Privacy Policy

We collect the following categories of information:

• Account information — your name, email address, and password (stored in hashed form) when you create an account. If you sign in via Google, we receive your name and email from Google.
• Payment information — billing name, address, and the last four digits and expiration date of your card. Full card numbers are processed and stored directly by our payment processor, Stripe; CreatorEcho never sees or stores full card numbers.
• Content you submit — video URLs, transcripts, script text, and any prompts or annotations you provide to the Service.
• Usage data — pages visited, features used, actions taken, time spent, IP address, browser type, device type, and similar technical data collected automatically.
• Communications — messages you send us via email or support channels.

We use personal information to:

• provide, operate, and improve the Service;
• process payments and manage subscriptions;
• authenticate users and secure accounts;
• respond to support requests and communicate about the Service;
• detect, prevent, and address fraud, abuse, or security incidents;
• comply with legal obligations and enforce our Terms of Service.

We do not sell personal information. We do not use your submitted scripts or content to train our AI models.

We share limited data with trusted third-party processors who help us operate the Service. Each is bound by contractual confidentiality and data-protection obligations:

• Stripe, Inc. — payment processing. Stripe is a PCI-DSS Level 1 certified provider and handles all card data.
• Supabase, Inc. — authentication, database, and file storage.
• Google LLC (Gemini API) — AI processing of script and analysis requests.
• Vercel, Inc. — website and application hosting, including edge delivery.
• Email delivery providers — transactional email such as password resets and billing notices.

We may also disclose information if required by law, subpoena, or court order, or to protect the rights, safety, or property of CreatorEcho, our users, or the public.

We use cookies and similar technologies to keep you signed in, remember preferences, measure aggregate usage, and improve the Service. You can control cookies through your browser settings; disabling them may impair functionality of the Service.

We retain personal information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or de-identify your personal data within 30 days, except where retention is required by law (for example, tax and accounting records, or fraud-prevention logs retained for up to 7 years).

Depending on where you live, you may have the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you;
• Correction — ask us to correct inaccurate information;
• Deletion — ask us to delete your personal information;
• Portability — receive your data in a structured, machine-readable format;
• Opt-out of sale or sharing — we do not sell personal information, so there is nothing to opt out of;
• Withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, email hello@creatorecho.com. We may need to verify your identity before acting on your request. We will not discriminate against you for exercising any privacy right.

GDPR (European users). Our legal bases for processing are: performance of our contract with you, compliance with legal obligations, and our legitimate interests in operating and securing the Service.

CCPA (California users). In the preceding 12 months, we collected the categories described in Section 1. We disclosed those categories only to the subprocessors listed in Section 3 for the business purposes described. We do not sell personal information.

We use industry-standard safeguards including TLS encryption in transit, encryption at rest, access controls, and logging. Payment processing uses Stripe, a PCI-DSS Level 1 certified provider. No method of transmission or storage is 100% secure; we cannot guarantee absolute security, but we work to protect your information.

The Service is not directed to children under 18. We do not knowingly collect information from anyone under 18. If you believe a child has provided us with personal information, please email hello@creatorecho.com and we will promptly delete it.

CreatorEcho is operated from the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States and other countries where our subprocessors operate. By using the Service, you consent to such transfers.

We may update this Privacy Policy from time to time. If we make a material change, we will notify you by email or through the Service. The “Effective date” at the top of this page indicates when the policy was last updated.

If you have questions or requests about this Privacy Policy or our data practices, contact:

Wise Empire LLC
Attn: Privacy
State of Wyoming, United States
Email: hello@creatorecho.com