Privacy Policy

Effective date: 14 September 2026

1. Overview

Creator Hub ("the Service") publishes a creator's own content to their own social accounts and collects performance figures for it. This policy explains what data the Service accesses, why, where it is kept, and how to have it removed.

2. Data the Service accesses

Instagram: your recent posts (media files, captions, timestamps, links) and their performance figures (views, reach, likes, comments, saves, shares), plus audience figures and public comments on your posts.

TikTok, through these permissions: user.info.basic to identify the account and show its name; video.upload to place your content in your TikTok inbox as a draft for you to finish; video.publish to post your content to your own profile with the privacy level you chose.

YouTube: uploading videos to your channel and reading your channel's videos and their performance figures.

Account: your email address and a password, which is stored only as a salted hash.

3. How the data is used

• Media is fetched from Instagram, or uploaded by you, only to publish it to the accounts you chose.
• Captions may be reworded for a platform by a language model; only the caption text and your brand notes are sent to it, never tokens or personal details.
• Performance figures are stored to show you how posts did and, later, what tends to work.
• A record of which posts went where prevents duplicates.

4. Where the data is kept

The Service runs on a server operated by the Service owner in the European Union. Platform access tokens are encrypted at rest. Media files are deleted automatically 30 days after the post they belong to has been published. Database backups are kept for up to 30 days. Data is sent only to the official platform APIs and, for caption drafting, to the language-model provider.

5. Sharing

Your data is not sold, rented or shared with anyone else. Content is sent only to the accounts you connected.

6. Your control

• Disconnect: the Accounts page removes an account's access tokens immediately.
• Revoke: you can also remove the Service from Instagram's, TikTok's or Google's own account settings.
• Delete: email atasert.mert@gmail.com and all data held about you, including backups after their retention period, is deleted within 30 days.

7. Security

All connections use HTTPS. Access tokens are encrypted at rest, passwords are hashed, and every change to accounts or publishing is recorded in an audit log.

8. Third parties

The Service talks to the Instagram Graph API (Meta), the TikTok Login Kit and Content Posting API (ByteDance), the YouTube Data API (Google), and a language-model API for caption drafting. Your use of those platforms is governed by their own privacy policies.

9. Changes and contact

This policy may be updated; the effective date above changes when it is. Questions: atasert.mert@gmail.com.

Terms of Service · Log in