Privacy Policy

1. Introduction

Cre8tera ("we," "us," or "our") operates the platform located at platform.cre8tera.ai (the "Platform"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Platform.

By using the Platform, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, and authentication credentials.

2.2 Payment Information

If you subscribe to a paid plan, we collect billing information such as your payment method details. Payment processing is handled by our third-party payment processor, Stripe. We do not store your full credit card number on our servers.

2.3 Social Media Credentials

When you connect social media accounts (such as YouTube, TikTok, Pinterest, or other platforms) for content distribution, we collect and store OAuth tokens and related credentials necessary to publish content on your behalf. We only access the permissions you explicitly grant during the OAuth authorization flow.

2.4 User Content

We collect content you upload or create on the Platform, including images, videos, text, and workflow configurations.

2.5 Usage and Analytics Data

We automatically collect information about how you interact with the Platform, including pages visited, features used, browser type, device information, IP address, and referring URLs.

3. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the Platform
Process transactions and manage your subscription
Distribute your content to connected social media platforms on your behalf
Send you service-related communications (e.g., account verification, billing notices, and security alerts)
Analyze usage patterns to improve user experience and Platform performance
Detect, prevent, and address technical issues or fraud
Comply with legal obligations

4. Cookies and Tracking Technologies

We use the following cookies and tracking technologies:

Essential cookies: Required for authentication, session management, and core Platform functionality.
Google Analytics & Google Tag Manager: We use Google Analytics (gtag.js) and Google Tag Manager to understand how users interact with the Platform. These tools may collect information such as your IP address, browser type, and pages visited. For more information, see Google's Privacy Policy.
Meta Pixel: We use the Meta (Facebook) Pixel to measure the effectiveness of our advertising and understand user behavior. For more information, see Meta's Privacy Policy.
Maze: We use Maze for user experience research and product analytics. For more information, see Maze's Privacy Policy.

You can control cookies through your browser settings. Disabling essential cookies may affect Platform functionality.

5. How We Share Your Information

We may share your information in the following circumstances:

Social media platforms: When you use the Platform to distribute content, we share that content and necessary metadata with the social media platforms you have connected (e.g., YouTube, TikTok, Pinterest).
Analytics providers: We share usage data with Google Analytics, Meta, and Maze as described in Section 4.
Payment processor: We share billing information with Stripe to process payments.
Legal requirements: We may disclose your information if required to do so by law or in response to valid legal process.

We do not sell your personal information to third parties.

6. Use of Facebook/Instagram (Meta) Platform Data

Cre8tera allows users to connect their Facebook and/or Instagram accounts in order to enable content publishing and automation features.

When a user connects their account, we access certain Platform Data provided by Meta solely to perform actions on behalf of the user. This may include basic account information and permissions required to publish content, schedule posts, and manage content workflows.

Cre8tera uses this data exclusively to provide the functionality requested by the user. We do not sell, rent, or share Meta Platform Data with third parties, and we do not use this data for purposes unrelated to the services provided within the platform.

Access to Meta Platform Data is granted through secure authentication (OAuth), and users may revoke access at any time through their Facebook, Instagram, Meta Ads and Threads account settings.

If a user chooses to disconnect their account, Cre8tera will no longer have access to their Meta Platform Data.

Users may request deletion of their data at any time by following the instructions provided here:

https://platform.cre8tera.ai/data-deletion

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete or anonymize your personal information within a reasonable period, except where we are required to retain it for legal or legitimate business purposes.

9. Your Rights

Depending on your location, you may have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your personal information
Object to or restrict processing of your information
Request portability of your data
Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us at [email protected].

10. California Privacy Rights (CCPA)

If you are a California resident, you have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, request deletion of your personal information, and opt out of the sale of your personal information. As stated above, we do not sell personal information.

11. Children's Privacy

The Platform is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Platform after any changes constitutes acceptance of the updated policy.