What we hold, and why.

Who this covers

Three different people read this page, and the law treats them differently, so the answers are kept separate rather than averaged.

• You are not a customer — we wrote to you about your own public posting numbers and you never asked us to. Start at the next section.
• You commented on a post by a creator who uses Crezio, and the comment set off one of their automatic replies. Start at “If you commented on a creator’s post”.
• You are a customer, or you asked for a free report. Start at “If you asked us for a report”. If you signed up for our weekly trends email, read its section too.

If we wrote to you and you are not a customer

How we got your address. From the contact field on your own public creator profile — the one you fill in when you switch to a professional or business account, and that the platform publishes. We reach it through a creator data provider that licenses that information. We did not take it from your messages and we did not buy a leaked list.

What we measured before writing. Counts that are visible on your public profile — views, likes, comments and shares on recent posts — compared against a published benchmark for your platform. We did not need an account, a login or your permission to read them, because they are the numbers anyone visiting your profile can see.

What the link in the email records. If you open it, we store that the page was opened, the public handle it was for, a timestamp, the browser’s user-agent string — the line your browser sends to every site naming itself and your operating system — and two things about the email itself: which platform the link was built for, and which of our emails you opened it from. We keep the user-agent so we can tell a real visit from an automated one, and the email number so we can stop sending a sequence that is not working. There is still no tracking pixel and nothing that reports whether you opened an email — only that you followed a link, and which one. We deliberately do not store the link itself: it is a credential that opens your page, and keeping a credential in order to count a page view is a cost with nothing on the other side of it.

Who actually sends the email. Not us directly — we use a specialist sending service, the same kind any company uses to run an email sequence. It receives your address and the handful of details the message is personalised with, every one of them from the public profile described above. It does not receive a report, a connected account, or anything you have typed into this site, because at this point there is nothing of yours here to send it.

How to be removed. Reply to the message and say so, or use whatever unsubscribe option your mail app offers on it. We honour that within ten business days, which is the maximum US law allows us. You do not have to give a reason.

How long we keep it if you never reply. Until you ask us to stop, or until the campaign it belongs to ends, whichever comes first. If you do ask us to stop, we keep your email address on a suppression list and nothing else — because deleting it outright is how you end up being written to again.

If you commented on a creator’s post

Some creators who use Crezio switch on automatic replies: when a comment on one of their posts contains a word they chose, Crezio sends the person who wrote it a private message, usually with a link. You never signed up with us, so this is what that leaves on our side. Comments that do not contain one of those words are not stored for this.

A creator can also have Crezio reply publicly under your comment, from their account, with a short note the creator wrote — usually that a message is on its way. That reply adds nothing to what we hold about you.

What we hold. The identifier the platform uses for your account, the identifiers of your comment and of the post it was on, when we received it, which of the creator’s replies it set off, whether and when the message was sent (or, if it was not, the reason our delivery service gave, in its own words), and the reference numbers our delivery service gives the comment and the message. We do not hold the text of your comment, and our records have no field for your name or handle.

If a creator asks you to follow them before sending the link, we also store when you tapped the button or replied, how many times, the identifier of that reply, and whether we could confirm that you follow them.

The link in the message. It carries a short code, recorded next to your comment. When the link is opened, our site records the time and browser type of each visit to that link — the browser type is the line your browser sends to every site naming itself and your operating system — and whether the visit reached the creator’s page. Because the code sits next to your comment, we treat those visits as information about you. Unless the creator has turned it off, the address the link opens also carries that code, the name of the platform you commented on and a tag marking the visit as coming from a direct message, so the creator’s own site, and any tools running on it, can read them. If that address is a payment link, the payments company behind it receives the code too.

If the creator records sales. If the creator connects a checkout or sales tool to Crezio, that tool can report a purchase or sign-up made through the link back to us, and we record which message it followed, its amount and currency if the tool sends them, whether it is paid or pending, when it happened, when we received the report, and the tool’s own reference for it. Anything else in the report is dropped, and our records have no field for card details, an email address or a name.

Who handles it. Your comment reaches us, and the message reaches you, through the creator’s connection to the platform, which is described under who else receives it below.

How long it is kept. How long this is kept is the creator’s decision; there is no fixed period. The record of your comment and of the message sent to you is removed if the creator’s Crezio account is deleted, or sooner if you or the creator ask. Records of visits to the link are not removed automatically, even if the creator’s account is deleted; on request they are de-identified, and the browser information is removed.

