Privacy Policy

1. Overview

Creator HQ ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our video editing project management platform and related services (the "Service").

Our Service helps content creators manage video production workflows, collaborate with team members, and create content using AI-powered tools. This policy covers all aspects of our data handling practices, including the processing of video content, team collaboration data, and AI-generated content.

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, do not use our Service.

2. Information We Collect

Information You Provide

• Account Information: Name, email address, password, and profile information
• Team Information: Team names, member roles, and organizational details
• Project Data: Project names, descriptions, tasks, deadlines, and workflow configurations
• Content: Video files, audio files, images, scripts, comments, and other media you upload
• Communication: Messages, comments, and feedback shared within the platform
• Payment Information: Billing details processed through our payment provider (Stripe)

Information We Collect Automatically

• Usage Data: How you interact with our Service, features used, and time spent
• Device Information: IP address, browser type, operating system, and device identifiers
• Log Data: Server logs, error reports, and performance metrics
• Analytics: User behavior patterns and feature usage statistics (collected via PostHog)
• Cookies: Session data, preferences, and authentication tokens

Information from Third Parties

• OAuth Providers: Basic profile information from Google or other connected accounts
• Payment Providers: Transaction data and payment status from Stripe
• AI Services: Processing results from OpenAI, Anthropic, or other AI providers

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain our Service
• Process your account registration and authentication
• Enable team collaboration and project management features
• Process and store your video content and related media
• Generate AI-powered content suggestions and improvements
• Process payments and manage subscriptions
• Send service-related communications and updates
• Send promotional emails and marketing communications (with your consent)
• Provide customer support and respond to inquiries
• Monitor and analyze usage patterns to improve our Service
• Ensure security and prevent fraud or abuse
• Comply with legal obligations and enforce our Terms of Service
• Develop new features and enhance existing functionality

4. Third-Party Services

We use the following third-party services to operate and improve Creator HQ. Each service may collect and process data as described below:

Google (Authentication)

We use Google OAuth for account authentication. When you sign in with Google, we receive your name, email address, and profile picture. Google's use of your data is governed by Google's Privacy Policy.

PostHog (Analytics)

We use PostHog for product analytics to understand how users interact with our Service. PostHog collects usage data such as page views, feature interactions, and session information. This data helps us improve the user experience. You can learn more about PostHog's data practices in their Privacy Policy.

Resend (Email Service)

We use Resend to send transactional and marketing emails, including account notifications, project updates, and promotional communications. Resend processes your email address and the content of emails sent to you. See Resend's Privacy Policy for more information.

Stripe (Payment Processing)

We use Stripe to process payments and manage subscriptions. When you make a payment, Stripe collects your payment card details, billing address, and transaction information. We do not store your full credit card number on our servers. Stripe's handling of your payment data is governed by Stripe's Privacy Policy.

Cloudflare R2 (File Storage)

We use Cloudflare R2 for secure cloud storage of your uploaded files, including videos, images, and other media assets. Files are encrypted and stored securely. See Cloudflare's Privacy Policy for details.

AI Providers (Content Generation)

We use AI services from providers such as OpenAI, Anthropic, and Google (via OpenRouter) to power content generation features. When you use AI features, your input data is sent to these providers for processing. These providers have their own privacy policies and data handling practices. Your content is not used to train third-party AI models.

5. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information in the following circumstances:

Within Your Team

Information is shared with team members according to their assigned roles and permissions. Team administrators can access all team data, while other members have access based on their role and project assignments.

Service Providers

We share data with the third-party service providers described in Section 4 above, solely for the purposes of providing and improving the Service.

Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect our rights, property, or safety.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction, subject to the same privacy protections.

6. Data Storage and Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction.

Security Measures

• Encryption in transit (HTTPS/TLS) and at rest
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Secure cloud infrastructure with leading providers
• Regular backups and disaster recovery procedures
• Employee training on data protection practices

Data Location

Your data is primarily stored in secure data centers in the United States, with appropriate safeguards for international transfers.

7. Video Content and Media Processing

As a video editing platform, we handle various types of media content. Here's how we process and protect your creative assets:

Content Processing

• Video files are processed for transcoding, thumbnail generation, and optimization
• Audio tracks may be analyzed for transcription and synchronization
• Images are processed for compression and format conversion
• Metadata is extracted for organization and search functionality

Content Ownership

You retain all rights to your original content. We do not claim ownership of your videos, audio, images, or other creative materials. We only process your content to provide the Service as requested.

Content Security

• All media files are encrypted and stored securely
• Access is restricted to your team members based on permissions
• Automatic virus and malware scanning
• Secure deletion when content is removed

8. AI and Machine Learning

Our AI features help generate content ideas, scripts, and other creative materials. Here's how we handle AI processing:

AI Data Usage

• Your content may be processed by AI services to generate suggestions and improvements
• We use reputable AI providers (OpenAI, Anthropic, Google) with strong privacy protections
• AI processing is limited to providing the requested features
• Generated content suggestions are private to your team

AI Training

Your content is not used to train AI models unless you explicitly opt-in to help improve our services. Any such participation is voluntary and can be withdrawn at any time.

AI Accuracy

AI-generated content is provided as suggestions only. We do not guarantee accuracy, and you should review all AI-generated content before use.

9. Cookies and Tracking

We use cookies and similar technologies to enhance your experience and provide our services effectively.

Types of Cookies

• Essential Cookies: Required for authentication and core functionality
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand how you use our Service (via PostHog)
• Security Cookies: Detect and prevent fraudulent activity

Cookie Management

You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of our Service.

10. Email and Marketing Communications

Transactional Emails

We send transactional emails related to your account and use of the Service, such as account verification, password resets, project notifications, and billing receipts. These emails are essential to the operation of the Service and cannot be opted out of while your account is active.

Promotional Communications

With your consent, we may send you promotional emails about new features, product updates, tips and best practices, special offers, and other marketing content. These emails are sent via our email service provider, Resend.

Your Opt-Out Rights

You have the right to opt out of promotional communications at any time. You can do so by:

• Clicking the "unsubscribe" link at the bottom of any promotional email
• Updating your notification preferences in your account settings
• Contacting us at [email protected]

Please note that opting out of promotional emails will not affect transactional communications related to your account.

11. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Export your data in a machine-readable format
• Restriction: Limit how we process your information
• Objection: Object to certain types of processing
• Withdrawal: Withdraw consent where processing is based on consent

Exercising Your Rights

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section. We will respond to your request within the timeframes required by applicable law.

Account Controls

You can also manage many of these preferences directly through your account settings, including updating profile information, managing team permissions, and controlling notification preferences.

12. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy.

Retention Periods

• Account Data: Retained while your account is active
• Project Data: Retained according to your team's data retention settings
• Content Files: Retained until deleted by you or your team administrator
• Payment Data: Retained for legal and accounting requirements (typically 7 years)
• Usage Logs: Retained for up to 2 years for security and analytics

Deletion

When you delete your account, we will delete your personal information within 30 days, except where we need to retain it for legal compliance, dispute resolution, or security purposes.

13. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers.

Safeguards

• Standard Contractual Clauses approved by relevant authorities
• Adequacy decisions by data protection authorities
• Certification schemes and codes of conduct
• Strong technical and organizational security measures

14. Children's Privacy

Our Service is not directed to individuals under the age of 16, and we do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

For significant changes, we may also send you an email notification or display a prominent notice within our Service.

Your continued use of our Service after any changes indicates your acceptance of the updated policy.

16. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us: