Effective September 28, 2026
This Privacy Policy explains how Creator OS ("Creator OS", "we", "us") collects, uses, shares and protects information when you use the Creator OS iOS app, the web app at creatoros.ca, the Creator OS API, command line tool and MCP server, and our short links at go.creatoros.ca (together, the "Service").
Account information. Your email address, a securely hashed password if you sign up with email, or an identifier from Apple if you use Sign in with Apple. Your handle, display name, profile details and the answers you give during onboarding (such as your goals).
Connected social accounts.When you connect Instagram, TikTok, YouTube, Facebook, LinkedIn, X or Threads, you sign in on that network's own page. We never see your social media passwords. We receive and store the account's identifier, username, display name and profile picture, and the connection lets the Service publish and read data on your behalf.
Content you create. Posts, captions, images and videos you upload, schedules, drafts, comment-to-DM automations, trackable links, and your brand kit (logos, colors, fonts, voice notes and any reference photos you add for AI-generated covers).
Data from your social accounts. Post performance (views, likes, comments, shares), follower counts and growth, and the comments and direct messages on your connected accounts, including the names, usernames and messages of the people who interact with you. We store some of this to show your analytics, inbox and history, and to run the automations you turn on.
AI features.When you use features like AI replies, AI captions or Agent Posts, the relevant content (for example a comment, your instructions, a video's audio or transcript, or your reference photos) is sent to our AI providers to generate the result.
Purchases. Subscriptions are processed by Apple (in the iOS app), RevenueCat and Stripe. We receive your subscription status and plan, not your full card number.
API keys and connected apps. Creator OS API keys you create and apps you connect (for example Claude or ChatGPT through our MCP server), with when they were last used. Keys are stored in hashed and encrypted form.
Usage and device data. On the website we use product analytics (PostHog) to understand how pages and features are used, and our servers keep standard logs (such as IP address, browser and request details) for security and troubleshooting.
Advertising. Our website uses the Meta Pixel, which tells Meta (Facebook and Instagram) which of our pages you visit and when you sign up or subscribe, so we can measure our ads and show them to people who have visited our site. Meta may combine this with information it already has about you under its own privacy policy. You can limit this in your Facebook or Instagram ad settings, or by blocking third-party cookies in your browser.
Short link clicks.When someone opens a go.creatoros.ca link, we record the time, the source tag on the link, the referring website's domain, the device type and an approximate country. We do not store the visitor's IP address with the click.
We do not sell your personal information, and we do not use your content or your social data for advertising.
We share information only as needed to run the Service, with providers that process it on our behalf:
We also share information with the social networks themselves when you publish, reply or message through the Service, with apps you choose to connect (such as an AI assistant using your API key or MCP connection), and when required by law or to protect the rights and safety of our users and the Service. If Creator OS is involved in a merger or acquisition, information may transfer as part of that transaction under this policy.
Your use of each network through Creator OS is also subject to that network's terms and privacy policy. Creator OS uses YouTube API Services: by connecting YouTube you agree to the YouTube Terms of Service, and Google's handling of data is described in the Google Privacy Policy. You can revoke Creator OS's access to your Google account at any time at Google security settings. You can likewise remove Creator OS from the connected apps settings of Instagram, Facebook, TikTok, X, LinkedIn and Threads.
We keep your information while your account is active. You can disconnect a social account at any time, and you can delete your account in Settings in the iOS app or on the web. Deleting your account permanently removes your account and the data tied to it (posts we store, analytics history, inbox data, automations, links, API keys and connected apps) and removes your social connections from our publishing provider. Customer webhook delivery logs are kept for 30 days. Copies in routine backups and server logs are removed on our providers' normal cycles. To ask for deletion without signing in, email us.
We use encryption in transit, hash passwords and API keys, encrypt stored secrets, and limit each API key and connection to one workspace. No system is perfectly secure, so please keep your password and API keys private and tell us right away if you think one has been exposed.
Depending on where you live (for example under Canada's PIPEDA, the EU and UK GDPR, or California law), you may have the right to access, correct, delete or export your personal information, to withdraw consent, and to object to or restrict certain processing. You can update most information in the app, and you can contact us for anything else. We will not discriminate against you for exercising these rights.
We are based in Canada and our servers are in the United States. Our providers may process information in other countries. Where required, we rely on appropriate safeguards for these transfers.
The Service is not directed to children under 13 (or under 16 where local law sets a higher age), and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.
We may update this policy. If we make material changes we will let you know in the Service or by email, and the effective date above will change.
Questions or requests about privacy: bahrabadikevin@gmail.com.