How to have it removed. Write to hello@crezio.ai with the handle you commented from and, if you can, which post. We will delete those records or de-identify them. A link already sent in a message keeps working, so its code can stay, but nothing in it will still point to you. You do not have to ask the creator first. Copies of the code already held by the creator’s own site or tools are theirs, and we cannot remove them; for those, ask the creator.

If you sent a creator a direct message

Some creators also switch on automatic replies to messages: a message to them containing a word they chose is answered in the same conversation, usually with a link. Messages that do not contain one of those words are not stored for this.

What we hold. The identifier the platform uses for your account, the identifiers of your message and of the conversation, when we received it, which of the creator’s replies it set off, the code of the link in the reply, whether and when the reply was sent (or, if it was not, the reason our delivery service gave, in its own words), and the reference numbers our delivery service gives the message and the reply. If a creator asks you to follow them before sending the link, we also store when you tapped the button or replied, how many times, the identifier of that reply, and whether we could confirm that you follow them. We do not hold the text of your message, and our records have no field for your name or handle. If your message was a reply to one of the creator’s stories, we also store that story’s identifier, never the story itself, so the creator can see which story it came from.

Everything else. The rest of the section above applies in the same way: the link in the reply and its visits, sales the creator records, who handles it, how long it is kept, and how to have it removed — write to hello@crezio.ai with the handle you sent the message from.

If you mentioned a creator in your story

Some creators also switch on a thank-you message for people who mention them in their story. When you do, we may reply in your conversation with the creator, sometimes with a link, at most once every seven days.

What we hold. For a mention that set one off: the identifier the platform uses for your account, the identifiers of the mention and of the conversation, when we received it, the code of the link in the reply if it has one, whether and when the reply was sent (or, if it was not, the reason our delivery service gave, in its own words), and our delivery service’s reference numbers. We do not store or copy your story, and our records have no field for your name or handle.

Everything else. The rest of the section for people who commented applies in the same way: the link and its visits, sales the creator records, who handles it, how long it is kept, and how to have it removed — write to hello@crezio.ai with the handle you mentioned the creator from.

If you asked us for a report, or you are a customer

From the report form: your email address, a display name if you give one, your content vertical, a stated goal, a stated challenge, and which platforms you say you post on. If you reached the form from an automated Instagram reply, the identifier that reply carried comes with you, so that the report reaches the right person.

When you connect a platform: the grant itself, and the posts, engagement metrics and message interactions that grant exposes. The grant is what decides the scope — we cannot read anything you did not allow.

When you upload a video for an edit: the video itself, including its picture, its sound and the words spoken in it. What happens to it is under how your content is analysed.

From billing: whatever our payments processor needs to take a payment. We never receive or store your card number.

From ordinary use of the site: standard server logs; on our marketing pages, page analytics without cookies, run for us by an analytics provider described in the list below; and — if you arrived from a link we published — which link it was, so we can tell which of our own channels works.

To keep the form from being abused: your IP address, stored against a short rolling window so that one machine cannot request an unlimited number of reports or key re-issues. This is a row in our database rather than a line in a log, which is why it is named here separately from the server logs above.

If you signed up for our weekly trends email

From the signup form: your email address, your niche, the platform you post on and the handle you typed (we do not check that it is yours), when you agreed to the email and the wording you agreed to, and which of our links brought you, if any.

What we do with it: send you one email a week about your niche, use your handle to tailor future issues, and show you Crezio offers we think are relevant to you. When you ask for a free script from an issue, we keep which topic you picked and which platform you picked it for.

Stopping it: every issue has a one-click unsubscribe link. It stops the email straight away. We keep the record of your signup until you ask us to delete it, and we will when you do.

What we do with it

Produce your analytics and your Content DNA report; schedule and publish the content you ask us to publish; run the message automations you configure; bill you; and send you transactional email about your own account. Nothing here is sold, and nothing here is handed to an advertiser.

One more use, and it is switched on unless you ask us to switch it off. A connected account contributes to the model for its niche, and what it contributes is patterns, never posts — the labels a scored post carries, and how each of those related to performance. Those relationships are pooled at the category level across many accounts, and you receive the same model back. Your posts, your transcripts, your numbers and your report stay in your workspace: nothing you published is reproduced, quoted or shown to another creator. You can have contributing turned off for your workspace by asking, and your own analysis and report are the same either way.

