Privacy Policy

3.1 What We Collect

• Account information: Name, email, password (hashed, never stored in plain text), profile picture, country, timezone
• CreatorBrain™ data: Creator Identity, Rules, Knowledge Vault uploads, Stories, Examples, Golden Scripts, Learning Requests
• YouTube data (only if you connect your channel): Public video list and captions/transcripts, accessed read-only, used solely to analyze writing style
• Generated scripts: Stored in your Script Library
• Billing information: Processed by Razorpay; CreatorBrain retains invoice records but not full payment card details
• Business/invoice details (optional): If you add them from the Billing page for detailed invoices — company name, GST number, VAT number, invoice email, billing address
• Usage data: Basic technical data (device/browser sessions) for account security purposes
• Cookies/session data: Basic cookies necessary to keep you logged in and remember your preferences (e.g. Grid/List view choice in Script Library). CreatorBrain does not currently use tracking or advertising cookies.

3.1A Your Consent (India's DPDP Act alignment)

Under India's Digital Personal Data Protection Act, you have the right to clear notice and to give (or withdraw) consent for how your personal data is used. In practical terms on CreatorBrain: you actively consent when you check the Terms/Privacy box at signup, and separately when you choose to connect YouTube (a distinct, optional consent). You can withdraw consent for YouTube access at any time by disconnecting it, and can withdraw all consent by deleting your account (Section 3.5 below), which removes your data rather than merely deactivating it.

3.1B International Users & Other Privacy Frameworks

CreatorBrain's Free plan is open to signups from anywhere in the world, not only India, so Section 3.1A above isn't the only framework that may apply to you. If you're located in the European Economic Area or United Kingdom, you have equivalent rights under the GDPR — including access, correction, deletion, and data portability — all of which are already available in practice through the Export and Delete Account controls described in Section 3.5. If you're a California resident, similar rights apply under the CCPA/CPRA. In every case, the same underlying mechanism applies regardless of which law governs your specific rights: export your data, correct it from Account Settings, or delete your account entirely.

3.2 How We Use Your Data

• To provide the core service — generating and personalizing scripts based on your CreatorBrain™ profile
• To process payments and manage your subscription
• To send account-related emails — verification codes, password resets, billing notifications, login alerts
• To improve the product — in aggregate/anonymized form only; your individual scripts and CreatorBrain™ data are never used to improve outputs for other users

3.3 Third-Party Services We Use

• Supabase — database, authentication, and hosting infrastructure
• Razorpay — payment processing
• Google — OAuth for Sign-In and YouTube Connect
• Anthropic (Claude API) — AI processing for YouTube style analysis and script generation
• Vercel — application hosting
• Resend — transactional email delivery

Each of these processes data only as needed to provide their specific function — none of them are permitted to use your data for their own independent purposes beyond that.

Google API Services User Data Policy: CreatorBrain's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements — YouTube video/caption data accessed through YouTube Connect is used solely to analyze your writing style for script personalization, is never used for advertising, and is never transferred to any other party.

AI model training: Data you submit to CreatorBrain — your prompts, Creator Identity, and CreatorBrain™ profile — is sent to Anthropic's Claude API solely to generate your scripts and analyze your YouTube style. Anthropic's API does not use this data to train its models. Your content is never used to train any AI model, ours or anyone else's.

3.4 Data Storage & Security

Your data is stored in Supabase's PostgreSQL database with Row Level Security — meaning your CreatorBrain™ data and scripts are technically inaccessible to other users at the database level, not just hidden in the interface.

3.5 Your Rights

• Export: You can export your CreatorBrain™ data and your account-level data at any time.
• Deletion: You can permanently delete your account and all associated data at any time.
• Correction: You can update your Account Settings and CreatorBrain™ profile at any time.
• Disconnect YouTube: You can revoke YouTube access at any time from CreatorBrain™, which stops any further analysis of your channel.

3.6 Data Retention

Your data is retained as long as your account is active. Upon account deletion, all data is permanently removed — this is not a soft delete, and cannot be reversed.

3.7 Children's Privacy

CreatorBrain is not directed at children and is not intended for use by anyone under the age of 18 (or the age of majority in their jurisdiction).

3.8 International Data Transfers

Since CreatorBrain serves both Indian and international customers, your data may be processed in different countries depending on where our infrastructure providers (Supabase, Vercel, Anthropic) operate.

3.9 Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notice before taking effect.

3.10 Contact

Questions about this Privacy Policy or your data: creatorbrainoffical@gmail.com

3.11 Grievance Officer

Under India's IT Rules, platforms serving Indian users are generally required to name a specific Grievance Officer with contact details for complaints, separate from general support email.

Grievance Officer: Halima Ansari, creatorbrainoffical@gmail.com

3.12 Data Breach Notification

In the event of a data breach affecting your personal information, we will notify affected users via email within a reasonable timeframe and take appropriate steps to secure the affected data.

3.13 Marketing Communications

Product update emails are opt-in/opt-out controlled from the Notification Preferences section of Account Settings. We do not send marketing emails to users who have opted out, and transactional emails (verification, billing, security alerts) are sent regardless of marketing preference since they're necessary for account operation.