Privacy policy

Last updated: October 17, 2026. CreatorFlow is a product of Elemental Genius LLC, Brockport, New York. This policy describes what data CreatorFlow — the creatorflowlab.com website and the CreatorFlow desktop and mobile apps — collects, why, and what control you have over it.

• Account data — your email address and login credentials, stored to create and secure your account and provide the service.
• Your content and settings — drafts, schedules, brand-voice settings, and posting history are synced through our cloud so they follow you across your devices.
• Your creator profile — brand voice, niche, goals, and guardrails, synced from the desktop app when you are signed in.
• AI assistants you have connected — each assistant's self-reported name, the permissions you granted, and when it was last used. Access tokens are stored only as one-way hashes.
• Support emails — if you email us, we keep the address and message you send only to respond to you. We do not add you to mailing lists.

Social platform connections

Where a platform supports it, you connect it to CreatorFlow via OAuth — the same mechanism as "Sign in with Google" — so we never see or receive that account's password; the platform issues a token that lets CreatorFlow post on your behalf. Bluesky does not offer OAuth to apps like ours, so it connects with your Bluesky handle and an app password, which we store to post on your behalf. We recommend creating a dedicated app password in Bluesky's settings rather than using your main password. You can revoke any connection at any time, either inside CreatorFlow or from the platform's own settings.

AI processing

When you ask RizBop to write, plan, or generate posts, your request and the brand voice it needs are sent through our servers to Google Cloud's Vertex AI (Gemini models). Voice memos you record are transcribed by Google Cloud Speech-to-Text, and photos you attach are described by Google Cloud Vision; both are processed in memory and not stored on our servers. We do not train AI models on your content, and Google does not use it to train its models under the terms that apply to our use of these services.

Advertising (Google AdSense and AdMob)

The creatorflowlab.com website shows ads from Google AdSense, and the Free tier of the Android app shows ads from Google AdMob. The app requests non-personalized ads only and asks for consent where the law requires it (for example in the EEA and UK). Even non-personalized ads use limited device data, such as your device's advertising ID and IP address, for frequency capping, fraud prevention, and measurement, as described in Google's advertising policies. The desktop app shows no ads, and Pro is ad-free on all devices.

Payments

Pro is purchased through Google Play. Google processes the payment; we never see your card or bank details. We receive and store your subscription status (product, purchase token, and renewal state) so Pro can unlock on every device you sign in on.

Bring your own API key (BYOK)

If you add your own API key from a supported AI provider — Claude, ChatGPT, Gemini, Grok, Mistral, or Meta Llama (a Pro option) — we use it solely to send your generation requests to the provider you chose. You pay that provider directly, and their privacy policy governs how they handle those requests.

• Read your creator profile and which platforms you have connected.
• Read the posts in your cloud queue.
• Write and edit drafts in your queue.
• Schedule and publish posts to your connected platforms — off unless you turn it on; requires Pro.

Anything an assistant reads is sent to the company that runs it and is handled under that company's terms and privacy policy, not ours. An assistant never receives your password or your social-platform tokens. You can disconnect an assistant at any time in Settings → Assistants, which takes effect on its next request. Deleting your account deletes every connection.

Security

Your data is encrypted in transit and at rest. Platform access uses OAuth tokens wherever the platform offers them; the only social credential we hold is a Bluesky app password, if you connect Bluesky. Platform tokens and the Bluesky app password are encrypted with Google Cloud Key Management Service, decrypted only on our servers at the moment of posting, and never sent back to your devices.

• You can disconnect any social platform at any time, inside CreatorFlow or from the platform's own settings; disconnecting deletes the stored token.
• You can disconnect any AI assistant at any time in Settings → Assistants.
• You can request deletion of your account and its data by emailing [email protected] from the address on your account. We delete your account and its live data — drafts, chat history, creator profile, platform tokens, and AI assistant connections — within 30 days, and remaining backup copies within 90 days. Uninstalling an app alone does not delete this data.