Privacy Policy
Last updated 3 July 2026
CreatorsPA is a personal tool that helps content creators manage their YouTube channel, email, ideas, content and calendar. This policy explains, in plain language, what data we store, why, where it lives, and how you can have it deleted. Privacy contact: info@creatorspa.io.
Google sign-in (YouTube + Gmail)
When you connect your Google account, we request only what the app actually uses:
- YouTube (
youtube.force-ssl): read comments on your videos and write replies that you approve; fetch public trend data; and — when you schedule a post in the calendar — upload your video (as private with a scheduled publish time so YouTube publishes it precisely, or public immediately if the time is now). We never post anything other than what you have planned yourself. - Gmail (
gmail.modify): read, label and create draft replies, and clear spam when you choose to. We do not send email on your behalf without you, and we do not have full control of your account. - Basic profile (name, email): to sign you in.
We store your Google access and refresh tokens securely so the app can do the above on your behalf. You can revoke access at any time in your Google account (Security → Third-party access).
TikTok and Instagram
Today the app does not connect your TikTok or Instagram accounts. We only fetch public trend data (via SocialCrawl) to show what is popular, and we help you plan posts and remind you to post them yourself. We do not post to TikTok or Instagram automatically.
In the future we plan to offer scheduled publishing to TikTok and Instagram too. If you later choose to connect those accounts and schedule a post, the app will — and only then — send that specific post (your video or image + your text) to the platform at the time you chose. Nothing is sent without your explicit planning. This policy will be updated before that feature goes live.
Data we store per user
- Your connected channels + tokens.
- Content you create: calendar and scheduled posts, titles, descriptions, tags, uploaded videos/images and thumbnails, generated images, scripts, strategies, video ideas and saved favourites.
- Optional post fields, such as a location (place name) you type yourself.
- Your conversations with the assistant and files you upload to it.
- Comment and email data fetched so we can suggest replies / clean-up.
- Derived data: a "style / voice profile" learned from your own past replies, plus your trend searches and web-analysed advice.
Where data lives
Data is stored with Supabase (database + file storage) in the EU (Frankfurt). Files (images and videos) sit in private storage and can only be accessed via short, signed links — no one else can see them. The app is hosted on Vercel.
Per-user isolation
All your data is strictly separated per user at the database level (row-level security on your user id). No other user can see or fetch your data — not your comments, email, files, conversations or calendar.
Third parties we send data to (processors)
To provide the features, we pass the necessary data to:
- Google — YouTube and Gmail APIs (your comments, email, videos you schedule).
- Anthropic (Claude) — to generate text; we send relevant excerpts (e.g. a comment, a title or a conversation) to get a reply back.
- OpenAI — to generate images; we send your description/prompt.
- SocialCrawl — to fetch public trend data from TikTok/Instagram.
- OpenStreetMap (Nominatim) — if you add a location to a post, we send only the place name you typed to look up its coordinates.
- Vercel and Supabase — hosting, database and file storage.
We never sell your data and do not share it beyond what is necessary for the features above.
Web research
The assistant can search the web and read a page you give it. Content from websites is treated as information (never as instructions), and sources are always shown as clickable links so you can verify them.
Retention and deletion of your data
We keep your data as long as you use the app. You are in control:
- You can delete individual items (posts, images, conversations, etc.) directly in the app.
- Disconnecting a channel removes its access tokens.
- To have everything deleted, email info@creatorspa.io — we will delete your account and all associated data (it cascades automatically, so nothing is left behind).
Cookies
We use only necessary cookies to keep you signed in (session). No tracking or advertising cookies.
Changes
If we update this policy, we change the date at the top. We announce material changes in the app.