Privacy Policy

1. Data controller

The controller for data collected via the creapost.io website and the Creapost application is:

MRR CREATIVE AGENCY LTD
71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Privacy contact: gltdigitalagency@gmail.com

2. Definitions

• Account: the personal space created by the user to access the Creapost service.
• Client / User: any individual or legal entity using the Site or the Creapost application.
• Personal data: any information relating to an identified or identifiable individual.
• Service: the Creapost application, its content-generation features and associated publishing.
• Processor: any provider processing personal data on behalf of MRR CREATIVE AGENCY LTD.

3. Data we collect

We collect the following data:

• Account data: name, email address, profile picture (via our authentication provider, Clerk).
• Brand data: the information you provide in the "Brand" ("Marque") tab (business, positioning, audience, tone, topics, knowledge documents) so Creapost can generate content tailored to you.
• Generated content: the text, articles and visuals created for your account, as well as their publishing status.
• Social network connections: if you choose to connect a LinkedIn, Facebook or Instagram account, the access tokens needed to publish (an optional feature).
• Technical data: IP address, session identifier, browser type and connection logs needed for the service to run properly and securely.

4. Purposes

This data is used to:

• Create and secure your account;
• Generate personalized content using our AI models;
• Publish that content on the social networks you have connected, if you request it;
• Provide support and improve the service;
• Meet our legal and security obligations.

5. Recipients and processors

Your data may be shared with the following providers, strictly to the extent necessary for the service to operate:

• Clerk (authentication and account management);
• Supabase (database, hosted in the European Union);
• Anthropic (AI text generation);
• Kie.ai (AI visual generation);
• Wasabi Technologies (storage of generated files and visuals);
• bundle.social (connecting and publishing to LinkedIn, Facebook and Instagram, only if you enable this feature);
• MailerLite (waitlist and email communications management);
• Whop (payment processing and subscription management);
• Meta Platforms, Inc. (ad measurement and personalization via the Meta pixel and Conversions API - see section 10, "Cookies and trackers");
• Crisp (support chat, if you use the Site's chat widget);
• Vercel (hosting of the site and application).

These providers may be located outside the European Union (in particular in the United States). In that case, we ensure they offer appropriate safeguards (European Commission standard contractual clauses or an equivalent mechanism).

We may also need to disclose certain data if required by law, or in the event of a merger, acquisition or sale of all or part of MRR CREATIVE AGENCY LTD's assets, in which case your data may be among the transferred assets. We never sell your personal data to third parties for advertising purposes.

6. Data retention and transfer

Your data is retained for as long as your account exists, then deleted or anonymized within a reasonable period after it is closed, unless a longer retention period is legally required. Your account data is hosted in the European Union (Supabase, eu-west-1 region); some of the processors listed above may process data outside the EU, strictly within the scope of providing their service.

7. Your rights

Under the GDPR and UK data protection law (UK GDPR), you have the right to access, rectify, erase, restrict, object to the processing of, and port your data. You can exercise these rights by writing to us at gltdigitalagency@gmail.com. You also have the right to lodge a complaint with the competent supervisory authority (the CNIL in France, or the Information Commissioner's Office - ICO - in the United Kingdom).

8. Security

We implement reasonable technical and organizational measures (encryption of data in transit, access control, per-account data isolation) to protect your data against unauthorized access, alteration or disclosure. As no transmission of data over the Internet is entirely secure, we cannot, however, guarantee absolute security.

9. Protection of minors

The Service is aimed at professionals and businesses and is not intended for individuals under 16. We do not knowingly collect personal data about minors. If you believe a minor has provided us with data, please contact us so we can delete it.

10. Cookies and trackers

The Site sets the following cookies and trackers:

• Strictly necessary cookies: authentication and session management, provided by our authentication provider, Clerk - required for the Site and application to function.
• Advertising tracker: the Meta pixel (Facebook/Instagram) loads as soon as you arrive on the Site, to measure the performance of our ad campaigns and personalize the ads shown to you on Meta platforms. Technical information (IP address, browser identifier) and, if you create an account, your email in hashed form may be sent to Meta for this purpose.
• Chat widget: if you use our support chat, Crisp may set a technical cookie to maintain your conversation.

You can refuse or delete these cookies at any time through your browser settings. You can also manage your Meta advertising preferences from your Facebook account settings or via facebook.com/adpreferences.

11. Links to third-party sites

The Service may contain links to third-party sites (social networks in particular) that we do not operate. We encourage you to review the privacy policy of each third-party site you visit; we have no control over their content and disclaim any liability in that regard.

12. Changes to this policy

This policy may be updated periodically. The date of the last update appears at the top of this page. We encourage you to review it regularly.