1.Introduction
Icreateflow (“Icreateflow”, “we”, “us”, or “our”) operates a promotion and distribution platform for artists, brands, movie studios, podcasters, and other creators at icreateflow.com (the “Service”). We help you push your clips, trailers, episodes, and product drops across a network of social accounts you control. We respect your privacy and are committed to handling your information responsibly and transparently.
This Policy applies to the Icreateflow web application, APIs, and related services. By using the Service, you agree to the collection and use of information in accordance with this Policy. It should be read alongside our Terms & Conditions.
2.Information we collect
We collect information in three main ways:
a. Information you provide
- Account details: name, email address, password (stored hashed), and optional profile information.
- Artist, brand, and campaign content: artist names, brand names, handles, timezones, posting windows, view targets, uploaded clips, captions, artwork, trailers, episodes, and other promotional material.
- Connected account credentials: OAuth tokens and optional API keys for the TikTok, YouTube, Instagram, Facebook, and Google Drive accounts you link to the Service. These are stored encrypted and used only to perform the distribution tasks you configure.
- Communications: messages you send to support, feedback, clearance and takedown correspondence, and survey responses.
- Billing information: handled by our payment processor; we receive only limited details (such as the last four digits of your card and billing country) needed to operate your subscription.
b. Information collected automatically
- Usage data: actions you take in the Service, features used, campaigns launched, clips distributed, and performance metrics.
- Device and log data: IP address, browser type and version, operating system, referring pages, and timestamps.
- Cookies and similar technologies: used to keep you signed in, remember preferences, and measure performance (see Section 7).
c. Information from third parties
- Data returned by connected platforms (TikTok, YouTube, Instagram, Facebook, Google Drive) when you link an account, limited to the scopes you grant — for example, permission to upload videos, set captions, and read post IDs and view counts for the posts the Service published on your behalf.
- Output from AI service providers (OCR results, generated image variations) associated with your promotional jobs.
3.How we use information
- Operate the Service — schedule and distribute your clips across the accounts you have connected, rotate catalog items, and enforce posting windows and view targets;
- Compute aggregated campaign statistics, including per-platform posts and views, progress toward campaign targets, and CSV exports;
- Authenticate you, secure your account, and prevent fraud, abuse, and unauthorized posting;
- Communicate with you about features, updates, security alerts, campaign issues, and support responses;
- Improve the Service through analytics, debugging, and user-experience research;
- Process payments and manage subscriptions;
- Comply with legal obligations, platform-integration requirements, and enforce our Terms.
We do not sell your personal information, and we do not use Your Content — including your clips, captions, or campaign data — to train our own AI models without your explicit consent.
4.Legal bases (EEA/UK users)
If the EU/UK GDPR applies to you, we process your personal data on these bases:
- Contract: to provide the Service you requested, including running your promotion campaigns;
- Legitimate interests: to secure, improve, and promote the Service, where those interests are not overridden by your rights;
- Consent: for optional cookies, marketing emails, and optional integrations (you can withdraw consent at any time);
- Legal obligation: to comply with applicable laws.
6.International transfers
Icreateflow and its service providers may process your information in countries other than the one in which you reside. Where required, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses and equivalent frameworks to protect your information when it is transferred across borders.
8.Data retention
- Account information is retained while your account is active and for a reasonable period afterwards to satisfy legal, accounting, or reporting obligations.
- Uploaded clips and generated assets are retained until you delete them, reset the artist directory, or your account is closed — whichever comes first.
- Campaign statistics (posts, view counts, platform post IDs, captions) are retained after a campaign ends so that historical CSV exports remain available, even if the underlying clips have been removed.
- Security and audit logs are kept for a limited period and then deleted or anonymized.
- When information is no longer needed, we securely delete or de-identify it.
9.Security
We implement administrative, technical, and organizational measures designed to protect your information — including encryption in transit (TLS), encryption at rest for sensitive fields such as third-party OAuth tokens and API keys, least-privilege access controls, and regular backups. No method of transmission or storage is 100% secure; if you become aware of any suspected security issue, please email security@icreateflow.com.
10.Your rights and choices
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you;
- Correct information that is inaccurate or incomplete;
- Request deletion (“right to be forgotten”), subject to legal limits;
- Port your data to another service in a commonly used, machine-readable format — including CSV exports of your campaign history directly from the dashboard;
- Disconnect any linked social or Drive account at any time from your workspace settings, which revokes Icreateflow’s access to that account;
- Object to or restrict certain processing, including direct marketing;
- Withdraw consent at any time, without affecting the lawfulness of prior processing;
- Lodge a complaint with your local data-protection authority.
You can exercise many of these rights directly from your account settings, or by contacting us at privacy@icreateflow.com. We may need to verify your identity before fulfilling a request.
11.Children
The Service is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us with information, contact us and we will take reasonable steps to delete it.
12.Third-party links & integrations
The Service integrates with and links to third-party platforms (including TikTok, YouTube, Instagram, Facebook, Google Drive, and AI providers). Their collection and use of your information is governed by their own privacy policies. We recommend reviewing those policies before connecting your accounts or relying on their services.
13.Changes to this Policy
We may update this Privacy Policy periodically. When we do, we will revise the “Last updated” date at the top of the page and, for material changes, provide additional notice through the Service or by email. Continued use of the Service after the updated Policy takes effect constitutes acceptance of the revised Policy.
14.Contact us
If you have questions about this Privacy Policy or how we handle your information, contact us at privacy@icreateflow.com. For general support, email support@icreateflow.com.