Privacy policy

Creator OS is a video pipeline that helps creators cut, package, and publish content across YouTube, Instagram Reels, and (soon) other platforms. This document explains what data we collect and why.

• Account data — email address, workspace name, login timestamps, and IP address at signup. Used to sign you in and distinguish workspaces.
• Content you upload — video files, transcripts, titles, thumbnails, and metadata for projects you create. Stored on Cloudflare R2 (encrypted at rest) with access limited to your workspace.
• Platform OAuth tokens — when you connect YouTube or Instagram, we store the access and refresh tokens issued by those platforms. Never shared, never resold. You can disconnect any time in Settings.
• Analytics and earnings data — impressions, views, engagement, and revenue numbers we fetch on your behalf from connected platforms. Used only to render your Analytics and Earnings dashboards.
• Payment data — billing is handled by Stripe. We store your Stripe customer id and subscription status but never your card number or CVV.
• Product usage data — when you use Creator OS while signed in, we record which pages you visit and which core actions you take (uploading an asset, creating a project, publishing, subscribing, using the editor). Stored in our own database, not sent to any external analytics service. Used only to improve the product. IP addresses in this dataset are truncated after 30 days.

• We do not sell your data.
• We do not train AI models on your uploaded content.
• We do not share your platform OAuth tokens with any third party.
• We do not use tracking pixels or third-party advertising cookies.

We use a small set of trusted providers to run the service:

• Google Cloud (hosting, when we ship — currently local dev only)
• Cloudflare (CDN + R2 media storage)
• Stripe (payments)
• Resend (transactional email)
• Sentry (error tracking; no PII sent)
• Anthropic (AI packaging, when enabled — sends only titles/transcripts)

You can export or delete your data at any time from Settings → Privacy, or by emailing us at hello@creator-os.dev. Deletion is soft for 24 hours (in case you change your mind), then hard — we cannot recover a deleted account after that window.

If you're in the EU or UK, GDPR / UK-GDPR apply. If you're in California, CCPA applies. In both cases: export, delete, correct, object — same channel.

• Account + workspace data: kept while your account is active.
• Uploaded video files: kept for the life of the project; deleted when you delete the project or the account.
• Sessions: expire 30 days after last use, hard-deleted daily by a background job.
• Login codes: deleted 10 minutes after issue or immediately on use.

We'll email account holders + update this page's "Last updated" date before any material change. If you disagree with a change, you can export + delete your account under Your rights above.

hello@creator-os.dev