Privacy Policy
MediaCreators
Last updated: March 30, 2026
The Short Version
We collect only what we need to run the platform, never sell your data, and you can ask us to delete it at any time. Read on for the details.
1. Who We Are
MediaCreators ("we", "us", "our") operates mediacreators.io, a SaaS platform that helps content creators manage and grow their businesses.
Contact: legal@mediacreators.io
"Creator Business Score", "CBS", "Login with my sub™", and "Smart Ads Engine™" are proprietary MediaCreators product names and identifiers.
2. What Data We Collect
Data you give us directly
- Name and email address (account creation)
- Payment information (processed by Stripe - we never see your full card number)
- Profile data you choose to add (bio, social handles, etc.)
Data we collect automatically
- Usage data: pages visited, features used, clicks, session duration
- Device and browser information
- IP address and approximate location
- Video interaction data (play, pause, watch time) on streams you access
Data from third parties
- If you sign in with Google, we receive your name, email, and profile picture from Google OAuth. We do not receive your Google password.
- If you connect YouTube, we may access account-level YouTube data and read-only YouTube Analytics metrics that you explicitly authorize via Google OAuth scopes (for example, channel/account identity metadata and analytics reports).
- We may process publicly available creator channel data (for example, channel-level social/video metrics) to generate pre-account estimate pages and benchmark analytics.
Public creator estimate data
We may use publicly available channel data to model informational estimates (such as audience and revenue potential ranges) before a creator connects an account. These outputs are directional and not guarantees of performance.
Our legal basis for this processing is legitimate interest in operating our intelligence layer and helping creators evaluate platform fit. If you have questions or objections about this processing, contact legal@mediacreators.io.
We only access YouTube data within the permissions you grant, and you can revoke that access at any time from your Google account permissions settings.
3. Why We Collect It (Legal Basis)
| Purpose | Legal Basis |
|---|---|
| Providing the service (account, payments) | Contract performance |
| Analytics to improve the product | Legitimate interest |
| Sending product updates and notifications | Consent / Contract |
| Legal obligations (invoicing, fraud prevention) | Legal obligation |
| Marketing emails | Consent (opt-in only) |
4. Our Third-Party Processors
We share data with these vendors only to the extent necessary to operate the platform. All are bound by data processing agreements (DPAs).
| Vendor | Purpose | Data Shared | Location |
|---|---|---|---|
| Supabase | Primary database | Account + usage data | US (AWS) |
| AWS | Cloud infrastructure | All platform data | US + global |
| Cloudflare | CDN, edge delivery, Workers | IP, request metadata | Global |
| Mux | Video hosting & streaming | Video interaction data | US |
| Stripe | Payment processing | Email, billing info | US |
| PostHog | Product analytics | Usage events, session data | US / EU |
| Google OAuth | Authentication | Name, email | US |
| YouTube API Services | YouTube account linking and analytics ingestion | Authorized channel/account metadata and read-only analytics reports | US |
We do not sell your data to any third party, ever.
5. Cookies and Tracking
We use cookies and similar technologies for:
- Essential cookies: Required for login sessions and security.
- Analytics cookies: PostHog uses these to understand how you use the platform (can be disabled in browser settings or by contacting us).
We do not use advertising or retargeting cookies.
6. International Data Transfers
MediaCreators is based in the United States. If you are accessing from the European Economic Area (EEA), United Kingdom, or Switzerland, your data may be transferred to and processed in the US. Where required, we rely on Standard Contractual Clauses (SCCs) or other approved transfer mechanisms under GDPR Chapter V.
7. Your Rights
Depending on where you live, you may have the following rights:
Everyone:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data ("right to be forgotten")
- Withdraw consent at any time (where processing is consent-based)
EU / EEA / UK users (GDPR):
- Data portability (receive your data in a structured format)
- Object to processing based on legitimate interest
- Request restriction of processing
- Lodge a complaint with your local Data Protection Authority (DPA)
California users (CCPA):
- Know what categories of data we collect and why
- Opt out of the "sale" of personal data (we do not sell, but we confirm this right)
- Non-discrimination for exercising your rights
To exercise any of these rights, email us at legal@mediacreators.io. We will respond within 30 days.
8. Data Retention
| Data Type | Retention Period |
|---|---|
| Account data | Until account deletion + 30 days |
| Payment records | 7 years (legal/tax obligation) |
| Analytics data (PostHog) | 12 months rolling |
| Video interaction logs | 12 months |
| Support/communications | 2 years after last interaction |
You may request early deletion at any time, except where we are required by law to retain data.
9. Children's Privacy
MediaCreators is not directed to children under 13 (or under 16 in the EU). We do not knowingly collect personal information from minors. If you believe a minor has provided us data, contact us immediately at legal@mediacreators.io and we will delete it.
10. Data Security
We implement industry-standard security measures including:
- Encryption in transit (TLS) and at rest
- Row-level security in our database (Supabase RLS)
- Strict access controls and least-privilege policies
- Regular security reviews
No system is 100% secure. In the event of a data breach, we will notify affected users within 72 hours as required by GDPR.
11. Changes to This Policy
If we make material changes, we will notify you by email and/or a prominent notice on the platform at least 14 days before the change takes effect. The "Last Updated" date at the top reflects the most recent revision.
12. Contact
Questions, requests, or concerns:
Email: legal@mediacreators.io
Response time: Within 5 business days