Privacy Policy
Last updated: March 16, 2026
1. Data Controller
AuraMedia Agency Ltd
Agiou Tychona 5
8036 Paphos, Cyprus
Registration number: HE482460
Email: auramediaagency@outlook.com
2. Data We Collect
2.1 Registration Data
- Email address
- Password (stored encrypted using bcrypt hashing)
2.2 Usage Data
- Social media URLs you submit (TikTok, Instagram, YouTube)
- Generated analyses, scripts, and ideas
- Creator profile data (niche, tonality, target audience)
- Calendar entries and content plans
- Usage timestamps (for rate limiting)
2.3 Technical Data
- Session cookies for authentication
- No tracking cookies, no analytics
3. Purpose of Data Processing
- Providing and operating the Service
- Authentication and account management
- AI-powered analysis and content generation
- Billing and payment processing
- Abuse prevention (rate limiting)
4. Legal Basis
Data processing is based on:
- Art. 6(1)(b) GDPR — Performance of contract (providing the Service)
- Art. 6(1)(f) GDPR — Legitimate interest (security, abuse prevention)
5. Third-Party Services
The following services are used to operate CreatorLab:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication | Frankfurt, DE (EU) |
| Google (Gemini API) | AI video analysis, script generation | USA |
| Apify | Social media data scraping | EU |
| Whop | Payment processing | USA |
| Railway | Application hosting | USA |
For transfers to third countries (USA), we rely on EU Standard Contractual Clauses (SCCs) and/or the EU-US Data Privacy Framework.
6. Cookies
CreatorLab uses only technically necessary session cookies for authentication. No tracking, marketing, or analytics cookies are used.
7. Data Retention
- Active account: Data is stored for the duration of use
- After cancellation: Data is deleted 30 days after subscription expiration
- Account deletion: Immediate deletion of all personal data upon request
8. Your Rights
Under the GDPR, you have the following rights:
- Access (Art. 15) — Request information about your stored data
- Rectification (Art. 16) — Correct inaccurate data
- Erasure (Art. 17) — Request deletion of your data
- Restriction (Art. 18) — Restrict processing of your data
- Data portability (Art. 20) — Export your data
- Objection (Art. 21) — Object to data processing
To exercise your rights, contact us at: auramediaagency@outlook.com
9. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection authority. The competent authority in Cyprus is:
Commissioner for Personal Data Protection
Iasonos 1, 1082 Nicosia, Cyprus
www.dataprotection.gov.cy
10. Changes
We reserve the right to update this Privacy Policy as needed. The current version is always available on this page.