Privacy Policy

01 — Information We Collect#

On this website

When you contact us through creatorcopilot.app — for example, to request a demo or ask about pricing — we collect the information you submit, such as your name, email address, company, phone number, and message. We also collect standard web server logs including IP address, browser type, and pages visited. These logs are used solely for security and operational purposes.

Through the Creator Copilot platform

Creator Copilot monitors public posts from creators who have explicitly consented to a campaign partnership with your agency or brand. When you or a creator uses Creator Copilot, we may collect:

• Account information — name, email address, company name
• A creator's consent record for a given campaign, including the terms shown, a timestamp, and the IP address the consent was given from
• Social media profile data from connected Instagram, TikTok, Facebook, and YouTube accounts (username, follower count, and post performance metrics such as reach, impressions, likes, comments, and saves)
• OAuth access tokens used to retrieve social media data — stored encrypted at rest
• Campaign performance data generated from connected, consented social media accounts

In addition to each platform’s official API, we may use third-party tools to gather supplementary performance metrics and capture public content — such as historical Stories — that isn’t otherwise available through a direct integration. This only applies to accounts belonging to creators who have consented to a campaign partnership, and only to content that is publicly visible on their profile.

02 — Social Media Authorization#

Before any monitoring begins, a creator receives a secure, time-limited link and is shown the plain-language terms of the campaign partnership. Consent is only recorded once a creator explicitly confirms — we keep a timestamped, versioned record of exactly what was agreed to and when.

Once a creator has consented, they connect their own Instagram, TikTok, Facebook, or YouTube account through the official authorization flow provided by each platform. When you connect an account, you explicitly authorize Creator Copilot to access your public profile and post performance data for the purpose of generating campaign reports for your agency or brand partner.

We access only what you authorize. We do not post content on your behalf, read private messages, or collect data beyond what is necessary for campaign performance reporting.

You can revoke access at any time through your social media account settings. Upon revocation, we will no longer retrieve new data from that account.

03 — How We Use Your Data#

• To provide campaign performance reporting to your agency partners
• To fulfill the services described in your service agreement with Creator Copilot or your agency
• To communicate with you about your account
• To improve the reliability and performance of our services

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

04 — Security#

We take the security of your data seriously and maintain the following safeguards:

• OAuth access tokens are encrypted at rest using AES-256-GCM
• Creator consent is recorded with a timestamp and a cryptographic hash of the exact terms shown, so it can be verified later and cannot be altered after the fact
• Application logs are processed through a SOC 2 compliant logging provider and permanently deleted after a defined retention period
• Access to production systems is restricted to authorized Creator Copilot team members
• Data in transit is protected using TLS encryption
• Infrastructure is hosted on AWS with industry-standard access controls

05 — Data Retention#

We retain your data only as long as necessary to provide our services:

• Application and server logs are retained for a defined period and permanently deleted thereafter
• Campaign performance data is retained for the duration of your active service agreement
• Social media access tokens are retained until you revoke authorization or request deletion
• Upon account closure, personal data is permanently deleted within 30 days

06 — Your Rights#

You have the right to access, correct, or request deletion of your personal information at any time. You may also request a copy of the data we hold about you, or ask us to restrict how we use it.

07 — Privacy Requests & Contact#

Creator Copilot is operated by DesignSwift, LLC. To submit a data access, correction, or deletion request — or for any questions about this policy — email us at privacy@designswift.com.

Please include your full name and email address in your message and we will begin the process within 5 business days.

08 — Changes to This Policy#

We may update this policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Continued use of our services after any changes constitutes acceptance of the revised policy.