Privacy Policy

Kreator Flow is a content repurposing service operated by Everything Kreative ([LEGAL_ENTITY]). This policy explains what information we collect, how we use it, how we store and protect it, and the choices you have — including how to revoke access and delete your data.

We collect only what we need to provide the service:

• Account information: your email address and authentication details when you sign up.
• Connected platform data (read access): when you connect a social account (e.g. YouTube, Instagram, Facebook, Threads), we access only the content and metadata needed to repurpose it — such as your own videos, captions, thumbnails, post timestamps, and your profile/channel identifier. We do not access private messages, contacts, or unrelated personal data.
• Content you upload or import: media files and captions you provide or that we retrieve on your behalf for repurposing.
• Usage and billing data: basic product usage and, for paid plans, billing information processed by our payment provider (Stripe). We do not store full card numbers.

• To retrieve your existing content from platforms you connect.
• To generate platform-optimized captions, hashtags, and formats, and to publish content to the platforms you choose.
• To operate, secure, support, and improve the service.
• To process payments and manage your subscription.

We do not sell your personal data or your platform data, and we do not use it for advertising.

Our use of data accessed through third-party platform APIs complies with each platform's developer terms and policies, including:

• Google/YouTube: Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use YouTube data solely to display and repurpose your own content at your direction.
• Meta (Instagram, Facebook, Threads): We use Meta Platform data only to provide the requested features and in accordance with the Meta Platform Terms and Developer Policies.
• Other platforms (TikTok, LinkedIn, Pinterest, X): We comply with each platform's API terms and use data only for the features you enable.

We access platform data only after you explicitly authorize it via the platform's official OAuth flow, and only for as long as your authorization remains active.

Data is stored in access-controlled databases and object storage operated by our infrastructure providers (Supabase and hosting on Vercel). Access tokens are stored server-side and never exposed to your browser. Each account's data is isolated; you can only access your own data. Transmission is encrypted in transit (HTTPS).

We share data only with service providers who help us run Kreator Flow, and only as needed: payment processing (Stripe), AI processing for transcription and caption generation (OpenAI), publishing to the platforms you select (via our publishing provider), and infrastructure (Supabase, Vercel). These providers are bound by their own terms and process data on our behalf.

We retain your content and connection data only while your account is active or as needed to provide the service. You can delete content at any time. When you disconnect a platform or close your account, we delete the associated access tokens and content within 30 days, except where we must retain limited records for legal or billing purposes.

You are always in control:

• Disconnect a platform at any time from your dashboard; we immediately stop accessing it and delete the stored tokens.
• Revoke from the platform side via your account settings on the platform (e.g. Google, Meta, TikTok).
• Delete your account and all data by following our Data Deletion instructions.

Depending on your location, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at [CONTACT_EMAIL].

Kreator Flow is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their data.

We may update this policy. Material changes will be posted here with an updated date. Continued use after changes means you accept the revised policy.

Questions or requests: [CONTACT_EMAIL]. This service is operated by [LEGAL_ENTITY] and governed by the laws of [JURISDICTION].