Privacy Policy

Who we are

Data Controller: Creattus, creattus.com. If you have any questions about this policy or your data, contact us at privacy@creattus.com.

Scope

This policy applies to all users, visitors, customers, and administrators who access or use the Service, including any related applications and integrations.

Personal data we collect

• Account data: name, email, organization details, user roles, and authentication data.
• Service data: connected social accounts, posts, schedules, media assets, analytics, and usage counters.
• Billing data: subscription status, seat counts, and payment metadata (processed via payment providers).
• Technical data: device identifiers, IP address, browser type, logs, and diagnostics.
• Support data: communications and requests you send to our team.

How we use data

• Provide, operate, and improve the Service.
• Authenticate users and secure accounts.
• Process subscriptions and billing.
• Generate analytics and performance insights.
• Communicate updates, support, and product notices.
• Prevent fraud and ensure platform integrity.

Legal bases (GDPR)

For users in the European Economic Area, we process personal data under the EU General Data Protection Regulation (GDPR) on one or more of the following legal bases:

• Contract: to provide the Service you request.
• Legitimate interests: to operate, secure, and improve the Service.
• Consent: when required, such as for specific marketing communications.
• Legal obligations: compliance with applicable laws.

Sharing of data

We share data with trusted service providers and partners only when necessary to operate the Service, such as hosting, analytics, payments, or customer support. These providers are bound by contractual obligations to protect your data.

International transfers

We may transfer data to countries outside your jurisdiction. When we do, we use appropriate safeguards consistent with GDPR requirements (for example, Standard Contractual Clauses).

Data retention

We retain personal data only as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. When no longer needed, data is deleted or anonymized.

Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of your personal data, and to data portability. You may also withdraw consent where processing is based on consent.

To exercise your rights, contact us at privacy@creattus.com.

Security

We implement technical and organizational measures to protect your data, including access controls, encryption where appropriate, and regular monitoring. No method of transmission or storage is 100% secure.

Cookies

We use essential cookies and similar technologies for authentication and core functionality. Where required, you can manage cookies through your browser settings.

Children’s privacy

The Service is not directed to children under 16 and we do not knowingly collect personal data from them. If you believe a child has provided data, contact us to remove it.

Changes to this policy

We may update this policy from time to time. We will post the updated version on this page and update the effective date.

Data Deletion Instructions

Creattus provides a simple process to request deletion of your personal data, including data obtained through Meta (Facebook/Instagram) and LinkedIn integrations.

1. Email us at privacy@creattus.comwith the subject “Data Deletion Request”.
2. Include the account email associated with your Creattus account and the platform(s) you want removed (Meta, Instagram, Facebook, LinkedIn).
3. We will verify your request and delete or anonymize your data within 30 days, in accordance with applicable laws.

If you connected a Meta account, you can also remove access in your Facebook settings. If you connected LinkedIn, you can revoke access in your LinkedIn account settings. We will still process deletion upon request.

Contact

If you have questions or requests about privacy, contact us at privacy@creattus.com.