Everything below is the operational reality, not aspiration. If anything here is unclear, email support@creatara.ai.
ProJohnson Consulting Ltd — Registered in England & Wales, United Kingdom.
Contact address available on request via support@creatara.ai and included on all invoices issued through Stripe.
Email support — we aim to reply within 2 business days. Reach us at support@creatara.ai or via the contact form.
| Provider | Purpose | Data shared |
|---|---|---|
| Emergent (Universal LLM gateway) | Routes AI generation requests to model providers | Prompt text you submit for generation |
| OpenAI (GPT-5.2, GPT Image 1, Sora 2) | AI text, image and video generation | Prompt text / image briefs |
| Google (Gemini) | AI citation-tracking queries with search grounding | Brand/keyword queries you configure |
| Stripe | Payments, subscriptions, tax calculation | Billing details (card data never touches our servers) |
| Resend | Transactional email delivery | Your email address, email content |
| MongoDB (managed hosting) | Primary application database | Account and content data |
| Cloudflare | DNS, CDN and edge security | Request metadata (IP, headers) |
Your account data, generated content, tracked-link analytics and captured leads are retained while your account exists so the product keeps working for you.
Self-serve deletion: Settings → Danger Zone → Delete account permanently removes your account and all associated data (content, templates, links, click logs, lead forms and leads). This is immediate and irreversible.
You can also request deletion or a data export by emailing support@creatara.ai. Details of your rights are in our Privacy Policy.
| Network | Scopes | Why |
|---|---|---|
| X (Twitter) | OAuth 1.0a — read & write (post tweets) | So scheduled posts can publish to your X account. We never read your DMs. |
| openid, profile, w_member_social | To identify your profile and publish posts you schedule. No reading of your feed or connections. | |
| Bluesky | App password (scoped credential you create) | To publish scheduled cross-posts. Revocable anytime in Bluesky settings. |
| Telegram | Your own bot token | To post to the channel/group you configure. The bot only has the rights you give it. |
| Google (sign-in) | openid, email, profile | Account creation and login only. |
Full per-network capabilities and limitations: Integration Matrix.
When someone submits one of your lead forms, we record the submitted fields plus a timestamp. That record is the evidence of the submission and is exportable by you at any time (Leads → Export CSV). You are the data controller for leads you collect — make sure your form and follow-up comply with the consent rules that apply to your audience.
Creatara helps you attach tracked affiliate links to content, and reminds you to disclose them — but you are responsible for your own affiliate and sponsorship disclosures under the advertising rules that apply to you (e.g. FTC in the US, ASA/CAP in the UK). You can save a reusable disclosure line in Settings and insert it into any post with one click.
Our data-protection commitments (UK GDPR / GDPR) are set out in detail in the Privacy Policy. Service terms are in the Terms of Service.