Your data. Clearly explained.

Introduction

Welcome to the CreatorSift Privacy Centre. CreatorSift (operated by [INSERT REGISTERED LEGAL ENTITY]) is committed to processing data responsibly and transparently. We provide public creator analytics, performance tracking, historical metric snapshots, competitive comparisons, AI-generated insights, and downloadable summaries or alerts to help brands, agencies, and creators make data-driven content decisions.

• This policy details our actual practices regarding personal data collection, processing, storage, and deletion.
• It covers both our registered users (accounts, workspaces) and the public creator profiles submitted for analysis.
• Please note that the external social media platforms we analyze (such as YouTube, Instagram, and Facebook) operate under their own privacy notices. We strongly advise reviewing their respective terms.

Who controls your information

Your data is managed under the oversight of [INSERT REGISTERED LEGAL ENTITY], a registered business entity in India.

• Registered Entity: [INSERT REGISTERED LEGAL ENTITY]
• Registered Address: [INSERT REGISTERED BUSINESS ADDRESS]
• Primary Privacy Contact: [INSERT PRIVACY EMAIL]
• Grievance Officer Contact: [INSERT GRIEVANCE EMAIL]
• Data Role: CreatorSift acts as the Data Controller (or Data Fiduciary) for the account and billing details you provide. When agencies or enterprise clients submit specific profiles for custom reports, CreatorSift may act as a Data Processor under their instructions.

Scope of this policy

This policy applies universally to all services offered directly under the CreatorSift ecosystem:

• The website creatorsift.com and all associated subdomains.
• Your personal or agency dashboard, settings, and team workspaces.
• CreatorSift reporting exports, scheduled email alerts, and customer support communications.
• Exclusions: This policy does not apply to third-party services, APIs, or websites linked from our platform. For example, connections to platforms like YouTube are governed directly by the Google Privacy Policy, and Facebook/Instagram integrations are governed by the Meta Privacy Policy.

Information we collect

To run CreatorSift, we process different categories of information depending on how you interact with our platform.

Where information comes from

We gather information from the following primary sources:

• Directly from you: When you register, create workspaces, send support queries, or select profiles to analyze.
• Third-Party APIs: Authorized integrations (e.g. YouTube API Services, Meta API endpoints) to retrieve public metrics.
• Public Webpages: Public HTML snapshots fetched via automated fetch tools or scrapers (like Apify) when official APIs are restricted or unavailable.
• Payment and Tech Partners: Payment processors (Stripe/Razorpay) and error-monitoring tools (Sentry).

How we use information

We utilize the collected information to perform the following core operations:

• To provision, secure, and maintain your account and workspaces.
• To calculate and display comparative analytics, growth trends, and engagement statistics.
• To run AI text classifiers for video captions to identify hook types, tones, and content formats.
• To distribute requested email alerts when a tracked creator uploads new content.
• To resolve payment issues, deliver invoices, and provide prompt customer support.
• To secure the platform against denial-of-service (DDoS) attacks, brute force logins, and general abuse.

Legal bases

We only process personal data when we have a valid legal justification. Under global regulations, we rely on:

Public social-media data

CreatorSift gathers publicly accessible metrics and posts from YouTube, Instagram, and Facebook profiles.

• Public does not mean unrestricted: We respect privacy boundaries and never bypass security, log in to private accounts, or scrape restricted content.
• API/Page Limitations: Raw public metric updates rely on platform availability. Metrics are estimates and can vary depending on caching rates.
• Opt-out & Corrections: We respect creator rights. If you are the owner of a public profile tracked on CreatorSift, you can request data correction or profile removal at any time.
• Original Platform: Removing data from CreatorSift does not delete it from the parent network (e.g. YouTube or Instagram). You must adjust your privacy settings on those platforms directly.

Email alerts and communications

We categorize our email correspondence into two distinct domains:

• You can manage your notification alerts in your account settings.
• You can opt-out of marketing emails instantly using the unsubscribe link at the footer of each email.
• Strictly operational emails (such as billing updates or security alerts) cannot be disabled as they are required to service your account.

