Privacy Policy | CreationLAB

CreationLAB ("we," "us," or "our") operates an AI-powered workspace that helps creators generate and publish social media content from video uploads. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use https://app.arlabs.digitaland related services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

1. Information we collect

Account information

When you sign up, we collect information provided through Clerk, our authentication provider, such as your name, email address, and profile identifier. We sync a corresponding user record in our database to manage your plan, credits, and preferences.

Content you provide

We process videos, project titles, brand voice settings, memories, platform drafts, and other content you upload or create in the Service. AI providers analyze your uploads to generate titles, descriptions, captions, hashtags, and related copy.

Connected platform data

If you connect third-party accounts, we store OAuth tokens (encrypted), account identifiers, and metadata returned by those platforms. Supported or planned integrations include Meta (Instagram and Facebook), YouTube (Google), TikTok, LinkedIn, and X. We only request permissions needed for the features you use.

Usage and technical data

We collect standard log and device information such as IP address, browser type, pages visited, and actions taken in the Service to operate, secure, and improve the product.

2. How we use your information

Provide, maintain, and improve the Service
Authenticate you and manage your account
Generate AI-assisted content tailored to your projects and brand voice
Publish content to connected platforms when you explicitly request it
Process billing and credit usage
Respond to support requests and legal obligations
Detect, prevent, and address fraud, abuse, or security issues

3. AI-generated content

CreationLAB uses third-party AI models to analyze videos and generate text outputs. Your uploads and prompts may be sent to AI providers solely to deliver generation features. You are responsible for reviewing AI-generated content before publishing. We do not guarantee that generated content will be accurate, compliant with platform policies, or free of third-party rights issues.

4. How we store and protect data

Database

Application data is stored in PostgreSQL hosted via Supabase, accessed server-side through Prisma. Row-level security policies restrict direct client database access.

File storage

Videos and related media are stored in Supabase Storage. Access is mediated through signed URLs issued by our servers; we do not expose private storage paths to other users.

OAuth tokens

Connected account tokens are encrypted at rest using AES-256-GCM before being stored in our database. Keys are kept in secure environment variables and are not exposed to the browser.

Security

We implement industry-standard safeguards including HTTPS, access controls, and ownership checks on every database query. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

5. Third-party services

We rely on trusted processors to operate the Service, including:

Clerk — authentication and session management
Supabase — database and file storage
AI providers (e.g., Google Gemini, OpenAI, Groq) — content generation
Stripe — payment processing (when enabled)
Platform APIs — Meta, Google/YouTube, TikTok, LinkedIn, and X when you connect accounts or publish content

Each third party's use of your data is governed by their own privacy policies. We encourage you to review them.

6. Data retention

We retain your information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account and associated data by contacting us. When you disconnect a platform or request deletion through Meta, we process those requests in accordance with applicable platform requirements.

7. Your rights and choices

Access, update, or delete account information through Settings
Disconnect third-party accounts at any time
Request a copy or deletion of your personal data by emailing us
Opt out of non-essential communications

Depending on your location, you may have additional rights under GDPR, CCPA, or similar laws. Contact us to exercise those rights.

8. Meta (Facebook/Instagram) data deletion

If you connected CreationLAB through Meta and request data deletion via Facebook Settings, Meta sends a signed request to our data deletion callback. We remove Meta-related OAuth tokens and associated metadata from our systems and provide a confirmation code and status URL as required by Meta's Platform Terms. Deauthorization callbacks are handled separately when you remove the app from your Facebook account.

9. Children's privacy

The Service is not intended for users under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. Contact us if you believe a child has provided us data.

10. International transfers

Your information may be processed in countries other than your own, including where our service providers operate. We take steps to ensure appropriate safeguards are in place for cross-border transfers.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Material changes may be communicated via email or in-app notice.

12. Contact us

For privacy questions, data requests, or concerns, contact:

abdulbuildswebsites@gmail.com