Privacy Policy
MediaCreators, LLC
Last updated: September 18, 2026
Effective Date: September 21, 2026
The Short Version
We collect only what we need to run the platform, never sell your data, and you can ask us to delete it at any time. Read on for the details.
1. Who We Are
MediaCreators, LLC ("MediaCreators", "we", "us", or "our") is a Delaware limited liability company. Mailing address: 2810 N Church St, STE 89584, Wilmington, DE 19802, United States. MediaCreators operates mediacreators.io, a SaaS platform that helps content creators manage and grow their businesses.
Contact: legal@mediacreators.io
"Creator Business Score", "CBS", "Login with my sub™", and "Smart Ads Engine™" are proprietary MediaCreators product names and identifiers.
Applicable Legal Framework
MediaCreators complies with the following data protection laws where applicable:
| Jurisdiction | Law | Our Role |
|---|---|---|
| European Union | General Data Protection Regulation (GDPR) | Controller (account data, marketing) / Processor (customer platform data) |
| United Kingdom | UK GDPR + Data Protection Act 2018 | Controller / Processor |
| California, USA | CCPA / CPRA | Business / Service Provider |
| Chile | Ley 19.628 (current) + Ley 21.719 (effective Dec 1, 2026) | Responsible for processing |
Controller vs. Processor roles:
- As Controller: We determine the purposes and means of processing for account data, billing information, our own marketing, and website operations.
- As Processor: When creators use our platform, we process their community members' data, fan data, and content analytics on the creator's behalf and according to their instructions. See our Data Processing Agreement for details.
2. What Data We Collect
Data you give us directly
- Name and email address (account creation)
- Payment information (processed by Stripe - we never see your full card number)
- Profile data you choose to add (bio, social handles, etc.)
Data we collect automatically
- Usage data: pages visited, features used, clicks, session duration
- Device and browser information
- IP address and approximate location
- Video interaction data (play, pause, watch time) on streams you access
- Session replay data: We use PostHog, which has the capability to record selected user interactions (clicks, scrolls, page navigation) to understand product usage and diagnose issues. These recordings are configured to mask sensitive input fields, but you should not enter passwords, API keys, or other secrets into unintended fields.
Data from third parties
- If you sign in with Google, we receive your name, email, and profile picture from Google OAuth. We do not receive your Google password.
- If you connect YouTube (as a creator or as a fan), MediaCreators uses YouTube API Services to authenticate users and synchronize channel data. By connecting your YouTube account, you agree to be bound by the YouTube Terms of Service and the Google Privacy Policy. We may access account-level YouTube data and read-only YouTube Analytics metrics that you explicitly authorize via Google OAuth scopes, and we may retrieve public channel data via YouTube API Services. We automatically refresh or purge YouTube API data within 30 days of retrieval. You can revoke MediaCreators' access at any time via the Google Security Settings page.
- We may process publicly available creator channel data (for example, channel-level social/video metrics) to generate pre-account estimate pages and benchmark analytics.
Public creator estimate data
We may use publicly available channel data to model informational estimates (such as audience and revenue potential ranges) before a creator connects an account. These outputs are directional and not guarantees of performance. Some estimate and CBS features may use automated or AI-assisted analysis; outputs can be incomplete or incorrect and are not professional advice. We do not use customer content to train general-purpose AI/ML models.
Our legal basis for this processing is legitimate interest in operating our intelligence layer and helping creators evaluate platform fit. If you have questions or objections about this processing, contact legal@mediacreators.io.
3. Why We Collect It (Legal Basis)
| Purpose | Legal Basis |
|---|---|
| Providing the service (account, payments) | Contract performance |
| Analytics to improve the product | Legitimate interest |
| Sending product updates and notifications | Consent / Contract |
| Legal obligations (invoicing, fraud prevention) | Legal obligation |
| Marketing emails | Consent (opt-in only) |
4. Our Third-Party Processors
We share data with these vendors only to the extent necessary to operate the platform. All are bound by data processing agreements (DPAs). The current list is also published at /legal/subprocessors.
| Vendor | Purpose | Data Shared | Location |
|---|---|---|---|
| PlanetScale | Managed PostgreSQL database | Account + usage data | US |
| Cloudflare | CDN, edge delivery, Workers | IP, request metadata | Global |
| Railway | Backend service hosting | Application and operational data | US |
| Mux | Video hosting & streaming | Video interaction data | US |
| Stripe | Payment processing | Email, billing info | US |
| PostHog | Product analytics and session replay | Usage events, session data | US / EU |
| Resend | Transactional email | Email, message metadata | US |
| Google OAuth | Authentication | Name, email | US |
| YouTube API Services | YouTube account linking and analytics ingestion | Authorized channel/account metadata and read-only analytics reports | US |
| Cal.com | Scheduling / booking | Name, email, booking details | US |
| Datadog | Infrastructure monitoring | Logs and metrics metadata | US |
| BetterStack | Uptime monitoring and status | Availability signals | EU / US |
| Google Maps | Maps / location display where used | Location query metadata | US |
We do not sell your data to any third party, ever.
5. Cookies and Tracking
We use cookies and similar technologies for:
- Essential cookies: Required for login sessions and security.
- Analytics cookies: PostHog uses these to understand how you use the platform (can be disabled in browser settings or by contacting us).
