Privacy Policy

1. Who we are

Cre8 Studio is a video creation and automation platform operated by BMS Creative Concept. When we say “Service” in this Policy, we mean the Cre8 Studio web and related applications, including our integrations with YouTube, Facebook, Instagram, TikTok and any other supported platforms.

We act as a “controller” for the data we collect directly from you through the Service, and as a “processor” for certain actions we perform on your behalf on third-party platforms.

2. Information we collect

2.1 Information you provide directly

• Account details such as name, email address, password or login credentials for Cre8 Studio.
• Profile information (for example, brand name, logo, preferred niches or categories).
• Content you upload, generate or schedule through the Service (videos, images, captions, titles, metadata, etc.).
• Communication data when you contact us for support or respond to surveys.
• Billing and subscription information processed via our payment partners (we do not store full card numbers).

2.2 Information we receive from connected platforms

When you connect your YouTube channel or other social accounts, we may receive certain data via their official APIs, subject to your permissions. This may include:

• Basic account and channel identifiers (for example, channel ID, page ID, username, profile image, country/region).
• Permissions / scopes granted (upload, manage videos, read basic analytics where applicable).
• Access tokens and, where required, refresh tokens that allow us to perform authorised actions on your behalf.
• Content-level information such as titles, descriptions, thumbnails, and status of videos you create or manage through Cre8 Studio.
• Limited performance metrics (for example, views, likes, watch time) where enabled to display reports to you.

2.3 Automatically collected information

We also collect limited technical information when you use the Service, such as:

• Device and browser information, IP address, and approximate location (country/region).
• Log data about how you use the Service (pages visited, actions performed, timestamps, error logs).
• Cookie and similar identifiers used to keep you signed in and to secure your session.

3. How we use your information

We use the information described above for the following purposes:

• To create and manage your Cre8 Studio account.
• To connect your YouTube channel, Facebook Page, Instagram, TikTok and other accounts that you choose to link.
• To upload, schedule and manage videos or posts to your accounts, strictly according to the options you configure.
• To generate captions, thumbnails, templates and other creative assets you request.
• To show you performance summaries, dashboards and reports based on data returned by supported platforms.
• To secure the Service, prevent abuse, troubleshoot issues and generate logs necessary for reliability.
• To handle billing, subscription management and transactional communications.
• To send important notices about updates, security or changes to this Policy or our Terms.
• Where permitted, to send optional product tips or marketing messages, which you can opt out of at any time.
• To comply with legal obligations and respond to lawful requests from regulators or platforms.

We do not sell your personal information or YouTube data and we do not use YouTube data for advertising targeting or to build profiles for resale.

4. Use of YouTube API Services

Cre8 Studio uses YouTube API Services to help you publish and manage content on your own YouTube channel. When you authorise our application via Google OAuth:

• We access only the scopes you approve (for example, youtube.upload and youtube.readonly).
• We use these scopes exclusively to upload and manage videos, and to display performance data back to you within Cre8 Studio.
• We store access tokens and, where necessary, refresh tokens so that scheduled uploads and automations can run.
• We do not share YouTube data with third parties except infrastructure providers who help us operate the Service (hosting, storage, logging) under strict confidentiality obligations.

Your use of YouTube through Cre8 Studio is also governed by the YouTube Terms of Service, the Google Privacy Policy and the Google API Services User Data Policy.

You may revoke Cre8 Studio’s access to your Google Account at any time via your Google security settings at https://myaccount.google.com/permissions . Once access is revoked, we will cease making requests to the YouTube API on your behalf and will delete or anonymise the related tokens from our systems within a reasonable period (normally within 30 days, subject to backup cycles).

5. Other platforms (Facebook, Instagram, TikTok, etc.)

When you connect other platforms, such as Facebook Pages, Instagram Business accounts or TikTok, we use their official APIs in a similar way:

• We request only the permissions required to publish content and read the basic data needed for dashboards.
• We do not request access to your personal messages or unrelated data.
• You can disconnect our app from those platforms at any time using their respective settings pages.

