Data Processing

This page provides a summary of how CreatifyHQ processes personal data, as required by applicable data protection law. For full details, see our Privacy Policy and GDPR page.

Controller and Processor Roles

CreatifyHQ as Data Controller: When you create an account, we are the data controller for your personal information — we determine the purposes and means of processing.

CreatifyHQ as Data Processor: When you connect your social accounts and instruct us to publish content on your behalf, we act as a data processor operating under your instruction.

Sub-processors

We engage the following sub-processors who may process personal data on our behalf:

• Railway (US): Cloud infrastructure and database hosting
• Stripe (US): Payment processing
• SendGrid (US): Transactional email delivery
• OpenAI (US): AI content generation (GPT-4o)
• Anthropic (US): AI content generation (Claude)
• Zernio: Social media publishing API
• Google (US): Analytics (Google Analytics 4)
• Chatbase.co: AI-powered live chat support

All sub-processors are bound by Data Processing Agreements and appropriate safeguards for international transfers.

Security Measures

• TLS 1.3 encryption in transit
• AES-256 encryption at rest
• Role-based access control for internal systems
• Regular security reviews and employee training
• Incident response plan for data breaches (72-hour notification to supervisory authority where required)

User Rights

You may request access, rectification, erasure, restriction, portability, or object to processing at any time. See our Data Deletion page or contact hello@creatifyhq.com.

Contact

Data protection enquiries: hello@creatifyhq.com