Privacy Policy
Last updated: August 6, 2026
CreatorHero IO ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
Information We Collect
Personal Information
We collect information that you provide directly to us:
- Account information (name, email address, password)
- Profile information (optional user details)
- DM conversation data (messages, fan interactions)
- Usage data (how you interact with our service)
Automatically Collected Information
- Log data (IP address, browser type, pages visited)
- Device information (device type, operating system)
- Cookies and similar tracking technologies
How We Use Your Information
We use the collected information to:
- Provide, maintain, and improve our services
- Process your transactions and send related information
- Send you technical notices and support messages
- Respond to your comments and questions
- Detect and prevent fraud and abuse
- Analyze usage patterns to improve user experience
Information Sharing
We do not sell your personal information. We may share your information only in these circumstances:
- With your consent: When you explicitly agree to share information
- Service providers: Third-party vendors who help us operate our service
- Legal requirements: When required by law or to protect our rights
- Business transfers: In connection with a merger, sale, or acquisition
Third-Party Services
We use trusted third-party services to provide and improve our Service. These providers have access to your personal information only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose:
- Supabase: Database, authentication, and hosting services
- Stripe: Payment processing and subscription management
- Google Gemini: AI-powered DM response generation
- Resend: Transactional email delivery
- Twilio: SMS notification delivery, where you enable SMS alerts
- Steel.dev: Browser automation used to read and send messages in the creator inboxes you connect
- Upstash: Rate limiting, which processes an identifier derived from your session
- Vercel: Application hosting and content delivery
- Sentry: Error tracking and performance monitoring
- Google Analytics and DataFast: Product and traffic analytics, subject to your cookie choices
- Termly: Cookie consent management, which records your consent choices and the IP address they were made from
Each of these services has their own privacy policies governing their use of your information.
Integrations you connect
Where you connect an outside tool, we store the access and refresh tokens that connection issues, and we send that tool the project and scope-creep information the integration exists to deliver. This happens only for tools you connect yourself, and only while the connection is active. Disconnecting it stops the sending and removes the stored tokens. Supported destinations are Asana, Discord, GitHub, Google (Calendar and Sheets), Linear, Microsoft Teams, Notion, Slack, Telegram, Toggl, Trello, WhatsApp and Zapier, plus email and SMS delivery.
Once information reaches one of these tools it is governed by that tool’s privacy policy and your settings there, not by this one.
Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication mechanisms
- Employee training on data protection
Your Rights
Depending on your location, you may have certain rights regarding your personal information:
- Access: Request a copy of your personal information
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your personal information
- Portability: Receive your data in a portable format
- Objection: Object to processing of your personal information
To exercise these rights, please contact us at support@creatorhero.io
GDPR Compliance (EU Users)
If you are located in the European Economic Area (EEA), you have specific rights under the General Data Protection Regulation (GDPR):
- Right to access: You can request copies of your personal data
- Right to rectification: You can request correction of inaccurate information
- Right to erasure: You can request deletion of your personal data
- Right to restrict processing: You can request that we limit how we use your data
- Right to data portability: You can request a copy of your data in machine-readable format
- Right to object: You can object to our processing of your personal data
- Rights related to automated decision-making: You can request human review of automated decisions
We process your data based on: (1) your consent, (2) fulfillment of our contract with you, (3) compliance with legal obligations, or (4) our legitimate business interests. You can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
California Privacy Rights (CCPA)
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):
- Right to know: You can request information about the personal data we collect, use, and disclose
- Right to delete: You can request deletion of your personal information
- Right to opt-out: You can opt out of the sale of personal information (we do not sell personal data)
- Right to non-discrimination: We will not discriminate against you for exercising your rights
To exercise these rights, please contact us at support@creatorhero.io with "California Privacy Rights" in the subject line. We will respond to verifiable requests within 45 days.
Data Retention
We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. When you delete your account, we will delete or anonymize your personal information within 90 days, unless we are required to retain it for legal obligations.
Cookies
We use cookies and similar tracking technologies to collect information about your browsing activities. You can control cookies through your browser settings, but disabling cookies may affect the functionality of our service.
Children's Privacy
Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us.
International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your personal information in accordance with this Privacy Policy.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Continued use of our service after changes constitutes acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy, please contact us at:
Email: support@creatorhero.io