Privacy Policy

We collect only the information needed to operate the Service:

• Account information. When you sign up we collect your email address, and — if you sign in with Google — your name and profile picture. We do not store passwords; authentication uses one-time email sign-in links or Google OAuth.
• Connected social accounts. When you connect a platform, we receive and store access and refresh tokens issued by that platform, along with the account’s public profile details (such as username, display name, account ID, and avatar) needed to publish on your behalf and display the account in your workspace. Tokens are stored encrypted and are used only to perform actions you initiate.
• Content you create. Posts, captions, comments, media files (images and video) you upload, scheduling times, and related metadata.
• Analytics from connected platforms. When you publish through us, we retrieve engagement metrics (such as views, likes, comments, and shares) for those posts so we can show you performance in your dashboard.
• AI prompts and context. Text, briefs, and brand context you submit to our AI writing features are processed to generate content for you.
• Billing information. Subscription and payment processing is handled by our payment provider. We receive a transaction reference and your subscription status — we never receive or store your full card details.
• Usage and device data. Basic technical data (browser type, pages visited, interactions, and approximate region) collected to operate, secure, and improve the Service, including via a product-analytics tool.

When you authorize a platform, you grant Kreatormesh permission — through that platform’s official API and OAuth consent screen — to act on your behalf. The scope is limited to what is required to publish and manage the content you ask us to. Connected platforms include:

• TikTok. We access your basic profile information (such as display name, avatar, and account identifier) and use the Content Posting API to upload and publish the videos and posts you create or schedule in Kreatormesh. We request only the permission scopes necessary for these actions, and we use TikTok user data solely to provide the features you initiate. Our access to and use of TikTok information complies with the TikTok Developer Terms and the TikTok Community Guidelines. We do not use TikTok data for advertising or sell it to any third party.
• Meta (Facebook, Instagram, Threads). Profile and page/account details and the permissions needed to publish posts and retrieve insights for content you schedule.
• YouTube / Google Business Profile. Channel/profile details and the permissions needed to publish and manage the content you create. Kreatormesh’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• X (Twitter), LinkedIn, Pinterest, Bluesky. Profile details and the permissions needed to publish and manage content and retrieve basic post metrics.

We only access this data while your account is connected. Disconnecting a platform in Kreatormesh immediately stops further access and deletes the stored tokens for that platform.

We use the information described above to:

• Authenticate you and operate your account and workspaces.
• Publish, schedule, and manage the content you create on the platforms you connect.
• Retrieve and display analytics for content you publish through the Service.
• Generate content with our AI features when you request it.
• Process subscriptions and prevent fraud and abuse.
• Provide support, secure the Service, and improve its features and reliability.
• Send you transactional messages (such as sign-in links and account notices).

We do not sell your personal information, and we do not use the content or platform data we access to train third-party advertising profiles.

We share information only with service providers (“subprocessors”) that help us run the Service, and only as needed to provide it:

• The social platforms you connect — to publish and manage your content.
• Cloud hosting and media storage — to host the application and store the media you upload.
• An AI model provider — to generate content from the prompts you submit.
• A payment processor — to handle subscriptions securely.
• An email provider — to deliver sign-in links and account emails.
• A product-analytics provider — to understand and improve usage.

We may also disclose information if required by law, to enforce our terms, or to protect the rights and safety of our users and the public. If Kreatormesh is involved in a merger or acquisition, we will notify you before your information becomes subject to a different privacy policy.

We keep your information only as long as your account is active or as needed to provide the Service. OAuth tokens are deleted when you disconnect a platform. Content and analytics are retained until you delete them or close your account. We may retain limited records (such as billing history) where required for legal, accounting, or fraud-prevention purposes.

You are in control of your data at all times:

• Disconnect a platform at any time from the Connections page; this revokes our access and deletes the stored tokens for that platform.
• Access, correct, or export your personal data by contacting us.
• Delete your account and associated data by emailing [email protected]. We will permanently delete your personal data, content, and connected-account tokens within 30 days, except where retention is legally required.
• You may also revoke Kreatormesh’s access directly from each platform’s own app settings (for example, TikTok → Settings → Security & permissions → Manage app permissions).

Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA, including the right to object to or restrict certain processing. We honor these requests.

We protect your information using industry-standard measures: encryption in transit (HTTPS), encryption of stored access tokens, access controls, and reputable infrastructure providers. No method of transmission or storage is perfectly secure, but we work to protect your data and to notify you of any material breach as required by law.

The Service is not directed to children under 16 (or the minimum age required by your jurisdiction or a connected platform, whichever is higher). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

Kreatormesh is operated from, and processes data on infrastructure located in, various regions. By using the Service you consent to the transfer and processing of your information in countries that may have different data-protection laws than your own.

We may update this Privacy Policy from time to time. When we make material changes we will update the “Last updated” date above and, where appropriate, notify you in the Service. Your continued use after changes take effect constitutes acceptance.

For privacy questions, data requests, or account deletion, contact our privacy team at [email protected]. For general support, reach us at [email protected].