Privacy Policy

This policy describes how creain handles personal data in the product as it works today. If a signed agreement with you says something different, that agreement controls for the conflicting point.

1. Who we are

creain (“we”, “us”) is an influencer marketing platform. Brands and operators run creator campaigns in the creain web app. Influencers usually work with creain over WhatsApp (messages, campaign asks, approvals, negotiation) unless they later choose to use the app themselves.

Privacy contact: hello@creain.ai

2. Scope

This policy covers personal data processed when you use:

• creain.ai and the creain web app (including password-gated team access where enabled)
• WhatsApp messaging connected to creain via Meta’s WhatsApp Cloud API
• Optional Instagram Connect (Meta Instagram Login / Business Login OAuth) and related Instagram Graph API reads after a creator connects
• Operational tools used by the creain team (for example Google Sheets / Drive sync and CSV exports)

3. Data we collect

We collect only what is needed to run campaigns and the features you use. Categories depend on your role (creator, brand, or operator).

3.1 Creator / influencer profile

• Profile attributes you provide or confirm (for example name, Instagram handle, contact details, language, and other “About you” fields used for discovery and campaign fit)
• WhatsApp phone number used to message you about campaigns
• Campaign participation (shortlists, Soft / Hard / Choice responses, approvals, commercials / negotiation, deliverables, opt-out such as Drop campaign where offered)

3.1.1 The creain.ai/join sign-up form

Creators can join creain by filling the form at creain.ai/join. It collects your name, Instagram username (or YouTube channel link), follower and subscriber counts, WhatsApp number, email, birthdate, gender, state, city, pincode, address, languages, content categories, barter preference and your rate for one Reel. We use this only to offer you brand campaigns that fit you. By submitting the form you agree that creain can contact you on WhatsApp and email about brand campaigns. To have your details removed, email partnerships@creain.ai.

3.2 Brand and campaign data

• Brand account and campaign details, briefs, shortlists, intents, approvals, commercials, deliverables, costs, and in-app chat used by brands/ops

3.3 WhatsApp communications

• Message content and metadata needed to run campaign conversations (including interactive button replies such as Accept / Revert / Skip)
• Delivery / status information from Meta’s WhatsApp Cloud API when messaging is enabled

3.4 Instagram Connect (optional)

Connecting Instagram is optional. Creators can Skip Connect; Skip does not block core campaign progress that already unlocked without Connect. When a creator chooses Connect, Meta’s OAuth flow runs on creain.ai and we may process:

• Instagram account identifiers and authorized profile fields returned by Meta (for example username / handle, follower count, media count, and related profile fields Meta returns under the permissions granted)
• Authorized media metadata (for example media id, type, timestamp, permalink, and engagement counts Meta returns) used to understand creator fit for campaigns
• Media insights for eligible content (for example Reel reach / views and similar lifetime metrics) when the instagram_business_manage_insights permission is granted — used to help brands evaluate campaign fit, not to sell ads against you
• OAuth access tokens we store so the connection can keep working (refresh / re-read authorized data). Tokens are not shown in the brand UI or sheets; brands/ops typically see a connected Yes/No (and public handle where already part of the creator profile)

We use Instagram Graph API hosts Meta documents for Instagram Login (for example graph.instagram.com). We do not post to Instagram, send Instagram DMs, or publish content on your behalf through Connect. We do not ask for Instagram passwords on creain pages — login happens on Meta / Instagram.

3.5 Operational sheets / Drive / exports

• Copies or syncs of creator, campaign, chat, cost, deliverable, and related records used for internal ops (for example Google Sheets, Google Drive campaign folders, or CSV exports generated by creain)

3.6 Technical and security data

• Basic logs needed to operate the service (request timing, error diagnostics, webhook / OAuth delivery status)
• Optional team password-gate cookie on creain.ai for staff access to the web app — the public Privacy page at /privacy is not behind that gate

4. Why we use data (purposes)

• Operate campaigns: discovery / matching, shortlists, Soft / Hard / Choice, approvals, commercials, deliverables, and brand/ops chat
• Reach creators on WhatsApp and keep brand/ops messaging in sync with those conversations
• Optional Instagram Connect: confirm a Professional account is linked, read authorized profile / media / insights for campaign fit, and show connected status to brands/ops
• Internal operations, quality, troubleshooting, and spreadsheet / Drive workflows used by the creain team
• Security, abuse prevention, and legal / accounting obligations

We do not sell personal data. We do not use WhatsApp or Instagram message or insights content to build unrelated advertising profiles about you.

5. How we store data and who processes it

Depending on the feature, data may be processed by creain and by processors we use to run the product:

• Meta — WhatsApp Cloud API and Instagram Login / Graph API when those features are used (under Meta’s terms and policies)
• Vercel — hosting for creain.ai, OAuth callback / Connect pages, WhatsApp webhook endpoints, and related APIs; optional private blob storage may temporarily hold Connect tokens if local Admin sync is unavailable
• Supabase — durable storage for WhatsApp threads / messages in production messaging flows where enabled
• Google — Sheets and/or Drive when ops sync or campaign folders are enabled
• creain operational stores — application databases / JSON sidecars and exports used by the team to run campaigns (Instagram tokens are kept out of public UI and sheets)

Data in transit to our services uses HTTPS where supported. Access inside the team is limited to people who need it to operate campaigns.

6. Retention

We keep personal data for as long as needed to run campaigns, maintain account and campaign history, meet legal and accounting needs, and resolve disputes. WhatsApp threads, Instagram connection tokens, and sheet / Drive copies are retained while the related workspace or campaign relationship is active, then deleted or archived according to our internal practices. You can ask us to delete data where applicable (see Contact and Disconnect).

7. Sharing

We may share personal data with:

• Service providers listed above that host or power creain
• Brand customers and authorized operators for campaigns you participate in (profile and campaign-relevant details; Instagram connected Yes/No; not your Instagram password or raw access tokens)
• Authorities when required by law, or to protect rights, safety, and the integrity of the service

8. Your choices and rights

• Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal data, or to object to certain uses
• Creators can often update profile details through the flows we provide (including WhatsApp profile reconfirm where enabled)
• Instagram Connect is optional; you may Skip during the campaign ask, or decline Meta authorization

To exercise rights or ask questions, email hello@creain.ai.

9. How to disconnect Instagram

You can end Instagram Connect in either (or both) of these ways:

• In Instagram / Meta: revoke creain’s access under Apps and websites / Business integrations (wording varies by Meta’s UI)
• Email hello@creain.ai and ask us to disconnect your Instagram link in creain and delete stored Connect tokens where we hold them

After disconnect, we stop using new Instagram Graph reads for that connection. Brand/ops may still see historical campaign records that were already created.

10. Security

We use reasonable technical and organizational measures (access controls, encrypted transport where supported, limited team access, and keeping secrets / tokens out of public UI). No method of transmission or storage is perfectly secure. Report suspected incidents to hello@creain.ai.

11. International processing

creain may process data in the countries where we or our providers operate. Where required, we will use appropriate safeguards for cross-border transfers.

12. Children

creain is not directed at children under 16 (or the higher age required in your region). We do not knowingly collect personal data from children.

13. Changes

We may update this policy as creain evolves. The “Last updated” date above will change when we publish revisions. Material changes will be noted on this page or by other reasonable notice. The public URL for this policy remains https://creain.ai/privacy unless we announce a move.

14. Contact

Privacy requests and questions: hello@creain.ai
Website: https://www.creain.ai
Privacy Policy URL: https://creain.ai/privacy