Privacy Policy

1. Information We Collect

We collect information you provide directly to us when you create an account, such as your name, email address, phone number, and any other information you choose to provide.

If you connect Instagram, we collect the Instagram account information and permissions needed to provide the connected features you enable, such as your Instagram professional account ID, username, profile image, authorization status, comments, messages, media identifiers, and automation events.

2. How We Use Your Information

We use the information we collect to provide, maintain, and improve our services, communicate with you, and personalize your experience on the Platform.

Instagram data is used only to provide Instagram-connected features, including account connection, comment and message automation, automation setup, troubleshooting, security, abuse prevention, and compliance with Meta platform requirements.

3. Sharing of Information

We do not share your personal information with third parties except as described in this policy, such as to comply with legal obligations or to protect our rights.

We do not sell Instagram data. We share Instagram data only with service providers that help us operate Creatoc, when required by law, when necessary to protect users or Creatoc, or with Meta as required to operate the Instagram integration.

4. Data Security

We take reasonable measures to protect your personal information from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction.

Instagram access tokens are handled on the server side, encrypted before storage, and decrypted only when needed to provide the connected Instagram features you enable.

5. Cookies

We use cookies and similar technologies to track activity on the Platform and hold certain information to improve your user experience.

6. Your Rights

You have the right to access, update, or delete your personal information at any time through your account settings or by contacting us directly.

You can disconnect Instagram from Creatoc or revoke Creatoc's access from your Meta or Instagram account settings. You may also request deletion of your Creatoc account, workspace data, connected Instagram account data, and Meta-derived data by contacting us at [email protected]. We will delete or de-identify such data unless retention is required for legal, security, fraud-prevention, or compliance reasons.

7. Payments and Payout Data

If you set up withdrawals, Creatoc collects payout-related data including legal name, business type, contact details, address, PAN, bank account number, IFSC, beneficiary name, consent metadata, payout history and status, provider references, and verification results.

Sensitive financial identifiers are encrypted before storage. Masked versions, such as partial PAN or bank account endings, may be shown in the Creatoc interface so you can recognize saved payout details without exposing the full identifiers.

We may share payout data with Razorpay and future payment or payout providers for verification, compliance, fraud prevention, payout processing, provider reconciliation, and legal obligations. Payout records may be retained where required for tax, accounting, fraud prevention, dispute handling, provider reconciliation, or legal compliance, including after account deletion.

8. Instagram and Meta Platform Data

Creatoc uses Instagram and Meta APIs only for user-authorized functionality. We do not ask for your Instagram password. We do not use Instagram data for unrelated advertising, profiling, or resale. If you remove Creatoc from your Meta or Instagram settings, connected features may stop working and you can request deletion of related data using the contact details below.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at [email protected].