Privacy Policy

Icreateflow (“Icreateflow”, “we”, “us”, or “our”) operates a promotion and distribution platform for artists, brands, movie studios, podcasters, and other creators at icreateflow.com (the “Service”). We help you push your clips, trailers, episodes, and product drops across a network of social accounts you control. We respect your privacy and are committed to handling your information responsibly and transparently.

This Policy applies to the Icreateflow web application, APIs, and related services. By using the Service, you agree to the collection and use of information in accordance with this Policy. It should be read alongside our Terms & Conditions.

We collect information in three main ways:

• Operate the Service — schedule and distribute your clips across the accounts you have connected, rotate catalog items, and enforce posting windows and view targets;
• Compute aggregated campaign statistics, including per-platform posts and views, progress toward campaign targets, and CSV exports;
• Authenticate you, secure your account, and prevent fraud, abuse, and unauthorized posting;
• Communicate with you about features, updates, security alerts, campaign issues, and support responses;
• Improve the Service through analytics, debugging, and user-experience research;
• Process payments and manage subscriptions;
• Comply with legal obligations, platform-integration requirements, and enforce our Terms.

We do not sell your personal information, and we do not use Your Content — including your clips, captions, or campaign data — to train our own AI models without your explicit consent.

If the EU/UK GDPR applies to you, we process your personal data on these bases:

• Contract: to provide the Service you requested, including running your promotion campaigns;
• Legitimate interests: to secure, improve, and promote the Service, where those interests are not overridden by your rights;
• Consent: for optional cookies, marketing emails, and optional integrations (you can withdraw consent at any time);
• Legal obligation: to comply with applicable laws.

We share information only as described below:

• Connected platforms: when you authorize a campaign, we transmit the necessary clip files, captions, thumbnails, and metadata to the TikTok, YouTube, Instagram, and Facebook accounts you have connected, so the Service can publish on your behalf.
• Service providers: cloud hosting, database, storage, email delivery, payment processing, analytics, and AI providers (for example, OCR and image-generation APIs) acting on our instructions under confidentiality obligations.
• Business transfers: if Icreateflow is involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction, subject to standard confidentiality protections.
• Legal requirements: when required to comply with a law, valid legal process, rights-holder takedown notice, or to protect the rights, property, or safety of Icreateflow, our users, rights-holders, or the public.
• With your consent: for any other purpose disclosed to you at the time.

Icreateflow and its service providers may process your information in countries other than the one in which you reside. Where required, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses and equivalent frameworks to protect your information when it is transferred across borders.

We use a small number of cookies:

• Essential: required for authentication, session security, and core functionality. These cannot be disabled.
• Preference: remember your theme (light/dark), selected artist or brand workspace, and similar settings.
• Analytics: aggregate usage data to help us improve the Service. We only enable analytics cookies with your consent where required by law.

Most browsers let you manage cookies from their settings, including the ability to block or delete them. Blocking essential cookies will break parts of the Service.

• Account information is retained while your account is active and for a reasonable period afterwards to satisfy legal, accounting, or reporting obligations.
• Uploaded clips and generated assets are retained until you delete them, reset the artist directory, or your account is closed — whichever comes first.
• Campaign statistics (posts, view counts, platform post IDs, captions) are retained after a campaign ends so that historical CSV exports remain available, even if the underlying clips have been removed.
• Security and audit logs are kept for a limited period and then deleted or anonymized.
• When information is no longer needed, we securely delete or de-identify it.

We implement administrative, technical, and organizational measures designed to protect your information — including encryption in transit (TLS), encryption at rest for sensitive fields such as third-party OAuth tokens and API keys, least-privilege access controls, and regular backups. No method of transmission or storage is 100% secure; if you become aware of any suspected security issue, please email security@icreateflow.com.

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you;
• Correct information that is inaccurate or incomplete;
• Request deletion (“right to be forgotten”), subject to legal limits;
• Port your data to another service in a commonly used, machine-readable format — including CSV exports of your campaign history directly from the dashboard;
• Disconnect any linked social or Drive account at any time from your workspace settings, which revokes Icreateflow’s access to that account;
• Object to or restrict certain processing, including direct marketing;
• Withdraw consent at any time, without affecting the lawfulness of prior processing;
• Lodge a complaint with your local data-protection authority.

You can exercise many of these rights directly from your account settings, or by contacting us at privacy@icreateflow.com. We may need to verify your identity before fulfilling a request.

The Service is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us with information, contact us and we will take reasonable steps to delete it.

The Service integrates with and links to third-party platforms (including TikTok, YouTube, Instagram, Facebook, Google Drive, and AI providers). Their collection and use of your information is governed by their own privacy policies. We recommend reviewing those policies before connecting your accounts or relying on their services.

We may update this Privacy Policy periodically. When we do, we will revise the “Last updated” date at the top of the page and, for material changes, provide additional notice through the Service or by email. Continued use of the Service after the updated Policy takes effect constitutes acceptance of the revised Policy.

If you have questions about this Privacy Policy or how we handle your information, contact us at privacy@icreateflow.com. For general support, email support@icreateflow.com.