Signing in with Google or Facebook

What we receive. If you sign in to Crezio with a Google or Facebook account, that company sends us your name, your email address, a link to your profile picture and the identifier it uses for your account with us. On Facebook these are the permissions called public_profile and email. We do not ask either company for anything else when you sign in.

What we use it for. To create your Crezio account and sign you in to it. When your sign-in is linked to a Crezio workspace, we also record which one and your role in it.

While you are signed in. When you sign in with Google or Facebook, this is what we keep. Each time you sign in, Crezio creates a session record: when it started, when it expires, the IP address and browser type it was created from — the browser type is the line your browser sends to every site naming itself and your operating system — and a random token, a copy of which your browser keeps so that you stay signed in. A session lasts 7 days and is renewed while you keep using Crezio. Signing out deletes the record. If that request does not reach us, or you never sign out, the record stops working when it expires and is deleted within a few days after that.

What we do not keep. When you sign in, Google and Facebook also issue access tokens, which would let a service go back to them later. We use them once, to finish signing you in, and we do not store them. So nothing we keep from your sign-in can be used to ask either company for anything further.

How long we keep it. If you sign in with Google or Facebook and your sign-in is linked to a Crezio workspace, your name, email address, a link to your profile picture, your account identifier and the link to your workspace are kept until you ask us to delete them. Session records are the exception: signing out deletes one at once, and any other is deleted within a few days after it expires. If your sign-in is not linked to any Crezio workspace, for example because it was never linked to one or because that workspace was deleted, we delete all of this automatically, usually within about a week.

What signing in does not do. Signing in with Facebook does not let us post to your Facebook account or see your friends list; the sign-in permissions above include neither. Connecting a Facebook Page or an Instagram account so that we can analyse or publish your content is a separate step, with its own permission screen, described under “When you connect a platform” above.

How to disconnect it. In Facebook, go to Settings & privacy → Settings → Apps and websites, find Crezio and remove it. In your Google Account, go to Security → Your connections to third-party apps & services, find Crezio and delete the connection. Either one withdraws the permission you gave Crezio, so that account cannot sign you in to Crezio again unless you give it again. It does not sign out a browser that is already signed in; sign out in Crezio for that. Nor does it delete what we already hold — how to have that deleted is on its own page.

How your content is analysed

Plainly, because it is the paragraph most worth reading closely: the content of your posts is sent to third-party AI services for analysis, and the labels and scores that come back are what your report is made of. Those services are described in the list below. Your posts are sent so that they can be analysed for you, and for nothing else: we do not sell your content and we do not use it to train a model of our own.

If you upload a video for Crezio to edit. Editing a video means working on the video itself, including its picture, its sound and the words spoken in it, not only on your posts. We store the video you upload, the finished edit and the working files behind it. Our AI model providers and AI service providers process that content on our behalf to make the edit. They are in the list below. As with your posts, we do not sell any of it and do not use it to train a model of our own.

Who else receives it

Everyone behind the product who touches creator, commenter or prospect data, and what each one gets. We describe each one by the kind of company it is rather than by name. The named list of these service providers (our sub-processors) is available on request: write to hello@crezio.ai. Two more are described in the section for people we wrote to — the provider we license public contact details from, and the service that sends our cold email. Nobody else receives it from us — the niche model described above travels as patterns, and never as anything of yours.

How long we keep it

If you asked for a free report and never connected an account, the workspace created for you in our analysis service is deleted automatically after 14 days, along with anything held inside it, unless you uploaded a video for a free edit: that workspace is kept with the video, as described below. That is not a policy we intend to follow — it is a job that runs and deletes it, and we send reminders beforehand so the deletion is never a surprise.

The record of your original request — the email address and the answers you gave on the form — is kept separately and is not covered by that job. We keep it until you ask us to delete it, and we will when you do.

Videos you upload for an edit. We keep the videos you upload, the edits we make and frames from them for up to 12 months to improve the editor, even if you discard them. They’re private to Crezio. Deleting your account removes them, or email hello@crezio.ai. If you tell us something is wrong with an edit and add a note, we keep that note with the edit for up to 12 months, and only Crezio reads it. A video you post is kept like the rest of your content, as described below.

