Privacy Policy

Welcome to CREATOZZ. This Privacy Policy outlines how we collect, use, process, and protect your data when you manage a custom profile link card or visit a landing page hosted on our ecosystem.

By interacting with our application, you consent to data frameworks mapped here. This policy is systematically aligned with international standards including the Indian Digital Personal Data Protection Act (DPDPA), 2023, Information Technology Act 2000, GDPR, and California's CPRA.

Unlike standard isolated SaaS models, CREATOZZ handles data configurations cutting across two distinct customer groups:

2.1 Creator Data (Account Profiles)

• Account Credentials: Identity tokens, legal name, encrypted passwords, and OAuth vectors (Google/Apple sign-ins).
• Profile Configuration: Custom URLs, curated text descriptions, titles, uploaded image files, and primary destination links.
• Billing Operations: Payment credentials, transaction history logs, and subscription metadata handled through localized PCI-DSS compliant secure gateways.

2.2 End-Visitor Data (Traffic Analytics)

When an end-visitor lands on a custom creatozz.com/username profile link, we collect telemetry metrics on behalf of the account manager:

• Device telemetry (IP address locations, browser engine variables, language locales, operating system tags).
• Interaction mechanics (Outbound click-through distribution rates, video asset view events, total link hops).
• Referrer headers detailing the origin platform directing the visitor to the profile matrix.

Our platform allows creators to embed analytics microservices and tracking pixels directly inside their landing panels.

• Custom Pixels: Creators may integrate standalone tracking tags (Meta Pixels, Google Tag Manager, TikTok Pixels). We do not own or manage data collected by these third-party elements.
• Platform Cookies: Functional, performance-optimized, and analytical cookies are dropped to preserve custom UI presets and prevent analytics spoofing.

When you explicitly connect your Instagram Business or Creator account to CREATOZZ via Meta OAuth, we access platform data using Meta Graph API endpoints under specific permissions:

• instagram_business_basic: Used exclusively to read basic metadata including Instagram User ID, username, profile picture URL, and account type to verify and personalize your dashboard.
• instagram_business_manage_insights: Used strictly to fetch analytics, including total impressions, engagement rates, content reach, video view metrics, and aggregated follower demographics.
• Token Security & Storage: Meta API User Access Tokens are encrypted using AES-256 standards before being stored in secure server infrastructure. Tokens are never exposed to client-side browsers or unauthenticated third parties.
• No Data Sharing / Sale: CREATOZZ does not sell, license, share, or transfer Meta Platform Data to third-party ad networks, data brokers, or external AI model training pipelines.
• Access Revocation: You can revoke CREATOZZ's access to your Instagram account at any time via your Meta/Facebook Business Settings under 'Business Applications'.

CREATOZZ uses YouTube API Services to retrieve channel performance metrics and video telemetry for creators connecting their YouTube channels.

• YouTube Terms of Service: By connecting your YouTube account to CREATOZZ, you agree to be bound by the YouTube Terms of Service (https://www.youtube.com/t/terms).
• Google Privacy Policy: CREATOZZ accesses, processes, and stores YouTube API data in strict accordance with the Google Privacy Policy (https://www.google.com/policies/privacy).
• Data Access & Usage: We query YouTube API Services to fetch public channel statistics, subscriber counts, total views, and aggregated content performance metrics solely to render your unified creator dashboard.
• Data Refresh & Storage: Stored YouTube data is periodically refreshed or deleted upon token expiration. You can disconnect your YouTube account and revoke access at any time via the Google Security Settings page (https://security.google.com/settings/security/permissions).

All profile structures, images, links, and content blocks hosted across the CREATOZZ domain are explicitly flagged with machine-readable protections against automated extraction engines.

We leverage banking-grade AES-256 data encryption routines at rest and safe TLS transport pipes in transit. Account profile telemetry is maintained as long as the account stays operational.

Upon execution of an account termination order, data items are instantly flagged for destruction and completely purged from active production caches and database systems within a window of 30 days.

Regardless of your geographic location, CREATOZZ offers deep automated controls over your digital footprint:

• Right to Correction: Instantly modify profile details from the dashboard console.
• Right to Erasure ('Right to be Forgotten'): Execute full account teardowns to purge database identities.
• Data Portability: Request clean structured dumps of profile performance analytics records.

For data inquiries, privacy concerns, or to contact our designated Data Protection Officer (DPO) / Grievance Officer under the Indian Digital Personal Data Protection Act (DPDPA), 2023 and Information Technology Act, 2000: