# Creator Payout, Identity, and Tax Notice — Draft

**Version:** `draft-2026-10-13-v1` · **Controller:** `[LEGAL ENTITY NAME]`

## Why information may be requested

Identity and payout data may be requested only when needed to verify a creator, prevent fraud, meet a legal/payment-provider requirement, prepare tax reporting, or pay earnings. The exact fields depend on country, payout rail, and provider. We will not require every creator to submit the same national document. Where lawful and feasible, we will offer an alternative verification method.

## Sensitive data

Government ID images, tax numbers, bank account and routing details, beneficiary name, and verification decisions are restricted personal data. Submit them only in the authenticated secure portal. Do not send them by email, comments, or support chat. Access is limited to authorized verification/finance staff and logged. They are not public creator profile fields and are not shown to advertisers.

## Storage, access, retention, and deletion

Documents must be encrypted in transit and at rest with managed key controls, kept in private storage, malware-scanned, and retained only for an approved period or legal hold. The final table must list each document type, purpose, country rule, access role, retention trigger/period, and deletion process. The current engineering foundation records encrypted documents and payout destinations, but production retention, malware scanning, provider verification, and deletion are not complete. Do not claim that a payout provider has validated a bank account unless it has.

## Payouts and taxes

The portal will show threshold, currency, fees, tax withholding, status, and expected processing window before a payout request. Payout requests may be held while verification, fraud, or settlement checks are pending. Manual processing is not completed until authorized staff record supporting payment confirmation. Tax reporting and withholding differ by country; consult a qualified adviser and provide required forms through the approved channel.

Questions or access/correction/deletion requests: **[privacy contact]**. Payout support: **[finance contact]**. Keep only the masked account suffix in normal UI; full account data should require a separate, audited authorization.