Privacy Policy

1. Introduction

Creafolio ("we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at creafolio.id.

By using the Service, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Information You Provide

• Account information: name, email address, username, password
• Profile information: bio, profile photo, banner image, social links
• Portfolio content: videos, descriptions, statistics you add manually
• Invoice data: billing details, line items, payment records
• Outreach data: brand contact information, messages, notes
• Payment information: bank account details for invoice purposes (stored securely, not used for charging)

2.2 Information from Third-Party Services

TikTok

When you connect your TikTok account, we receive:

• TikTok username and display name
• Profile picture URL
• Follower count, following count, likes count, video count
• List of your public TikTok videos (title, cover image, view count, like count)

Instagram

When you connect your Instagram account, we receive:

• Instagram username and display name
• Profile picture URL
• Follower count, following count, and media count
• List of your public Instagram posts (media type, caption, permalink, timestamp, engagement metrics)

Threads

When you connect your Threads account, we receive:

• Threads username and display name
• Profile picture URL
• Follower count
• List of your public Threads posts (text content, timestamp, engagement metrics)

Google Calendar

When you connect your Google Calendar account, we receive:

• OAuth access token and refresh token to act on your behalf
• We create, update, and delete calendar events in your primary Google Calendar representing content you schedule in Creafolio's Studio feature
• We do not read, store, or process any pre-existing calendar events you created outside of Creafolio

2.3 Automatically Collected Information

• Log data: IP address, browser type, pages visited, timestamps
• Device information: device type, operating system
• Cookies and similar tracking technologies for session management

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Display your portfolio to visitors at your unique public URL
• Sync your TikTok content and statistics to your portfolio
• Sync your Instagram posts and statistics to your portfolio
• Sync your Threads posts and statistics to your portfolio
• Create, update, and delete Google Calendar events for content you schedule in Studio
• Generate invoice PDFs with your billing information
• Send transactional emails (e.g., email verification, password reset)
• Improve and personalize the Service
• Monitor and analyze usage patterns for service improvement
• Comply with legal obligations

We do not sell your personal information to third parties.

4. TikTok Data Usage

Data obtained through the TikTok API is used exclusively to:

• Display your TikTok profile statistics on your Creafolio portfolio
• Allow you to add TikTok videos to your portfolio
• Show your social metrics on the dashboard

We do not use TikTok data for advertising, profiling, or share it with third parties beyond what is necessary to operate the Service. TikTok data is retained only as long as your account is active or until you disconnect your TikTok account.

You can revoke Creafolio's access to your TikTok account at any time from Settings → Connected Accounts, or directly from your TikTok account settings.

5. Instagram & Threads Data Usage

Data obtained through the Meta (Instagram and Threads) APIs is used exclusively to:

• Display your Instagram and Threads profile statistics on your Creafolio portfolio
• Allow you to showcase your Instagram and Threads posts in your portfolio
• Show your social metrics on the dashboard

We only request the minimum Meta API permissions necessary to provide the portfolio synchronization feature. We do not use Instagram or Threads data for advertising, profiling, or share it with third parties beyond what is necessary to operate the Service.

Instagram and Threads data is retained only as long as your account is active or until you disconnect the respective account. You can revoke Creafolio's access at any time from:

• Creafolio: Settings → Connected Accounts
• Instagram: Instagram app → Settings → Security → Apps and Websites
• Facebook: Facebook Settings → Security and Login → Apps and Websites

To request deletion of all data associated with your Meta account from our systems, visit our Data Deletion page or contact us at [email protected].

Our use of Instagram and Threads data is governed by the Meta Platform Terms and Meta Privacy Policy.

6. Google Calendar Data Usage

When you connect your Google Calendar account, Creafolio uses the calendar.events scope to:

• Create calendar events in your primary Google Calendar when you schedule content in Creafolio Studio
• Update calendar events when you change a scheduled content's date, title, or details
• Delete calendar events when you remove or unschedule content from Studio

We store your Google OAuth access token and refresh token securely to perform these actions on your behalf. We do not read, store, or process any pre-existing calendar events that were not created by Creafolio.

Google Calendar data is never used for advertising, analytics, or shared with third parties. Tokens are deleted when you disconnect your Google Calendar account.

You can revoke Creafolio's access to your Google Calendar at any time from:

• Creafolio: Settings → Connected Accounts → Disconnect Google Calendar
• Google: myaccount.google.com → Security → Third-party apps with account access

Our use of Google Calendar data complies with the Google API Services User Data Policy, including the Limited Use requirements.

7. Sharing of Information

We may share your information with:

• Service providers — third-party vendors who assist in operating the Service (e.g., cloud hosting, email delivery), subject to confidentiality agreements
• Legal requirements — when required by law, court order, or governmental authority
• Business transfers — in connection with a merger, acquisition, or sale of assets, with appropriate notice to you

Your public portfolio information (name, bio, portfolio content, social stats) is visible to anyone who visits your portfolio URL.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes.

Third-party platform data (TikTok, Instagram, Threads, Google Calendar tokens) is deleted immediately upon disconnecting the respective account or deleting your Creafolio account.

9. Security

We implement industry-standard security measures to protect your information, including encrypted data transmission (HTTPS), secure password hashing, and HttpOnly cookies for session management. However, no method of transmission over the internet is 100% secure.

10. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your personal data
• Withdraw consent for data processing
• Export your data in a portable format

To exercise these rights, contact us at [email protected].

11. Cookies

We use cookies solely for authentication purposes (session tokens stored as HttpOnly cookies). We do not use tracking or advertising cookies. You can control cookie settings through your browser, but disabling cookies may prevent you from logging in.

12. Children's Privacy

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new effective date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at: