CREACON / PLATFORM PILOT
Privacy notice
Updated 20 September 2026
Creacon is an individual-led platform pilot for creator, brand, and agency collaboration. It is not yet a registered company. For privacy questions, contact creaconglobal@gmail.com.
Information used by Creacon
Email registration stores your name, email address, mobile number, and selected account type. Passwords are stored as salted, derived verifiers protected with a server-held secret, never as plaintext. Signup acceptance and optional promotional permission are recorded. Private tax documents and aggregated sales submissions are stored for admin review and handled under the same correction and deletion request process. Your email is verified using a one-time code; the mobile number is not verified. Existing administrator access may also use Sign in with ChatGPT. We store workspace memberships, profiles, uploaded images, campaign details, linked video URLs, performance records, payment ledger entries, and an activity log. Payment records are entered by campaign managers; Creacon does not collect card details or transfer funds.
Optional social connections
When available and authorized by you, an official social connection supplies an account identifier, access credentials, public post details, and the metrics permitted by that platform. Access tokens are encrypted on the server. We use this information to display your content and report campaign performance in authorized workspaces. We do not ask for your social account password. Permissions and availability depend on platform approval.
Who can see information
The platform owner and authorized workspace members can access workspace records. Linking content to a campaign shares that content and its metrics with authorized participants in that campaign. Website images selected for publication are public. Hosting, storage, and sign-in are provided through OpenAI Sites and its Cloudflare infrastructure. Login emails are delivered through Resend, which receives your email address and the verification message. Support emails are handled through Gmail. These services may process data outside your country.
Embeds, fonts, and cookies
Opening a video player contacts TikTok, Instagram, or Facebook, which can receive your IP address and apply its own cookies and privacy rules. Opening the original post uses that platform directly. Fonts may be loaded from Google Fonts. Email sign-in uses a necessary secure session cookie lasting up to seven days, or 30 days when you select “Keep me signed in”. Your browser may separately offer to save your password in its password manager. Codes expire after ten minutes, and expired authentication records are removed during subsequent sign-in requests. Hosting may also use necessary cookies. Creacon counts aggregate daily homepage requests, including refreshes and bots, without storing IP addresses or visitor identifiers in these totals. These counts are not unique visitors. We also store upgrade-interest requests made by signed-in users. Creacon does not add advertising pixels or sell your personal information.
Retention and your choices
Workspace records remain until removed or a deletion request is handled. Disconnecting removes the stored connection credentials but keeps campaign records. Managers can use “Delete social data” to remove a platform’s stored videos, metric history, and credentials from their workspace. You can export the records available to your workspace. For account closure, access, correction, or deletion requests, contact creaconglobal@gmail.com. We may need to verify your identity and explain any records retained for a legal obligation or unresolved dispute. Infrastructure backups may persist according to the provider’s retention practices.
Security and updates
Creacon uses encrypted transport and server-side access checks. No service can promise absolute security. Do not upload passwords, bank credentials, or unnecessary sensitive information. This notice will be updated when the service or operator details change.