We do not use advertising or retargeting cookies.
6. International Data Transfers
MediaCreators is based in the United States. If you are accessing from the European Economic Area (EEA), United Kingdom, or Switzerland, your data may be transferred to and processed in the US. Where required, we rely on Standard Contractual Clauses (SCCs) or other approved transfer mechanisms under GDPR Chapter V.
7. Your Rights
Depending on where you live, you may have the following rights:
Everyone:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data ("right to be forgotten")
- Withdraw consent at any time (where processing is consent-based). Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
EU / EEA / UK users (GDPR):
- Data portability (receive your data in a structured format)
- Object to processing based on legitimate interest
- Request restriction of processing
- Lodge a complaint with your local Data Protection Authority (DPA)
California users (CCPA/CPRA):
In the preceding 12 months, we have collected the following categories of personal information: identifiers (name, email, IP address), commercial information (subscription and payment records), internet activity (usage data, browsing history on our platform), and geolocation data (approximate location from IP). We disclose identifiers and commercial information to our service providers listed in §4 for the purposes described there.
Your rights under the CCPA/CPRA:
- Right to know: Request the categories and specific pieces of personal information we have collected about you, and the categories of sources, purposes, and third parties involved
- Right to delete: Request deletion of your personal information, subject to legal exceptions
- Right to correct: Request correction of inaccurate personal information
- Right to opt out of sale/sharing: We do not sell personal information and do not share it for cross-context behavioral advertising
- Right to limit use of sensitive data: We do not collect sensitive personal information as defined under the CCPA
- Non-discrimination: We will not discriminate against you for exercising your rights
Authorized agents: You may designate an authorized agent to make requests on your behalf by providing written authorization to legal@mediacreators.io.
Do Not Track / Global Privacy Control (GPC): We honor Global Privacy Control signals as a valid opt-out request under the CCPA. We do not respond to browser Do Not Track signals as there is no industry standard for compliance.
To exercise any of these rights, email us at legal@mediacreators.io. We will verify your identity and respond within 45 days.
Chilean users (Ley 19.628 / Ley 21.719):
If you are domiciled in Chile, you have the following rights under current Chilean data protection law, and after December 1, 2026, the expanded rights under Ley 21.719:
- Access (Acceso): Request information about the personal data we hold about you
- Rectification (Rectificación): Request correction of inaccurate or incomplete data
- Cancellation (Cancelación): Request deletion of your personal data when processing is no longer necessary
- Opposition (Oposición): Object to the processing of your personal data
After December 1, 2026 (Ley 21.719):
- Data portability (Portabilidad): Receive your data in a structured, commonly used format
- Right to object to automated decisions: You may object to decisions based solely on automated processing that significantly affect you
- Right to lodge a complaint with the Agencia de Protección de Datos Personales
To exercise any of these rights, email us at legal@mediacreators.io. We will respond within 15 business days as required by Chilean law.
8. Data Retention
| Data Type | Retention Period |
|---|---|
| Account data | Until account deletion + 30 days |
| YouTube API Data | Refreshed continuously; purged within 30 days if access is revoked or unverified |
| Payment records | 7 years (legal/tax obligation) |
| Analytics data (PostHog) | 12 months rolling |
| Video interaction logs | 12 months |
| Support/communications | 2 years after last interaction |
You may request early deletion at any time, except where we are required by law to retain data.
Aggregated and De-identified Data
We may create aggregated or de-identified data from personal information by removing or transforming identifiers so the data can no longer reasonably identify you. We use this data for product improvement, benchmarking, industry research, and platform analytics. Aggregated data is not subject to this Privacy Policy and may be retained indefinitely. We maintain technical and organizational safeguards to prevent re-identification and do not attempt to re-identify aggregated or de-identified data.
9. Children's Privacy
MediaCreators is not directed to children under 13 (or under 16 in the EU). We do not knowingly collect personal information from minors. If you believe a minor has provided us data, contact us immediately at legal@mediacreators.io and we will delete it.
10. Marketing Communications
You may unsubscribe from promotional emails using the unsubscribe link in the message or by contacting us at legal@mediacreators.io. Unsubscribing from marketing does not affect transactional, billing, security, or service communications necessary to operate your account.
11. Business Customers and Downstream Users
If you use MediaCreators to provide products or services to your own audience (for example, through a Streaming Community), you are responsible for providing those individuals with appropriate privacy notices, obtaining required permissions, and configuring the Services consistently with those notices. If we receive a privacy request from one of your community members, we may direct them to you as the appropriate contact.
12. Data Security
We implement industry-standard security measures including:
- Encryption in transit (TLS) and at rest
- Database access controls and tenant isolation on PlanetScale Postgres
- Strict access controls and least-privilege policies
- Regular security reviews
No system is 100% secure. In the event of a data breach, we will notify affected users within 72 hours as required by GDPR.
13. Changes to This Policy
If we make material changes, we will notify you by email and/or a prominent notice on the platform at least 14 days before the change takes effect. The "Last Updated" date at the top reflects the most recent revision.
14. Contact
Questions, requests, or concerns:
MediaCreators, LLC
2810 N Church St, STE 89584
Wilmington, DE 19802
United States
Email: legal@mediacreators.io
Phone: +1 (740) 990-2600
Response time: Within 5 business days