CreaVestor (“we”, “our”, or “us”) is committed to protecting your privacy. This policy explains what information we collect, how we use it, and what rights you have.
1. Information We Collect
Account information you provide when you register: name, email address, and password.
Content you create using our platform, including ideas, scripts, and rewrite outputs. This content is yours.
Social account connections you authorise (YouTube, Facebook, Instagram) — we store access tokens and channel metadata only.
Usage data such as pages visited, features used, credits consumed, and timestamps. We use this to improve the product.
Payment information is processed exclusively by our payment provider (Stripe). We never store full card numbers on our servers.
Technical data including IP address, browser type, device identifiers, and cookies necessary for the service to function.
2. How We Use Your Information
To provide, operate, and improve the CreaVestor platform.
To process payments, manage your credit balance, and send receipts.
To send transactional emails such as password resets, email verification, and credit purchase confirmations.
To send product update emails, if you have opted in. You can unsubscribe at any time.
To detect and prevent fraud, abuse, and violations of our Terms of Service.
We do not sell your personal data to third parties.
3. Data Sharing
Service providers: We share data with trusted vendors who help us operate the platform, including Supabase (database and auth), Stripe (payments), Vercel (hosting), and OpenAI (AI generation). Each is bound by data processing agreements.
Social platforms: When you connect a social account, we share content you explicitly choose to publish via our platform.
Legal compliance: We may disclose data when required by law, court order, or to protect the rights and safety of CreaVestor and its users.
Business transfers: If CreaVestor is acquired or merges, your data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.
4. Data Retention
Account data is retained for as long as your account is active.
If you delete your account, we delete your personal data within 30 days, except where we are required to retain it for legal, tax, or fraud-prevention purposes.
Content you generated (ideas, scripts) is deleted with your account unless you have explicitly exported it.
Anonymised, aggregated usage data may be retained indefinitely for product analytics.
5. Your Rights
Access: You may request a copy of the personal data we hold about you.
Correction: You may update your account information directly in Settings, or contact us to correct inaccurate data.
Deletion: You may delete your account at any time from Settings → Account. We will process the request within 30 days.
Portability: You may request an export of your content in a machine-readable format.
Objection / Restriction: You may object to certain processing or request that we restrict processing in certain circumstances.
If you are in the EEA, UK, or California, you have additional rights under GDPR or CCPA. Please contact us to exercise them.
6. Cookies
We use strictly necessary cookies to keep you logged in and secure your session.
We use analytics cookies (Google Analytics, Microsoft Clarity) to understand how the platform is used. You can opt out via your browser settings.
We do not use advertising or tracking cookies for third-party ad targeting.
7. Security
All data is transmitted over HTTPS/TLS. Passwords are hashed using bcrypt and never stored in plaintext.
Access tokens for social accounts are encrypted at rest.
We conduct regular security reviews and promptly address vulnerabilities.
No system is perfectly secure. If you discover a vulnerability, please email security@creavestor.com.
8. Children
CreaVestor is not directed at children under 13. We do not knowingly collect personal data from children.
If you believe a child has provided us with personal data, contact us and we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be announced via email and an in-app notice at least 14 days before they take effect.
Continued use of the platform after changes take effect constitutes acceptance of the updated policy.
10. Contact
For privacy questions, data requests, or to exercise your rights, email privacy@creavestor.com.