Your use of those services is governed by their own terms and privacy policies, which we encourage you to review.

6. Legal bases for processing

Depending on your location, we rely on one or more of the following legal bases to process your information:

• Contract: to deliver the Service you sign up for and perform our obligations under our Terms of Use.
• Legitimate interests: to maintain and improve the Service, protect security, prevent misuse, and understand how features are used.
• Consent: for certain optional data uses (such as marketing emails) and for connecting external platforms like YouTube.
• Legal obligation: to comply with applicable laws, tax rules, accounting, and regulatory requirements.

7. How we share information

We only share personal information in the ways described in this Policy:

• Service providers: companies that host our infrastructure, store files, send emails, process payments, provide logging, analytics or customer support tools. They may only use your data to provide services to us and must protect it appropriately.
• Platform providers: YouTube/Google, Meta (Facebook & Instagram), TikTok and other platforms we integrate with will receive data when we act on your behalf through their APIs, as described above.
• Business transfers: if we are involved in a merger, acquisition or sale of assets, your information may be transferred as part of that transaction, subject to confidentiality obligations.
• Legal and safety: where we reasonably believe disclosure is necessary to comply with the law, enforce our Terms, protect our rights or the rights of others, or respond to lawful requests from authorities or platform partners.

We do not sell personal information or YouTube data, and we do not allow third parties to use YouTube data for their own marketing or profiling purposes.

8. Data retention

We keep information only for as long as necessary for the purposes outlined in this Policy and to comply with legal obligations. In general:

• Account data is retained while your account is active. If you close your account, we will delete or anonymise your data within a reasonable period, except where we must retain certain records for legal or accounting reasons.
• Access tokens and refresh tokens for connected platforms are retained only while the connection remains active or until you revoke access.
• Operational logs are typically retained for up to 12–18 months to help with security and troubleshooting.
• Backups may temporarily retain deleted data for an additional limited period, after which it is overwritten in the normal backup rotation.

9. Security

We use reasonable technical and organisational measures to protect your information, such as encryption in transit (HTTPS), access controls, and principle-of-least-privilege for staff and systems that handle sensitive data.

However, no system can be guaranteed 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for choosing strong, unique passwords.

10. International data transfers

Our infrastructure or that of our service providers may be located in different countries. This means your information may be transferred to, stored in, or processed in a country other than your own.

Where required by law, we implement appropriate safeguards (such as contractual clauses) to protect personal data when it is transferred internationally.

11. Your rights and choices

Depending on your location, you may have certain rights over your personal data, such as:

• Accessing the information we hold about you.
• Requesting correction of inaccurate or incomplete information.
• Requesting deletion of your data, subject to legal retention requirements.
• Objecting to or restricting certain types of processing.
• Withdrawing consent where processing is based on consent (for example, marketing emails or connected APIs).

To exercise any of these rights, or to request deletion of your account, please contact us at sirbmsuper201@gmail.com. We may need to verify your identity before responding.

You can also control certain choices directly:

• Unsubscribe from marketing emails using the link in those messages.
• Disconnect platforms such as YouTube via their own security settings pages.

12. Cookies and similar technologies

Cre8 Studio uses cookies and similar technologies primarily for:

• Authentication and keeping you signed in.
• Security (for example, to detect suspicious activity).
• Basic analytics to understand feature usage and improve the Service.

We do not currently use third-party advertising cookies or behavioural ad tracking on the Service. Your browser settings may allow you to block or delete cookies, but some features may not work correctly if you do.

13. Children’s privacy

The Service is not directed to children under the age of 16 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal data from children in this age group. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements.

When we make material changes, we will update the “Effective date” at the top of this page and, where appropriate, provide additional notice (for example, in-app or by email). Your continued use of the Service after the updated Policy takes effect constitutes acceptance of the changes.

15. Contact us

If you have any questions about this Privacy Policy or how we handle your information, you can contact us at:

Email: sirbmsuper201@gmail.com