This page gathers what our Privacy Policy says about the EU/UK General Data Protection Regulation (GDPR) in one place. The Privacy Policy has the full detail.
Who is responsible
Creatorzel is run from Türkiye and is the controller of the personal data described in the Privacy Policy. For any question or request, write to privacy@creatorzel.com. Creatorzel is for people aged 16 or older.
What we process
- Account data: the email address you sign up with and a hashed (not readable) password.
- Notion access: an encrypted access token, your workspace name, and the ID and link of the content calendar we create for you. The text of a post is read when it is due and is not kept.
- Pinterest access: an encrypted access token and your Pinterest username, used only to act on your account when you tell us to.
- Publishing records: for each calendar row we published or tried to publish: the Notion row ID, the status, the link of the pin that was created, any error message and timestamps.
- Media files: images and videos you attach in Notion are downloaded temporarily to publish them, then deleted. We keep no copy.
- Billing data: if you subscribe, your email address and user ID are passed to Lemon Squeezy. We never see or store your card details. We keep a short record of each subscription event (subscription ID, plan, status and dates).
- Visit data: only if you accept optional cookies. If you reject, your visit is only added to totals that carry no ID and cannot be linked to you.
- Usage while you are signed in: pages opened, time on a page, source, device type, country and language, and a few account events, linked to an ID derived from your account ID.
- Company grouping: for work email addresses only, the part after the @ is turned into a one-way company ID. The domain itself is not kept.
- Server logs: our hosting provider keeps standard logs (IP address, time, requested page) to run and secure the service.
Why we process it (legal basis)
- Performance of a contract with you: running your account, publishing what you schedule, and billing your subscription.
- Legitimate interest: where the law needs it, keeping the service secure and preventing abuse; and, for usage data while you are signed in, running and improving Creatorzel. You can object at any time.
- Consent: for visit data from the optional cookies. You can withdraw it at any time with “Cookie settings”.
Your rights and how to use them
You have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. If you object to the usage data, we delete it and stop recording it for your account.
To use any of these rights, write to privacy@creatorzel.com. We answer within 30 days. Account deletion is currently handled by email rather than a button.
How long we keep data
- Account data, tokens and publishing records are kept while your account is active.
- Visit and usage data is kept for 13 months and then deleted. The totals that carry no ID are kept for 25 months.
- Disconnecting Pinterest deletes the stored token at once and removes the pin links and error messages we kept for that account. Disconnecting Notion deletes the stored Notion token and calendar details at once.
- If you close your account, we delete your account, tokens, publishing records and the visit and usage data linked to your account within 30 days.
Where your data goes
To publish what you scheduled we send it to Notion (to read and update your calendar) and to Pinterest (to create the pin). Our servers are run by a hosting provider (Hostinger). If you subscribe, Lemon Squeezy processes the payment. These providers may process data outside your country, including in the United States. We do not sell your data or share it with advertisers or data brokers.
Security and breaches
Access tokens are stored encrypted. If a breach affects your personal data, we will tell you and the competent authority as the law requires, within 72 hours of becoming aware where GDPR applies.
Children
Creatorzel is not for anyone under 16. If you think a child has signed up, tell us and we will delete the account.
Complaints
You can complain to your local data protection authority.
Full policy
This page is a summary. Read the full Privacy Policy, and see the Terms of Service.