Privacy Policy

CreaitorsOS is the operations platform of Creaitors Sdn Bhd ("Creaitors", "we", "us"), an agency based in Malaysia. This policy explains what personal data CreaitorsOS handles, why, and the choices you have. It applies to our team, our clients' representatives, the creators we work with, and anyone who connects an account to CreaitorsOS.

• Login and profile: name, work email, role, and the activity recorded against your login (for example approvals, assignments and comments).
• Client contacts: names, emails and phone numbers of brand representatives, and the contracts, invoices and reports of the brand.
• Creators and affiliates: names, social handles, contact details, rates, follower figures and the results of the content they produce for a brand.
• Our employees: employment records we need as an employer, such as identity and bank details, documents, pay, leave, and attendance (including a photo and location captured when clocking in).
• Connected accounts: data from other platforms that an account owner has authorised, described in sections 3 and 4.
• Technical data: the cookies needed to keep you signed in, and, if you turn notifications on, the push subscription for your browser or device.

CreaitorsOS does not use advertising or third-party analytics trackers.

The owner of a brand's TikTok account can connect it to CreaitorsOS by logging in with TikTok and approving access. With that approval we receive, and store:

• the account's display name, username, profile picture, bio, verified status and profile link;
• its follower, following, total likes and video counts;
• its public videos: title, description, posting time, duration, cover image link, share link, and view, like, comment and share counts.

We read these figures regularly and keep a daily record so that the brand and our team can see how the account is growing and how its videos perform. That is the only use we make of them.

We do not receive the account's password, private messages, drafts or private videos, and CreaitorsOS cannot post, comment or change anything on the account.

Withdrawing access. The account owner can end the connection at any time, either by asking us to disconnect it, or in the TikTok app under Settings and privacy, Security and permissions, Manage app permissions. Once disconnected we stop reading the account. On request we also delete the data already stored for it.

• TikTok Shop: when a seller authorises CreaitorsOS, we read the shop data covered by that authorisation, such as shop, video and LIVE performance, products, orders, settlements and affiliate collaborations, to report on the shop and manage creator collaborations for the brand.
• Notion: a member of our team may connect their own Notion workspace so that CreaitorsOS can write their work queue into a page they chose. CreaitorsOS can only reach the pages they share with it.
• Sales exports: performance files a brand or our team downloads from a marketplace and uploads to CreaitorsOS.

• to deliver and report on the services a brand has engaged us for;
• to plan, assign and track our team's work;
• to manage creator and affiliate collaborations and payments;
• to meet our obligations as an employer and under the law;
• to keep CreaitorsOS secure and working.

We do not sell personal data, and we do not use data from connected accounts for advertising or share it with anyone other than the brand it belongs to and the providers listed below.

Inside CreaitorsOS, access is limited by role: our team sees what their role needs, and a client login sees only its own brand. Outside CreaitorsOS, data is handled by the providers that run the platform for us:

• Supabase, which hosts our database and file storage, in Japan;
• Vercel, which hosts the application.

This means personal data may be stored or processed outside Malaysia. We may also disclose data where the law requires it.

We keep personal data for as long as the login, client engagement, collaboration or employment it relates to is active, and afterwards for as long as the law requires us to keep business, tax and employment records. Data from a connected account is kept until the account is disconnected and its deletion is requested.

Access to CreaitorsOS requires a login. The access tokens we hold for connected accounts stay on our servers and are never sent to a browser. No system is perfectly secure, and we cannot guarantee that data will never be accessed without authorisation; if that happens we will act on it and inform those affected where the law requires.

Under the Malaysian Personal Data Protection Act 2010 you may ask us for access to the personal data we hold about you, ask us to correct it, limit how we process it, or withdraw consent you gave. You may also ask us to delete data from an account you connected. Write to us at the address below; we may need to confirm who you are before acting.

CreaitorsOS is a business tool. It is not intended for children, and we do not knowingly collect their data.

We may update this policy as CreaitorsOS changes. The date at the top shows the latest version.

Creaitors Sdn Bhd, Malaysia. Privacy questions and requests: admin@creaitorsofficial.com.