Cookies and analytics

CreatorSift uses cookies to authenticate sessions, remember preferences, and analyze platform traffic.

• Necessary Cookies: Essential for logging in, routing traffic, and handling subscription purchases.
• Preferences: Store settings like theme preference and panel layout state.
• Analytics: Track anonymized usage data (via privacy-respecting analytics tools) to detect slow pages and enhance UX.
• Consent Control: We only load non-essential (analytics, marketing) cookies after you provide consent. You can withdraw consent easily using our preference buttons.

How information is shared

CreatorSift does not sell your personal data or share it with third parties for targeted advertising.

• Subprocessors: We share data with verified infrastructure vendors (hosting, database providers, payment gateways, and email dispatch networks).
• List of Subprocessors: We maintain an active list of subprocessors at /subprocessors.
• Legal Compliance: We may disclose details if legally compelled to do so by government authorities under proper legal warrants.

International transfers

Because CreatorSift is global, your data may be processed in various hosting hubs worldwide.

• Hosting Regions: Our servers are primarily located in Europe and North America, with payment operations processed in India.
• Safeguards: We implement standard contractual clauses (SCCs) and security agreements with all international subprocessors to guarantee matching data protection thresholds.

Data retention

We enforce strict retention schedules to ensure data is deleted once it is no longer necessary.

Security

We employ robust physical, technical, and administrative controls to safeguard your data.

• Encryption: All data in transit is encrypted using TLS 1.3, and database data is encrypted at rest using AES-256.
• Access Limits: Access to production servers is strictly limited to authorized personnel via secure key validation.
• Infrastructure Monitoring: We audit dependencies daily and deploy vulnerability updates immediately.
• Disclaimer: While we enforce high security metrics, CreatorSift cannot guarantee absolute safety, as no online transmission is completely secure.

Your privacy rights

Depending on your residency, you have specific statutory controls over your personal data.

Public-profile removal

If your public profile (YouTube channel or Instagram page) is tracked on CreatorSift, you can request its removal from our index.

• Verification: You must prove ownership of the channel or page by posting a temporary token in your bio, or via platform OAuth validation.
• Removal: Once verified, we will wipe your profile card, aggregated metrics, historical snapshots, and AI insights from our database.
• Suppression: We will place your handle on our internal suppression list to ensure it is not tracked or re-imported in the future.
• Reports: Deletion does not retroactively pull raw metrics from reports that users have already downloaded.

Children's privacy

CreatorSift is not marketed to or designed for children. We enforce the following limits:

• Minimum Age: Users must be at least 18 years of age (or the minimum legal age in their jurisdiction) to create an account.
• No Minor Data: We do not knowingly collect personal details from minors. If you discover a minor has created an account, contact us at our privacy email for immediate erasure.

Data breaches

In the event of a security incident resulting in a breach of personal information, we enforce a response protocol:

• Notification: We will notify affected individuals and regulatory authorities (like CERT-In) in accordance with regional statutory timelines.
• Communication: Notifications will detail the categories of breached data, potential impact, our mitigation steps, and incident support contacts.

Changes to this policy

We periodically update our Privacy Policy. We handle revisions as follows:

• Notification: For material updates, we will notify you via a dashboard banner or direct email alert.
• Effective Date: Revisions are effective as of the date specified at the top of the policy.
• Archiving: We maintain an archive of previous versions for comparison.

Contact and complaints

If you have questions, feedback, or grievance complaints regarding our privacy systems, contact us using the info below:

• Legal Operator: [INSERT REGISTERED LEGAL ENTITY]
• Registered Address: [INSERT REGISTERED BUSINESS ADDRESS]
• Privacy Office Email: [INSERT PRIVACY EMAIL]
• Grievance Officer Email: [INSERT GRIEVANCE EMAIL]
• Resolution Window: We verify identity and respond to all requests within 30 days.