Privacy Policy

• Provide, operate, secure, and improve the Service.
• Respond to requests, book scheduled calls, and provide support.
• Build a brand profile you asked us to analyze and generate content tailored to it.
• Send transactional communications, and (with your consent where required) product updates and marketing emails.
• Detect and prevent fraud, abuse, and security incidents.
• Comply with legal obligations and enforce our Terms of Service.
• Improve our features and operations. We do not authorize third-party AI model providers to train their models on your content when contractual controls make that available; see Section 3.

We share information with service providers that help us run the Service, under contracts limiting their use of the information:

• Cloud infrastructure and database hosting (for example, Supabase).
• Email delivery, customer support, and internal communications.
• Payment processing (for example, Stripe). Card data is handled by the processor, not us.
• Scheduling tools (for example, Calendly) when you book a call.
• Analytics providers — currently Google Analytics 4, configured with Google Signals and ad personalization disabled. In opt-in jurisdictions it is loaded only after you consent; see Section 7 for details.
• AI model providers when your content is processed to generate outputs you requested. Where a provider offers a no-training or zero-retention option through their API, we use it.
• Professional advisors (for example, legal and accounting) when needed.
• Government or law-enforcement agencies where required by law, and in connection with a merger, sale, or reorganization of our business.

Based on our current configured practices, we do not sell personal information for money and we do not share personal information for cross-context behavioral advertising. If those practices change, we will update this Notice and provide the choices required by applicable law before doing so.

We keep personal information for as long as it is needed to provide the Service, meet legal obligations, resolve disputes, and enforce our agreements. Retention periods vary by data type — for example, account records are typically retained for the life of the account, billing records for the period required by tax and accounting rules, and support communications for a reasonable period after resolution. When information is no longer needed, we delete or de-identify it on a rolling basis. We do not promise that every copy of every record is deleted within a fixed number of days.

We use administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit, access controls, and row-level security on our database. No online service can promise absolute security, and we do not.

We are based in the United States and process information here and with vendors located in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection rules than your country.

We use the following cookie categories:

• Essential — required for the site to work (session, authentication, security, remembering your consent choice). Always on.
• Analytics — Google Analytics 4, configured with Google Signals and ad personalization signals disabled.
• Marketing — reserved for future measurement. We do not currently load marketing cookies even if this category is enabled.

Where analytics is loaded. In opt-in jurisdictions (EU, EEA, UK, and Switzerland) analytics stays off until you consent through our cookie banner. Elsewhere, analytics may be enabled by default where permitted by local law, and you can turn it off at any time. Marketing cookies are never enabled without your explicit opt-in.

You can change or withdraw your choice anytime through Cookie Settings in the footer. When you withdraw analytics consent we stop further GA use and best-effort clear GA first-party cookies.

Global Privacy Control (GPC). If your browser sends a GPC signal, we treat it as a rejection of nonessential analytics and marketing on our site, and as a valid opt-out signal for sale/share/targeted advertising where required by law. GPC is honored regardless of region.

Where categories are defined by the California Consumer Privacy Act as amended by the CPRA, we collect the following:

• Identifiers (for example, name, email, phone, IP address).
• Commercial information (for example, subscriptions, transactions with our payment processor).
• Internet or other electronic network activity (for example, usage and log data).
• Professional or employment-related information (for example, brand or company details you share).
• Audio, electronic, visual, or similar information (for example, media you upload).
• Inferences drawn from the above to build a brand profile you requested.
• Sensitive personal information: account login credentials (email plus password) used to access your account. We use these only to authenticate you and secure your account. We do not use them to infer characteristics about you, and we do not sell or share them.

Purposes: operating the Service, responding to your requests, security and fraud prevention, and improving our features. Retention criteria are described in Section 4.

See U.S. State Privacy Rights below to exercise your rights.

Where applicable under state law (for example, California, Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia), you may have the following rights:

• Access or know: request confirmation of processing and a copy of the personal information we hold about you.
• Delete: request deletion of personal information we hold about you, subject to legal exceptions.
• Correct: request correction of inaccurate personal information.
• Portability: request a portable copy of personal information you provided to us.
• Opt out of sale, sharing for cross-context behavioral advertising, and targeted advertising — where applicable. As stated in Section 3, we do not currently sell or share personal information for these purposes.
• Limit use of sensitive personal information, where applicable.
• Appeal a decision on your request, where applicable.
• Non-discrimination for exercising your rights.

To submit a request, email legal@creatorgenius.com. To protect your information, we verify your identity before acting on a request — typically by confirming access to the email on the account and other reasonable identifiers matched against our records. Authorized agents may submit requests with proof of authorization (for example, a signed permission or valid power of attorney), and we may still contact you to confirm. We aim to respond within the timelines required by the applicable state statute; some laws allow us to extend for reasonable, notified periods when a request is complex.

The Service is intended for business use and is not directed to individuals under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided information to us, contact legal@creatorgenius.com and we will take reasonable steps to remove it.

The Service may link to or embed third-party sites and tools (for example, social platforms, Calendly, and payment processors). Their privacy practices are governed by their own notices. Please review them.

We may update this Notice from time to time. When we do, we will post the updated version with a new effective date. Where required, we will also notify you by email or an in-product notice.

Questions or requests? Contact:

To change your cookie choices at any time, use Cookie Settings.