by US, EU and Swiss counsel before launch

Creator data terms

When you connect a CRM, a webhook or the API, Avatique sends you a limited profile of the fans who interact with you. You become responsible for that data. These terms say what you receive and what you may do with it.

1. What you receive

  • For each fan with activity on your pages: an ID made only for you (different for every creator), their display name, level, total spent with you, purchases, subscriptions and plan, your own tags and lists, and who on your team owns the conversation. Purchases and refunds as they happen.
  • Through the API, and only with keys you allow, the text of your conversations, so your own tools can help you answer.
  • Never: email addresses, legal names, location, payment details, identity documents, or the photos and videos in messages.

2. How you may use it

  • Only to run your relationship with your fans on Avatique: answering, organising your team, understanding what sells.
  • You may not try to find out who a fan is, contact fans outside Avatique, combine the data with other sources to identify them, sell or share it, or use it to train AI models other than an assistant that serves your own Avatique fans.
  • You choose tools that allow your kind of business and that protect data properly, and you keep access limited to the people who work for you.

3. Your responsibilities

  • For the data you receive, you are an independent controller under data-protection law (GDPR, the Swiss FADP, US state privacy laws). Your CRM provider processes it for you.
  • When a fan opts out or closes their account we delete their record from the tools you connected through Avatique. If you copied data elsewhere, you delete it there within 30 days. You answer fans' access and deletion requests about data you hold.
  • If data you received leaks, tell us at [email protected] within 72 hours.

4. Our part

  • We send only the fields above, over encrypted connections, and keep your tokens encrypted. We log every connection and API key you create.
  • We may pause a connection or revoke a key that breaks these terms, and suspend accounts that misuse fan data.