Effective 2026-01-01
Privacy Policy
Operated by Xoxo Digitals. Contact: privacy@creatorpilotpro.com
This page is a compliance template. Replace placeholders (company name, address, emails, effective date) in apps/web/src/lib/legal-meta.ts or via NEXT_PUBLIC_LEGAL_* env vars, then have counsel review before relying on it.
1. Who we are
SocialCreatorPilot (“Service”) is operated by Xoxo Digitals (“we”, “us”). This policy explains what data we collect, how we use it, and your choices. Contact: privacy@creatorpilotpro.com. Address: [Street Address], [City], [Country].
2. Data we collect
- Account data: name, email, role, workspace membership, authentication credentials (hashed passwords or equivalent).
- Social account connection data: platform account IDs, handles, page/channel metadata, and OAuth access/refresh tokens needed to publish and read permitted analytics.
- Content & operations data: drafts, ideas, packages, captions, media metadata, schedules, publish statuses, and related logs.
- AI processing inputs/outputs: prompts, reference channel summaries, generated ideas/scripts, and configuration you provide for generation features.
- Technical data: IP address, device/browser type, approximate location derived from IP, cookies/local storage identifiers, and diagnostic logs.
3. How we use data
We use data to provide and improve the Service, including to:
- Authenticate users and enforce access controls.
- Connect platform accounts and publish or schedule content you authorize.
- Run AI-assisted ideation and packaging features you enable.
- Monitor reliability, prevent abuse, and respond to support requests.
- Comply with law and platform developer terms.
We do not sell personal data. We do not use Google / YouTube user data for advertising or independent AI model training beyond operating the Service features you request. See our YouTube API Limited Use disclosure.
4. OAuth tokens & platform APIs
When you connect YouTube (Google), Facebook/Meta, or TikTok, we store encrypted OAuth tokens and use them only to perform actions you initiate or schedule (e.g., upload, status checks, permitted analytics). You may disconnect accounts in the product and revoke access in each platform’s security settings. See Platform disclosures and Data deletion.
5. Cookies & similar technologies
We use session cookies and local storage for authentication and preferences. Details are in the Cookie Policy.
6. Retention
We retain account and operational data while your workspace is active and for a reasonable period afterward for backups, dispute resolution, and legal compliance. OAuth tokens are deleted or invalidated when you disconnect an account or delete your user/workspace, subject to short-lived backup retention.
7. Sharing
We share data with subprocessors that help host and operate the Service (see Data Processing & Subprocessors), with platforms when you authorize publishing, and when required by law. We do not sell personal information.
8. Your rights
Depending on your location, you may have rights to access, correct, export, or delete personal data, and to object to or restrict certain processing. Email privacy@creatorpilotpro.com or use the Data Deletion / User Data Request page. We may verify your identity before fulfilling requests.
9. International transfers
If we process data in countries other than your own, we use appropriate safeguards as required by applicable law (e.g., contractual clauses). Update this section with your actual hosting regions.
10. Changes
We may update this policy and will revise the effective date above. Material changes should be communicated via the Service or email when appropriate.
11. Contact
Privacy inquiries: privacy@creatorpilotpro.com
Support: support@creatorpilotpro.com
Mail: [Street Address], [City], [Country]