Your craft. Your choices.
Event registration release · Notice version 2026-10-28
This notice describes the first CCF release: email verification and a private creator profile. Public portfolios, discovery, introductions, and AI features are not available in this release.
What we collect
We collect your email for account access; your display name, primary creative discipline, and city or district; your declaration that you are 18 or older; your terms/privacy acknowledgement; and your separate marketing preference. We record notice versions, timestamps, and whether registration came through the event link or directly.
Authorized staff can record whether you need help with email delivery or profile completion and whether that request is resolved. These support categories stay private and do not affect marketing consent.
We do not ask for your date of birth, phone number, home address, government identity documents, or banking information. Please do not include these in your profile fields.
Why we use it
We use this information to verify your account, save your private draft, provide essential account messages, support you, and understand whether the registration process works. Event attribution does not establish attendance or permission to send marketing.
Your profile is private
You and authorized CCF staff can access your draft. It is not a public creator listing. We do not provide the event venue, sponsors, or other creators with the registration database. Any future public profile or introduction will require a separate choice.
Optional updates
You can register with marketing unchecked. If you opt in, CCF may send community news and updates separately from essential account messages. You can withdraw that preference by contacting the team. Withdrawing marketing permission does not remove your account.
Providers and security
CCF uses Supabase for authentication and the database, Vercel for hosting, Resend for authentication-email delivery, and Cloudflare Turnstile for signup protection. These providers process information needed to deliver and protect their services. Authentication uses essential cookies. We do not add advertising trackers to the event release.
Google Drive is the selected storage provider for our encrypted database backups. Backup files are encrypted before upload to a private, operator-controlled folder. Recovery keys are kept separately and are not uploaded with the backups.
Database access is restricted by account and staff permissions. Essential provider security logs may include technical connection information. The application does not intentionally log verification codes, tokens, or the contents of your registration form.
Keeping, correcting, and deleting information
Unverified accounts are removed after seven days. Verified accounts without a creator profile are removed after 30 days, with seven days’ notice. Staff and designated operational test accounts are handled separately. We keep your private profile while you use your account. After 12 months without sign-in or profile activity, we review the account and may give you 30 days’ notice before removing it.
You can edit your profile after signing in. Contact the team to request access, an export, correction, deletion, or a marketing-preference change. We verify account ownership without asking for your password, verification code, or identity document. We aim to acknowledge requests within two business days and complete them within 30 calendar days, explaining any delay. Verified marketing withdrawals stop optional updates without removing your account.
On verified deletion, we remove your Auth account and associated profile, registration, consent, and support records. We retain only minimized operational audit evidence where needed. We explain any limited incident-related retention exception. Downloaded operational exports are deleted when their task ends and within seven days; support correspondence is deleted within 90 days after closure unless a documented unresolved incident requires longer.
Our operator-controlled encrypted backups, including copies held in Google Drive, expire within seven days. If a backup is restored, completed deletion requests are reapplied before access reopens. Provider security and delivery logs follow their own configured retention periods.
Future features
This release does not send your profile to an AI model. If CCF introduces AI assistance, public portfolios, or new data uses, we will explain the feature and its choices before you use it. Registration does not silently opt you into those features.
Contact the CCF team
Avalon Productions Private Limited operates Creators Connect Future. Contact creators@avalonproductions.in for account, privacy, accessibility, or support requests.