Privacy Policy

Information You Provide to Us

• Account Information: When you register for an account, we collect your name, email address, password, and any other information you choose to provide
• Payment Information: When you subscribe to a paid plan, we collect payment information. This is processed directly by our third-party payment processor (e.g., Stripe), and we do not store your full credit card details
• User Content: We collect the content you create, upload, or manage through our Service. This includes photos, videos, post drafts, captions, hashtags, and any other materials you provide
• Communications: When you contact us for support or other inquiries, we collect the contents of your communications

Information from Third‑Party Platforms (Meta/Instagram & Google/YouTube)

When you connect your social media or video‑sharing accounts (like Instagram or YouTube) to the Service, you grant us permission to access data from those platforms via their APIs. This information may include:

• Profile or Channel Information: Your public profile or channel data, username, channel ID, and profile picture
• Platform Content: Your published posts, stories, videos, and associated media
• Direct Messages, Comments & Replies: We access and store your DMs and comments so you can view, manage, and respond to them through our Service
• Insights and Analytics: We access analytics data (e.g., post views, video views, reach, watch time, follower or subscriber demographics) to provide you with performance insights

We only access the data that you explicitly authorize us to access when you connect your account. We handle all data from Third‑Party Platforms in strict accordance with their API terms and developer policies, including Google’s API Services User Data Policy. You can revoke our access to your Google/YouTube account at any time via your Google security settings (https://security.google.com/settings/security/permissions). By connecting your YouTube account you agree to the YouTube Terms of Service and Google’s Privacy Policy.

Information We Collect Automatically (Usage Data)

• Log Data: Our servers automatically record information when you use the Service, including your IP address, browser type, operating system, and pages visited
• Cookies: We use cookies and similar technologies to operate the Service, remember your preferences, and analyze usage
• Device Information: We may collect information about the device you are using, such as its model and operating system

To Provide and Maintain the Service

This is our primary purpose. We use your data to:

• Authenticate you and secure your account
• Connect to your social or video‑sharing accounts
• Publish your scheduled content or videos
• Display your DMs, comments, and video comments for you to manage
• Provide you with analytics and insights

To Power AI Features

We use your User Content (like past posts, videos, and DMs/comments) to provide you with AI-assisted features, such as:

• Generating caption and hashtag suggestions
• Drafting suggested replies to your DMs, comments, or video comments

To Improve Our Service (AI Training)

We may use your User Content and Usage Data in an anonymized and aggregated form to train our AI models and improve our Service’s features and accuracy. We will never use your specific, non‑public User Content to train general AI models that are shared with other customers without your explicit consent.

Additional Uses

• To Communicate With You: To send you service‑related updates, security alerts, and billing information
• For Marketing: To send you promotional materials about Creava (with your consent, where required). You can opt-out of marketing communications at any time
• For Safety and Legal Compliance: To enforce our Terms of Service, protect against fraud, and comply with legal obligations

With Third‑Party Platforms (Meta/Instagram, Google/YouTube)

We share your User Content (e.g., posts, stories, videos, comments) back to the Third‑Party Platforms you have connected, as directed by you when you use the Service to publish or reply. For example, when you schedule a video upload through Creava, we send that video to YouTube on your behalf.

With Service Providers (Sub‑processors)

We use third-party vendors to help us operate our Service, such as cloud hosting (e.g., AWS, Google Cloud), payment processing (e.g., Stripe), and analytics. These providers are contractually bound to protect your data and only use it for the specific services we request.

For Legal Reasons

We may disclose your information if we believe it’s required by law, subpoena, or other legal process, or to protect the rights, property, or safety of Creava, our users, or the public.

In a Business Transfer

If Creava is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in control.

Security

We implement industry‑standard technical and organizational security measures to protect your information from unauthorized access, use, or disclosure. This includes encryption of data in transit and at rest.

Data Storage

Your information is primarily stored and processed in the United States.

Retention of Platform Data

We store data from Third‑Party Platforms (like DMs, comments, and analytics) only as long as it is necessary to provide the Service to you and as permitted by the platform’s terms. When you disconnect an account or terminate your Service, we follow a process to delete this data from our systems.

General Retention

We retain your Account Information and User Content as long as your account is active, or as needed to comply with our legal obligations. You may request deletion of your account and data at any time.

General Rights

• Account Settings: You can review and update your account information directly within your account settings.
• Disconnecting Accounts: You can disconnect any Third‑Party Platform account at any time.
• Marketing Opt‑Out: You can opt‑out of our marketing emails by clicking the "unsubscribe" link.

Rights for EEA/UK Residents (GDPR)

If you are in the European Economic Area (EEA) or the UK, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request that we correct any inaccurate data
• Erasure (Right to be Forgotten): Request that we delete your personal data
• Restrict Processing: Request that we limit how we use your data
• Data Portability: Request that we provide your data in a portable, machine‑readable format
• Object: Object to our processing of your data (e.g., for direct marketing)

Our legal basis for processing your data is primarily to perform our contract with you (to provide the Service) and, for other activities, our legitimate interests (e.g., improving the Service), or your consent.

Rights for California Residents (CCPA)

If you are a California resident, you have the right to:

• Know: Request to know what personal information we collect, use, disclose, and sell (though we do not sell data)
• Delete: Request the deletion of your personal information
• Non‑Discrimination: We will not discriminate against you for exercising your CCPA rights

How to Exercise Your Rights

To exercise any of these rights, please contact us at privacy@creava.com. We will verify your identity before processing your request.