Privacy Policy

1. Introduction

Creator SEO Generator ("we", "our", "us") operates the website and the associated SaaS platform that provides AI-powered content generation tools for social media creators, including TikTok hashtag and caption generators, YouTube title and description generators, Instagram bio generators, and hook generators.

This Privacy Policy explains what personal data we collect, why we collect it, how we process it, and what rights you have over your data. This policy applies to all users worldwide and is designed to comply with the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

By creating an account or using our services, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

The data controller responsible for the processing of your personal data is Creator SEO Generator. For any questions regarding this policy or your personal data, you may contact us at:

privacy@creatorseo.com

3. Data We Collect

3.1 Account Data

When you create an account, we collect your email address and an encrypted password. Authentication is managed through Supabase, which stores your credentials securely.

3.2 Usage Data

We track the number of content generations you perform in order to enforce plan limits (free, Creator, and Business plans). This includes your total generation count, monthly generation count, current plan type, and the date of your last usage reset.

3.3 Payment Data

If you subscribe to a paid plan (Creator or Business), your payment information is collected and processed entirely by Stripe. We never receive, store, or have access to your full credit card number. We store only your Stripe Customer ID and Subscription ID in our database for plan management.

3.4 Generated Content

The text inputs you provide (topics, niches, keywords) are processed to generate output. We do not permanently store your input prompts or generated outputs on our servers after the response is delivered to your browser.

3.5 Technical Data

Our hosting provider (Vercel) may automatically collect standard server logs including IP addresses, browser type, referring pages, and timestamps. This data is used for security, performance monitoring, and abuse prevention.

4. Legal Basis for Processing (GDPR)

We process your personal data on the following legal grounds:

• •Contract performance: processing your account data and usage tracking is necessary to provide the service you signed up for.
• •Legitimate interest: server logs and technical data are processed for security and service reliability.
• •Consent: where required (e.g., optional cookies), we obtain your explicit consent before processing.

5. How We Use Your Data

Your personal data is used exclusively to:

• ✓ Authenticate you and maintain your session
• ✓ Track your generation usage against your plan limits
• ✓ Process and manage your subscription payments
• ✓ Communicate important service updates or security notifications
• ✓ Improve our platform's performance and reliability
• ✓ Prevent fraud and abuse

We do not use your data for advertising. We do not sell, rent, or trade your personal information to any third party.

6. Third-Party Services

We rely on the following third-party services to operate our platform. Each processes data according to their own privacy policies:

7. Data Retention

We retain your account data and usage records for as long as your account remains active. If you delete your account, we will remove your personal data from our systems within 30 days, except where we are legally required to retain certain information (e.g., financial records for tax purposes).

Stripe retains payment-related data according to its own retention policies and legal obligations.

8. Your Rights

Under the GDPR and applicable data protection laws, you have the right to:

• • Access the personal data we hold about you
• • Rectify inaccurate or incomplete data
• • Erase your personal data ("right to be forgotten")
• • Restrict processing of your data in certain circumstances
• • Port your data to another service
• • Object to certain types of processing
• • Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please email us at privacy@creatorseo.com. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority.

9. Security Measures

We implement appropriate technical and organizational measures to protect your personal data, including:

• ✓ HTTPS encryption for all data in transit
• ✓ Encrypted password storage via Supabase Auth (bcrypt)
• ✓ Row Level Security (RLS) on all database tables
• ✓ Stripe PCI DSS Level 1 compliance for payment data
• ✓ Session-based authentication with secure cookie handling

While we take all reasonable steps to protect your data, no system is completely secure. We encourage you to use a strong, unique password for your account.

10. International Data Transfers

Our third-party service providers (Supabase, Stripe, Vercel) may process data in the United States or other jurisdictions outside the European Economic Area. These transfers are protected by appropriate safeguards including Standard Contractual Clauses (SCCs) and the EU-U.S. Data Privacy Framework where applicable.

11. Children's Privacy

Our service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "last updated" date at the top of this page. For material changes, we will notify registered users by email. Continued use of the service after changes constitutes acceptance of the updated policy.

13. Contact

For any questions, requests, or complaints regarding this Privacy Policy or the handling of your personal data, please contact us: