How CreatOS handles your data

This Privacy Policy explains how CreatOS collects, uses, stores, and shares information when you use the CreatOS website, workspace tools, AI content generation features, and social publishing workflows.

By using CreatOS, you agree to the practices described in this policy. If you do not agree, do not use the service.

Account information. When you create an account, accept an invite, or sign in, we collect information such as your name, email address, authentication identifiers, and workspace membership details.

Workspace and campaign data. We collect the information you add to your workspace, including brand details, campaign briefs, AI agent configurations, content drafts, generated assets, publishing targets, and team collaboration activity.

Connected platform data. If you connect third-party social accounts, we collect the account identifiers, access credentials or tokens needed to maintain the connection, and the content and metadata required to publish posts or retrieve performance metrics.

Usage and device data. We may collect technical information such as IP address, browser type, device information, referring pages, timestamps, and interactions with the product to operate, secure, and improve the service.

Cookies and session data. We use cookies or similar technologies to keep you signed in, maintain sessions, remember preferences, and support security and product functionality.

We use information to provide and operate CreatOS, including account authentication, workspace setup, team collaboration, campaign management, content generation, social publishing, and analytics reporting.

We use information to secure the product, prevent abuse, detect errors, troubleshoot issues, enforce our terms, and comply with legal obligations.

We use information to improve the service, including product development, feature evaluation, system performance monitoring, and internal reporting.

If you use CreatOS to configure AI marketing agents and generate captions, scripts, images, media plans, or strategy briefs, the prompts and structured inputs you provide may be processed by third-party AI providers that support our generation features.

Generated outputs may be inaccurate, incomplete, or unsuitable for your use case. You are responsible for reviewing content before publication and for ensuring you have the rights and permissions needed for your inputs and outputs.

When you connect a social platform account, CreatOS may store the credentials, identifiers, and account metadata needed to publish content on your behalf and to retrieve performance metrics such as impressions, reach, engagement, clicks, and post status.

Your use of connected platforms is also governed by the privacy policies and terms of those platforms. CreatOS is not responsible for how those third parties use information once it is shared with them through an authorized integration.

We share information with service providers that help us operate CreatOS, such as hosting, authentication, database, storage, email delivery, AI model, and social platform integration providers.

We may share information within your workspace with other authorized members based on their role and access level.

We may disclose information if required by law, to respond to valid legal process, to protect the rights or safety of CreatOS or others, or in connection with a merger, financing, acquisition, or sale of assets.

We do not sell your personal information for money.

We retain information for as long as needed to provide the service, maintain legitimate business records, resolve disputes, enforce agreements, and comply with legal obligations.

Retention periods may vary depending on the type of information, whether your workspace remains active, and whether certain records are required for security, financial, or compliance reasons.

We use reasonable administrative, technical, and organizational measures to protect information. No system is completely secure, and we cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your account credentials and for limiting access to authorized team members only.

You may update certain account and workspace information through the product. You may also disconnect social integrations, remove team members, or delete content from your workspace, subject to system and legal retention requirements.

Depending on your location, you may have rights to access, correct, delete, or restrict the use of your personal information. To exercise applicable rights, contact us using the information below.

CreatOS is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us so we can review and delete it where appropriate.

CreatOS and its service providers may process and store information in countries other than the one where you live. Those countries may have different data protection laws.

We may update this Privacy Policy from time to time. If we make material changes, we may provide notice through the product or by other reasonable means. The updated version will become effective when posted.

For privacy questions or requests, contact CreatOS at privacy@creatos.us.