Privacy Policy

At 2513671 Alberta Ltd, doing business as CreatifyHQ ("we," "us," or "our"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website (creatifyhq.com) and application services. By using CreatifyHQ, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

We collect information you voluntarily provide when you:

• Create an account (name, email address, password)
• Complete your profile (company name, bio, website URL)
• Connect social media accounts via OAuth
• Subscribe to a paid plan (billing details processed by Stripe — we never store card numbers)
• Contact our support team

1.2 Information Collected Automatically

When you use CreatifyHQ, we automatically collect:

• Usage data (features accessed, content generated, posts published)
• Device and browser information
• IP address and approximate location
• Log data (errors, timestamps, API calls)
• Cookies and similar tracking technologies (see Section 7)

1.3 Third-Party Data

When you connect a social account, we receive data from that platform in accordance with its privacy policy and the permissions you grant — typically your profile information, account or page identifiers, follower count, an access token, and permission to publish on your behalf. To power the Engagement Inbox, we also retrieve public comments, replies, and mentions on your own content (including the commenter's public username or handle and the comment text) so that you can read and respond to them from within CreatifyHQ.

We integrate with the following third-party platforms. The specific data we receive depends on each platform's API and the permissions you approve:

• Meta — Facebook Pages, Instagram, and Threads (publishing, post insights, and comment/reply management)
• X (Twitter), LinkedIn, YouTube, Pinterest, TikTok, and Snapchat
• Reddit, Mastodon, Bluesky, Tumblr, Medium, and Google Business Profile

We use data received from each platform only to provide the features you request — publishing, scheduling, analytics, and engagement management — and never to build advertising profiles or to sell your data. You may disconnect any platform at any time from your Connections page, which revokes the access token we hold for that account.

1.4 Uploaded Past-Posts Data

When you upload past social media posts to train your AI voice profile, we extract style markers (sentence length, vocabulary, tone) and store them in your account. The original post text is processed in-memory and not retained.

2. How We Use Your Information

• Service delivery: To operate CreatifyHQ, generate content, and publish to connected platforms
• Account management: To maintain your account, process payments, and send transaction emails
• Product improvement: To understand how features are used and fix issues
• Communications: Product updates, security alerts, and (with consent) marketing emails
• Legal compliance: To comply with applicable laws and protect our legal rights

3. Data Sharing and Disclosure

We do not sell your personal information. We may share your data only in these circumstances:

• Service providers (sub-processors): Railway, Inc. (cloud hosting and databases), Cloudflare, Inc. (R2 media storage), OpenAI, L.L.C. and Anthropic, PBC (AI generation — your data is processed under their API terms and is not used to train their models), Stripe, Inc. (payments), Zernio (social publishing), and our email-delivery providers (e.g. SendGrid, Brevo, Resend). Each processes data on our behalf under a data processing agreement.
• Social platforms: Content you choose to publish is shared with the relevant platform via their API
• Legal requirements: If required by law, court order, or to protect our rights
• Business transfer: In the event of a merger or acquisition, with advance notice to you

4. Data Security

We implement industry-standard security measures including:

• TLS 1.3 encryption for all data in transit
• AES-256 encryption for data at rest
• Regular security audits and penetration testing
• Strict access controls and employee training

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where retention is required by law. We retain session/login data typically for 30 days for inactivity. Billing records may be retained for up to 7 years for accounting purposes. We use Sentry as a sub-processor and Sentry processes error stack traces which may incidentally include user data.

6. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a machine-readable format
• Restriction: Request we limit processing of your data
• Objection: Object to processing based on legitimate interests
• Withdraw consent: At any time, where processing is based on consent

To exercise your rights, visit our data deletion page or email hello@creatifyhq.com.

7. Cookies

We use cookies and similar technologies. See our Cookie Policy for full details. You can manage cookie preferences in your browser settings.

8. Changes to This Policy

We may update this policy periodically. We will notify you of material changes via email or an in-app notification. Continued use of CreatifyHQ after changes constitutes acceptance of the updated policy.

9. Contact Us

For privacy questions or to exercise your rights:

• Email: hello@creatifyhq.com
• Website: creatifyhq.com/contact