Two things outlive the video itself, and we would rather say so. We keep a record of each edit and the choices made on it, which we use to improve the editor. Once the video is deleted, that record holds your words only in a coded form, not as readable text. And the entry for the edit in our processing queue, which carries the words, is cleared on its own schedule: within a day of a finished edit, and within seven days of one that failed. While a free edit is still waiting its turn, that entry is kept until the edit is made or the free edit expires, and is then deleted.

For a beta or paying account, we keep your data for as long as the account is open, and for records we are legally required to hold — invoices, chiefly — after it closes. Prospect records are covered above.

Your rights

You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, ask for it in a portable form, or withdraw a consent you gave. Today every one of those is a human answering an email, not a button in the product. We would rather tell you that than imply a self-serve flow that does not exist. Write to hello@crezio.ai and it reaches a person.

Disconnecting is the exception: you can remove a connected platform inside the product at any time, which stops further collection from it and reduces your bill accordingly. You can also revoke the grant from the platform’s own settings, which we cannot override.

Turning off the niche model is one of those requests too, and the one worth naming separately because it is on unless you ask. Write to the same address and your workspace stops contributing patterns to its category. Your own report and analysis do not change.

Children

Crezio is not directed at children under 13 and we do not knowingly collect their personal information. If you believe a child has given us data, write to the address above and we will delete it.

Where your data is processed

Two of the vendors listed above process your data in the United States, and we can say so because we chose where: our cloud database provider is pinned to a single US region for the life of the project, and our hosting provider, which runs the site, the analysis service, the service that makes your video edits and our processing queue, is set to a US region on every service we operate. In both cases we picked the location when we set the service up, and neither company can move it afterwards.

For the rest, we cannot honestly tell you the data stays in the United States, so we are not going to say it. The line we drew is whether the location is ours to set. Our email delivery provider promises US processing in its data-processing agreement — but it is their estate, not ours, and we would not be told if that changed, so we have stopped listing it as something we can vouch for. Our payments processor’s own terms reserve the right to move personal data globally between its affiliates. Our social account connection provider, which holds the connection to your social accounts, is a Spanish company and says your information may be processed in countries other than your own. Our email contact platform, our second social account connection provider and our analytics provider publish no processing location we can point at. We have not set a region with our AI model providers or AI service providers, the terms of one of them say data may be cached in any country where it has facilities, and we have not confirmed where each of them processes, so we make no claim about it. Our team chat provider, where our own operational alerts land, is the clearest case of the line we drew: it is a US company owned by another US company, and we have still neither chosen a region for it nor verified one, so we are not going to tell you where those alerts are processed. Being a US-registered company is not the same as processing in the US, and we were previously treating it as though it were.

Two more deserve to be said plainly rather than left in a list, and neither is in the paragraph above. Our edge network provider is the first.

It sits in front of the whole site rather than one part of it, and it does three separate jobs for us, which is why it appears three times in the list above. Every request you make to us — including anything you type into a form, and your IP address — arrives at whichever of its locations is nearest you before it reaches our servers. If you are in Frankfurt, that is Frankfurt. It is also our object-storage provider: it stores the media and images your account produces, and that storage picks a location automatically by region rather than being pinned to one country. And it runs the check that tells a person from a script when you submit a form, which happens in your browser and sends your IP address straight to that provider without passing through us.

We have corrected this paragraph twice and got it wrong in both directions, so here is the whole of it. An earlier version said this provider only ran a bot check and that nothing else we hold about you was sent to it — too narrow, written from a reading of one of our two codebases. The fix for that then dropped the bot check itself. All three jobs are now listed. We would rather show the correction than quietly restate it.

The platforms are the second, and not an exception we can fix: what you grant to Instagram, Facebook, TikTok, YouTube or LinkedIn is processed wherever that platform’s own terms say, in whichever countries it operates. That is outside our control — as is every other thing a platform decides, which the terms say in the same words rather than different ones.

The other policy you may have seen

Crezio’s analysis service publishes a narrower notice at its own /api/v1/legal/privacy address, written for the Instagram and Facebook connection and declared to Meta. It remains correct about what it covers. This page is the canonical one, and it governs wherever the two differ.

Changes

Posted here, with the date at the top of the page moved. If a change is material to you we will say so in an email rather than rely on you re-reading this.

Questions, or any of the requests above: hello@crezio.ai. The terms of service cover the other half.