1 Who We Are
CreatorIn ("we", "our", "us") is an influencer marketing platform that connects brands with content creators and provides automation tools for creators to grow their Instagram engagement. CreatorIn is owned and operated by SutraNova Technologies, operating from India and available at creatorin.in.
This Privacy Policy applies to all services available on our website and any related web applications.
2 Information We Collect
Account Information
- Full name, email address, and password (hashed — we never store plaintext passwords)
- Profile photo, phone number, city, and content category (optional, provided by you)
- Account type: Creator or Brand
Creator-specific Information
- Instagram handle, follower count, engagement rate, content niche, and pricing
- Automation rules you create (trigger keywords, DM templates, post URLs)
Brand-specific Information
- Company name, website, industry, and typical campaign budget
- Campaign briefs, creator shortlists, and AI assistant chat history
Usage Data
- Features used, pages visited, and interaction timestamps
- Browser type, device type, and IP address (anonymised after 30 days)
3 Instagram & Meta Data
We access your Instagram account only with your explicit permission via Meta OAuth. You can revoke access at any time from Instagram Settings → Apps and Websites.
When you connect your Instagram Professional account to CreatorIn, we request the following permissions:
- instagram_basic — to read your username, profile picture, and follower count for display within your dashboard
- instagram_manage_comments — to monitor comments on your posts for the trigger keywords you define in your automation rules
- instagram_manage_messages — to send DMs to commenters on your behalf when an automation rule is triggered
What we do with Instagram data:
- Detect trigger keywords in comments on your posts in real-time via Meta Webhooks
- Send a personalised DM to the commenter using the message template you created
- Display your basic profile information within the CreatorIn dashboard
- Track statistics such as DMs sent and automations active
- Periodically refresh your follower count and engagement rate (roughly once daily) so the numbers shown to brands stay current, rather than only fetching them once when you first connect
What we do NOT do with Instagram data:
- We do not sell, rent, or share your Instagram access token or any content with any third party
- We do not use your Instagram data for advertising purposes
- We do not store the full content of private DM threads beyond what is needed to deliver your automations
- We do not access Instagram data for any purpose beyond operating the automation rules you have configured
Your Instagram access token is stored encrypted in our database and used solely to execute your automation rules. All tokens are immediately deleted when you disconnect your Instagram account.
4 How We Use Your Data
- To provide, operate, and improve the CreatorIn platform and its features
- To run your Instagram automation rules (keyword detection, DM delivery)
- To match creators with brands based on niche, audience size, and budget
- To send transactional emails (account confirmation, payment receipts, subscription alerts)
- To occasionally send product/marketing email (e.g. feature announcements, requests for feedback) — every such email includes a one-click unsubscribe link, and opting out never affects transactional or account-related emails
- To display your automation performance statistics
- To enforce our Terms of Service and prevent abuse or spam
- To comply with applicable laws and legal obligations
We do not use your data for any purpose beyond what is described above without your explicit consent.
5 Payment Information
All payment processing is handled by Razorpay, a PCI-DSS Level 1 compliant payment processor. CreatorIn does not store your card number, CVV, expiry date, or UPI credentials on our servers.
We retain only:
- Your Razorpay subscription ID and current subscription status
- Payment timestamps and amounts for billing records and receipts
- Trial start and trial end dates
For subscription plans, Razorpay securely stores your saved payment method to enable automatic monthly billing. You may cancel your subscription at any time from your profile page — your payment method will not be charged again after the current billing period ends.
6 Data Storage & Security
Your data is stored on Supabase infrastructure (hosted on AWS). We apply the following security measures:
- All data is encrypted in transit using TLS 1.2 or higher
- Data at rest is encrypted using AES-256
- Instagram access tokens are stored in encrypted form
- Passwords are hashed using bcrypt — never stored in plaintext
- Row-level security policies ensure users can only access their own data
- Authentication tokens have limited lifetimes and are rotated regularly
While we implement industry-standard security practices, no internet-based system can guarantee absolute security. We encourage you to use a strong, unique password and to contact us immediately if you suspect unauthorised access to your account.
7 Data Sharing
We do not sell your personal data to any third party.
We share data only in these limited circumstances:
- Service providers: Supabase (database hosting), Razorpay (payment processing), and our SMTP email provider — each acting as a data processor bound by their own privacy policies and data processing agreements
- Creator discovery: When a brand searches for creators, they see your public profile (name, handle, follower count, niche, pricing). Your email address and contact details are never shared without your explicit consent
- Legal requirements: If required by law, a valid court order, or to protect the rights, property, or safety of our users or the public
8 Your Rights
You have the following rights over your personal data:
- Access: Request a copy of all data we hold about you
- Correction: Update or correct your information at any time via your profile page
- Deletion: Request complete deletion of your account and all associated data by emailing creatorin.info@gmail.com with the subject "Delete My Account"
- Disconnect Instagram: Revoke our Instagram access at any time from your settings page. All stored access tokens are deleted immediately upon disconnection
- Data portability: Request an export of your personal data in JSON format
- Opt out of marketing email: Use the unsubscribe link included in any product/marketing email at any time — this does not affect transactional emails
- Withdraw consent: Cancel your subscription and stop using the service at any time with no further obligation
We will respond to all data-related requests within 30 days of receipt.
9 Cookies
We use only essential storage mechanisms:
- Session token (localStorage) — keeps you logged in across page loads
- Refresh token (localStorage) — silently renews your session when it expires, so you aren't logged out mid-use; only used to request a new session token, never sent anywhere except our own servers
- Theme preference (localStorage) — remembers your light/dark mode choice
We use Google AdSense to display advertisements on some pages. Google may use cookies to serve ads based on your prior visits to our site or other sites. You can opt out of personalised advertising by visiting Google Ads Settings. We do not use Google Analytics or other analytics services.
10 Children's Privacy
CreatorIn is not directed at children under the age of 13. We do not knowingly collect personal information from anyone under 13 years of age. If you believe a child under 13 has created an account, please contact us immediately and we will delete the account and all associated data.
11 Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will notify you via email and display a notice on the platform at least 7 days before the changes take effect.
The "Last updated" date at the top of this page always reflects the most recent revision. Continued use of CreatorIn after changes are posted constitutes your acceptance of the updated policy.
12 Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out: