Privacy Policy

Last updated: 4 July 2026

1. Who We Are

CreatorPulse (“we”, “our”) operates the creatorpulse.io platform. This policy explains what data we collect, how we use it, and your rights.

2. Data We Collect

Account data: name, email address, and profile picture from your OAuth provider (Google, Instagram, TikTok).
Platform connection data: OAuth access tokens and refresh tokens, channel/account IDs, follower counts, and display names from connected social platforms.
YouTube data: when you connect a YouTube account, we access your public channel information (channel ID, display name, subscriber count) and public comment threads on your videos, using the youtube.force-ssl scope via the YouTube Data API v3. We read comment data only — we do not post, edit, or delete any content on your behalf.
Instagram / Facebook data: when you connect an Instagram or Facebook account, we access your public post metadata and public comments on your posts to perform analysis. We do not post, edit, or delete any content on your behalf.
Comment data: public comments from your connected social accounts, including author handles, comment text, and engagement metrics (likes/reactions).
Content suggestions: AI-generated video title and content ideas derived from comment analysis. These are stored in your account and never shared with other users.
Usage data: page views, feature usage, and error logs. Logs do not contain personally identifiable information.
Billing data: payment processing is handled entirely by Stripe or Razorpay. We do not store card details.

3. Google API Services — Limited Use Disclosure

CreatorPulse’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

We use the youtube.force-ssl scope solely to read your YouTube channel information and the public comment threads on your videos for the purpose of sentiment analysis and content planning. We do not post, edit, modify, or delete any YouTube content on your behalf.
We do not use Google user data to serve advertisements or for any advertising or marketing purposes.
We do not allow humans to read your Google user data unless you have given explicit permission, it is necessary for security purposes, or it is required by law.
We do not transfer or sell Google user data to third parties except as strictly necessary to provide the Service (e.g., sending anonymised comment text to Anthropic’s API for AI analysis) or as required by law.
We do not use Google user data to develop, improve, or train AI or machine learning models. Comment data sent to Anthropic’s API is processed under Anthropic’s API terms, which prohibit using API inputs and outputs to train their models.
We do not sell Google user data.
We do not use Google user data for any purpose other than providing the user-facing features described in this policy.

Limited Use Compliance Statement: The use of information received from Google APIs by CreatorPulse will adhere to the Google API Services User Data Policy, including the Limited Use requirements. YouTube comment data is used solely to generate content insights for the authenticated user and is not used to train AI or machine learning models.

Our use of YouTube data is also subject to the YouTube Terms of Service and Google Privacy Policy. You can revoke CreatorPulse’s access to your Google account at any time by visiting myaccount.google.com/permissions.

4. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), UK, or Switzerland, we process your personal data under the following legal bases:

Data / Purpose	Legal Basis
Account data, OAuth tokens, platform connections	Contract (Art. 6(1)(b) GDPR) — necessary to provide the service you signed up for
Comment analysis and content suggestions	Contract — this is the core service
Transactional emails (billing, alerts)	Contract — necessary to administer your account
Error logs and usage analytics	Legitimate interest (Art. 6(1)(f)) — to maintain and improve service reliability

We do not process any data based on consent, and we do not process special category data.

5. How We Use Your Data

To provide and improve the Service (comment analysis, sentiment visualisation, content suggestions, trend alerts).
To detect your content niche and tailor AI-generated suggestions to your category.
To send transactional emails (trend alerts, billing receipts) via Resend.
To manage your subscription and billing via Stripe / Razorpay.
We do not sell your data or your audience’s data to any third party.
We do not use your data for advertising profiling.
We do not use your data to train AI models.

6. AI Processing

Comment text is sent to Anthropic’s API for sentiment analysis and content suggestion generation. We do not include personally identifiable author information (such as author handles or IDs) in the data sent to Anthropic. Anthropic’s Privacy Policy governs how they handle this data.

7. Data Retention

We retain your data for as long as your account is active. Specifically:

OAuth tokens (Google, Instagram, TikTok): retained until you disconnect the platform or delete your account. You may also revoke access directly in your Google Account settings.
Comment data: retained until you delete your account or explicitly request deletion.
Content suggestions: retained until regenerated or your account is deleted.

You may request deletion of your account and all associated data by emailing us at hello@creatorpulse.io. We will process deletion requests within 30 days.

8. Revoking Access

You can disconnect any platform at any time from the Platforms page inside your dashboard. This immediately deactivates our access tokens for that platform.

To revoke CreatorPulse’s access to your Google account independently of our platform, visit myaccount.google.com/permissions and remove CreatorPulse from the list of connected apps.

9. Data Security

All data is stored in Supabase with row-level security (RLS) policies ensuring users can only access their own data. OAuth tokens are stored server-side and never exposed to the browser. All connections use TLS/HTTPS.

10. Third-Party Services

Google / YouTube Data API v3 — social data access
Meta (Instagram Graph API) — social data access
Supabase — database hosting (Mumbai, India region). Data transfers from the EEA are covered by Standard Contractual Clauses.
Vercel — application hosting
Anthropic — AI comment analysis (no PII shared)
Resend — transactional email
Stripe — payment processing (international)
Razorpay — payment processing (India)

11. Your Rights

Depending on your jurisdiction (including GDPR, CCPA, and similar), you may have the right to:

Access the personal data we hold about you.
Correct inaccurate personal data.
Export your data in a machine-readable format.
Delete your account and all associated data — you can do this instantly from Account Settings or by emailing us.
Withdraw consent for any processing based on consent.

12. Cookies

We use a single session cookie for authentication. We do not use tracking cookies or advertising cookies. See our Cookie Policy for details.

13. Children’s Privacy

CreatorPulse is not directed at children under 13. We do not knowingly collect data from children under 13.

14. Changes to This Policy

We will notify users of material changes to this policy by email or in-app notice at least 14 days before the change takes effect.

Contact

Privacy questions: hello@creatorpulse.io