Privacy policy
CreatorSail captions videos, shows and explains your own Instagram numbers, compares them with public accounts you choose, posts your videos to YouTube, and automates replies to your comments. This policy describes what that involves for your data, in the order the questions usually get asked.
Who we are
CreatorSail is operated from India by Saivineeth Vuppala. For anything in this policy, including a request to delete your data, write to saivineeth181@gmail.com.
What we collect
Your account
When you sign up we receive your name, email address and profile image from our authentication provider. We store an identifier for you, the workspace you belong to, and your role in it.
Videos you upload
Videos you upload for captioning are stored so they can be transcribed and rendered. We also store the transcript, the caption lines you edit, and the finished video.
Instagram data, if you connect an account
Connecting an Instagram account is optional and always your choice. If you connect one, we receive an access token and — depending on the permissions you grant — your profile details, your posts, and the metrics Instagram reports for them. We request the narrowest set of permissions the features need, and we tell you which before you connect.
YouTube data, if you connect a channel
Connecting a YouTube channel is optional. You sign in with Google and grant two permissions: to upload videos to your channel (youtube.upload) and to read which channel you connected (youtube.readonly). We store the channel’s id, name and picture, and an encrypted token that lets us upload the videos you choose to post. We do not read your other videos, comments, subscribers or analytics. See YouTube and Google below.
Public data about other accounts
If you add accounts to Competitors, we read their public profile and posts through Instagram’s Business Discovery API: follower and post counts, and each post’s date, type, link, cover image, likes, comments and views. We keep the first line of each caption and the words read from each cover, not whole captions or videos. This only works for Business and Creator accounts, and it is removed when you remove the account from your list.
Comments and messages, if you use Auto DM or Comment moderation
These features read comments on your own posts. We store the comments your rules held or answered, the commenter’s username, and the messages sent, so you can review them. Auto DM keeps a list of the people it has messaged, which you can download or delete.
Payments
Paid plans are charged by Razorpay in Razorpay’s own window. We never see your card or bank details; we receive the subscription’s status and invoices.
Usage and diagnostics
We record how many minutes of video you have rendered, so that plan allowances can be counted. We keep server logs and error reports, which can include your account identifier and the address of the page that failed.
What we do with it
We use your data to provide the product to you: to caption your videos, to answer your questions about your own account, to enforce plan limits, and to fix what breaks. We do not sell your data. We do not use your videos, transcripts or Instagram data to advertise to you.
Who processes it
We use other companies to run parts of the service. Each receives only what its job needs.
- Clerk — sign-in and account identity.
- Supabase — the database holding your workspace, jobs, captions and connected accounts.
- Amazon Web Services — storage, video rendering and delivery. Video is processed in the Asia Pacific (Mumbai) region.
- Vercel — hosting for the website and the application.
- ElevenLabs — speech-to-text. The audio track of a video you upload for captioning is sent there to be transcribed.
- Google — the Gemini API translates captions, writes hooks, and reads the captions and covers of competitors’ public posts. If you connect YouTube, Google also receives the videos you choose to post, through the YouTube API.
- Amazon Bedrock — the same writing and labelling tasks, when Gemini is unavailable.
- OpenAI — the text of comments that Comment moderation checks for abuse, through its moderation endpoint.
- Razorpay — payments and invoices.
- Sentry — error reporting.
- Meta — when you connect an Instagram account, we exchange data with Meta’s APIs on your behalf.
These providers operate in several countries, so your data is processed outside India and outside your own country.
How long we keep it
- Uploaded videos: 7 days. Deleted automatically, for everyone, on every plan.
- Rendered videos: 7 days on the free plan, 30 days on paid plans. Also deleted automatically. The window is shown before you export.
- Transcripts, caption lines and job records: kept while your account exists, so you can re-export and see your history.
- Usage records: kept while your account exists, because they are how allowances are counted.
- Instagram data: kept while the account is connected, and removed when you disconnect it or delete your account.
- YouTube data: the channel’s id, name and picture, refreshed from YouTube at least every 30 days, and deleted with the token when you disconnect the channel.
- Competitors: each account’s latest 100 posts, replaced as new ones are read, and deleted when you remove the account from your list.
Deleting your data
You can disconnect an Instagram account at any time from the settings page, which removes the stored token and the data we hold for that account.
To delete everything, follow the steps on the data and deletion page, or write to saivineeth181@gmail.com from the address on your account. We action deletion requests within 30 days.
YouTube and Google
CreatorSail uses YouTube API Services. By connecting a YouTube channel you agree to the YouTube Terms of Service, and Google’s handling of your data is described in the Google Privacy Policy.
CreatorSail’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use YouTube data only to post the videos you ask us to post and to show which channel is connected. We do not use it for advertising, do not sell it, do not use it to train models, and do not let people read it except where you ask us to for support, or the law requires it.
You can disconnect your channel in CreatorSail’s settings at any time, which deletes the stored token and asks Google to revoke it. You can also revoke CreatorSail’s access from your Google account’s connections page.
Your rights
You can ask what we hold about you, ask for it to be corrected, ask for a copy, or ask for it to be deleted. Write to the address above. We will not charge you for this and we will not make the product worse for you because you asked.
Security
Access to your data is restricted at the database level, so one workspace cannot read another’s. Instagram access tokens are encrypted before they are stored, and are never readable by the application’s user-facing code. Video links expire.
No system is perfectly secure, and we do not claim otherwise. If we discover a breach affecting your data, we will tell you.
Children
CreatorSail is not intended for anyone under 18, and we do not knowingly collect data from children.
Changes
If this policy changes in a way that affects you, we will say so in the product rather than only changing the date at the top of this page.