CreatorFlow

Privacy Policy

Last updated: July 17, 2026

What We Collect

CreatorFlow stores account information you provide, connected social profile details, scheduled posts, uploaded media, publishing status, and comments or engagement data returned by connected social platforms.

How We Use Data

We use this data to authenticate users, manage team access, connect social accounts, publish posts, display profile dashboards, and sync comments or publishing results.

Social Platform Data

When you connect Facebook or Instagram, CreatorFlow uses Meta APIs only for the permissions you grant, such as listing pages, publishing content, and reading engagement or comments for connected profiles.

When you connect YouTube, CreatorFlow uses Google APIs only for the scopes you approve, such as viewing your YouTube channel/account information and uploading or managing videos that you choose to publish through CreatorFlow. CreatorFlow does not use Google user data for advertising, profiling, or unrelated purposes.

Data Protection Mechanisms

CreatorFlow protects sensitive data, including OAuth access tokens, refresh tokens, connected account identifiers, uploaded media, and publishing records, using server-side access controls and secure transport. The application is served over HTTPS, and OAuth secrets are stored only in server-side configuration, not in browser code.

Access to CreatorFlow user data is limited to authorized users and administrators who need it to operate the publishing workspace. We use authenticated sessions, role-based access inside the dashboard, audit records for administrative activity, and internal operational controls to reduce unauthorized access. We do not intentionally log OAuth tokens, passwords, or email OTP codes.

Connected platform tokens are used only to complete user-requested actions, such as publishing content, listing connected channels, or syncing publishing results and engagement metrics. If a user disconnects an account, revokes access from the platform provider, or requests deletion, CreatorFlow stops using the affected authorization and removes or disables the related connection data where reasonably possible.

Google API Data Use

CreatorFlow's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not sold, shared with advertisers, used for creditworthiness, or used to train generalized AI or machine learning models.

Data Sharing

We do not sell personal data. Data is shared with connected social platforms only when required to publish content, fetch profile data, or sync comments for your connected accounts.

Data Retention

We retain account, content, and connection data while your CreatorFlow account is active. You may request deletion using our data deletion page.

Users can remove connected accounts from CreatorFlow or revoke CreatorFlow's access from the relevant platform account settings, including Google Account permissions. Deletion requests are reviewed and processed for account data, connected account records, uploaded media references, and publishing history associated with the requesting user, subject to legal, security, and operational retention needs.

Contact

For privacy questions, contact: harshith.gorantla@visaka.in