Privacy Policy

Effective October 20, 2026

Who operates the app

John Rizo operates Creator Relay. For privacy questions, access requests, corrections, or deletion requests, email nycpinstripeclub@gmail.com. This policy describes the current app, including its use of YouTube API Services.

Information processed

When you confirm direct publishing to Facebook or Instagram, we transfer your video and caption to your selected Facebook Page or linked Instagram professional account. Videos are temporarily staged in private server storage in smaller pieces to support larger uploads. Completed staging copies are deleted after Meta confirms transfer; abandoned completed copies are removed during subsequent upload cleanup after 24 hours, and unfinished multipart uploads expire under storage-provider cleanup. Encrypted upload session references are saved in this browser to support recovery and status checks.

• Sign-in: the hosting service supplies an authenticated user identifier and, where available, email address so the app can verify access and account ownership.
• Drafts: photos, videos, captions, titles, selected destinations, brand text, and draft timestamps you save are stored in this browser using IndexedDB. The current app does not upload these drafts to an app database. Files remain on this device until you explicitly choose an upload or sharing action.
• Connected accounts: with your authorization, YouTube provides channel identifiers and names, and Google access and refresh tokens. Facebook provides access tokens, permissions, and identifiers and names of Pages you can manage, including the selected Page.
• Support: if you email us, we receive your email address, message, and any information you include.
• Hosting: hosting and infrastructure providers process network and request information, such as IP addresses and technical logs, to deliver and protect the service.

Usage measurement

We use a first-party browser identifier to count visits once per browser per day and record the first signed-in use of Creator Relay with a hashed account identifier. Refreshes and button clicks do not create additional visits. Counts begin when tracking is enabled; browser identifiers may change when cookies are cleared or another browser is used. Known owner activity is excluded. These records are stored in our app database and shown only in the owner dashboard. We do not store IP addresses, captions, or video content in these analytics records. Stripe supplies subscription status for billing reports. Contact us for deletion requests.

Why we use this information

We use these details to verify sign-in, save and reopen your drafts, show connected accounts, confirm Page access, maintain authorized connections, respond to support requests, and protect the service. The current Google authorization requests read-only YouTube account access and upload permission; when you confirm a YouTube upload, we send your video, title, description, chosen visibility, and audience setting to YouTube. Video chunks pass through our server without being retained there. An encrypted, user-bound upload session is stored in this browser for resuming an interrupted upload, and expires after 24 hours. Clearing that session does not delete content already received by YouTube. Facebook authorization requests Page listing, engagement-read, and post-management permissions; the current app uses these to verify Page access and selection. Granting a permission does not itself publish content.

Payments

Stripe processes subscription payments and stores billing records. We send your authenticated account identifier and available email to Stripe to associate your subscription with your account. We retrieve subscription status to verify Pro access and store an encrypted customer reference in a secure HTTP-only cookie. Full card details are entered on Stripe and are not stored by Creator Relay. Clearing browser data does not cancel a subscription; use Plan & billing to cancel. See Stripe’s Privacy Policy.

Storage and security

Social access credentials are encrypted and stored in secure, HTTP-only browser cookies; the server decrypts them when needed to contact the provider. Connection cookies last up to 30 days and may be renewed while you use the app. Temporary authorization-state cookies last 10 minutes. Drafts remain until you delete them or clear browser storage. The app has no separate persistent server database for drafts or connected-account records. Technical logs and support correspondence are separate from browser storage and may remain as needed for security, support, or legal obligations. No system is completely secure.

Sharing and external services

Necessary requests are sent to Google/YouTube or Meta when you connect or use their account features. OpenAI Sites and its hosting infrastructure process requests to deliver the app. Choosing manual sharing sends the content you select to the destination you choose. Opening CapCut does not automatically transfer a draft; anything you import into CapCut is subject to its policies. We do not sell personal information, use connected-account data for advertising, or use it to train AI models. The current app has no advertising trackers.

See Google’s Privacy Policy and Meta’s Privacy Policy for their practices. Creator Relay’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

TikTok publishing

With your permission, Creator Relay retrieves TikTok account details and available posting options. Encrypted access and refresh tokens are stored in secure HTTP-only cookies. When you review and confirm a direct post, your original video, caption, visibility and interaction settings are sent to TikTok. Public posting depends on TikTok approval and account permissions. Encrypted upload-session references and file fingerprints are saved in this browser so you can resume a matching video and check its status. Upload-session expiry still applies. Status checks do not create a new post. Disconnect in Creator Relay or remove access in TikTok settings to revoke the connection.

Relay Assistant

Relay Assistant uses built-in rules to check file size, format and captions, retry temporary transfers, and check existing upload progress. It does not send your video to an AI model or change its content or privacy. Recent upload status and encrypted upload-session references are saved in this browser for recovery. When you return, the app may check status with the selected platform; these checks do not create new posts. Clear site data to remove these records. You must keep the site open until transfers and required publishing steps are accepted. This website has no unattended server job runner for completing unfinished transfers after you close it.

Automatic saves and gallery

Creator Relay automatically saves your editor text, selected channels, settings, and current screen in this browser. Uploaded photos and videos are saved in a device-local gallery using browser storage. These copies are not a cloud backup and do not sync between devices. Saving large files may fail when storage is full or unavailable. Keep your originals. Returning restores saved work but does not automatically publish it. Uploads and video processing may pause or stop when you leave the app.

Your controls and deletion

• Delete individual drafts in the Drafts screen and saved media in Gallery. Remove a video from the current editor before deleting its gallery copy. Clear this site’s browser data to remove all locally stored drafts and connection cookies on that browser. Repeat on other devices where you used the app.
• Use the account Disconnect control to revoke the selected provider’s authorization and clear its connection cookie. If that request fails, revoke access directly with the provider.
• You can revoke Google/YouTube access at Google account permissions and Meta access through Facebook’s Apps and Websites or Business Integrations settings.
• Revoking access in a provider’s settings does not erase copies already in your browser. Also disconnect in Creator Relay or clear its site data to remove those local copies. This does not remove posts from the provider.
• Email us to request access, correction, or deletion of information we hold outside your browser, such as support correspondence. Do not send passwords or access tokens. We may verify your identity and retain information only where required or permitted for legal or security purposes.

Children and changes

Creator Relay is intended for adults 18 and older and is not directed to children. Contact us if a child has provided personal information. We will update the effective date when this policy changes and provide notice of material changes where appropriate.