Privacy Policy
This policy explains what information CreatorFlow ("CreatorFlow", "we", "us") collects, how it is used and protected, and the choices you have. It covers the CreatorFlow web and desktop app, including its optional Google Drive connection.
Information we collect
Your CreatorFlow account and content
- Your email address and sign-in details, used to create and secure your account.
- What you add to CreatorFlow: projects, clients, notes, tasks, invoices, and the photos and other files you import or upload, along with their details (file names, sizes, dates, and your culling choices such as keep, reject, rating, and favorite).
- Records of your imports and exports (which files, where they went, and whether they finished).
Information from Google, if you connect Google Drive
Connecting Google Drive is optional. If you connect it, CreatorFlow receives and uses:
- Your Google account name and email address — to show which Google account is connected.
- An authorization from Google (an access token and a refresh token) — to act on your Drive only when you ask CreatorFlow to.
- Folder names and IDs in your Drive — read when you browse or search for a folder, so you can choose where exports go. If you save a folder as an export destination, its ID and path are stored.
- Names of files in the folder you export to — checked before uploading so CreatorFlow never overwrites an existing file without asking you.
- The ID of each file CreatorFlow uploads — kept with the export record so the export can be resumed or reviewed.
CreatorFlow does not read the contents of files in your Google Drive. It writes to your Drive only when you start an action yourself: creating a folder, exporting files, or choosing "Replace" for a file that already exists.
How we use information
- To provide CreatorFlow's features — storing, organizing, culling, exporting, and delivering your work.
- To export the files you choose into the Google Drive folder you choose, and to show export progress.
- To keep your account and data secure, and to troubleshoot problems you report.
We do not sell your information. We do not use it for advertising. We do not use data received from Google APIs to develop, improve, or train generalized artificial intelligence or machine learning models.
CreatorFlow's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
How information is stored and protected
- Your account, project data, and uploaded files are stored with our hosting provider, Supabase, and are protected by access controls so each account can reach only its own data.
- Your Google refresh token is encrypted (AES-256-GCM) before it is stored, in a location that can only be reached by CreatorFlow's server — never by the app running in your browser. Short-lived access tokens are kept only in memory and are not stored.
- When you export to Google Drive, files are transferred from CreatorFlow's storage to Google over encrypted (HTTPS) connections. CreatorFlow does not keep extra copies of exported files.
- No one at CreatorFlow reads your Google data, except with your permission (for example, to help with a problem you report), when needed for security, or when required by law.
Sharing
We share information only with the service providers needed to run CreatorFlow — Supabase (database, sign-in, and file storage) and Google (only when you use the Google Drive connection) — or when required by law. Data received from Google APIs is never transferred to anyone else, except as needed to provide the features you use, for security, or to comply with the law.
Your choices
- Disconnect Google Drive at any time in CreatorFlow under Settings → Connected Accounts. This deletes the stored Google authorization and asks Google to revoke CreatorFlow's access. You can also remove access from your Google Account at myaccount.google.com/permissions.
- Files already exported to your Drive stay there and are yours; CreatorFlow does not delete them.
- You can delete projects and files inside CreatorFlow, or ask us to delete your account and its data by contacting us below.
Retention
We keep your information while your account is active. Google authorizations are deleted when you disconnect Google Drive, or automatically if Google reports that the authorization is no longer valid. Export records are kept with your projects until you delete them or your account.
Children
CreatorFlow is not directed to children under 13, and we do not knowingly collect their information.
Changes to this policy
If we change this policy, we will update the effective date above. Significant changes will be communicated in the app.
Contact
Questions or requests about your data: dusty.thibodeaux1965@gmail.com