Privacy

Updated 1 October 2026

Open Creator is a tool for producing content. You put in a brief, the system writes the article, reads it aloud and publishes it to your own channels. This page says plainly what we keep, where it goes, how long we hold it, and how you delete it.

What we keep

• Account — email and name. Needed so you can sign in and so colleagues know who approved an article.
• Content you create — briefs, drafts, scripts, audio files, images you add to an article.
• Images from your device — only the ones you pick or shoot yourself for a brief. The app does not read your photo library outside that moment.
• Push notifications — the device token issued by Expo, plus operating system, app build number and device language. Without it your phone stays silent when an article needs review.
• Activity log — who did what and when inside a workspace. This is what lets you trace an article that was edited or deleted by mistake.
• Credit ledger — every top-up, charge and refund: amount, time, and what for.

We do not hold card numbers. Payment is handled by SePay and PayPal; the system only receives the outcome so it can add credit.

Where it goes

To do the work you asked for, content has to pass through a few places:

• Language model providers — OpenAI, Google Gemini, Anthropic. Your brief, the source material you paste in, and the body of the article are sent to generate, translate and check it. On the phone the app asks you once before the first send; decline and nothing is sent, and you can turn it back on in Settings.
• Text-to-speech providers — the draft, to produce audio.
• Expo — device token and the short text of a push notification, nothing else.
• SePay, PayPal — credit top-up orders.
• Channels you connect — WordPress, Telegram, Discord, Facebook, YouTube, TikTok. Only when you press publish, and only the article you chose.
• Cloudflare — sits in front of the system to block attacks and serve this site.

We do not sell data, do not use your content for advertising, and do not track you across other apps or websites.

Every third party named above is contractually bound to protect your data to a standard equal to or better than the one set out on this page, and may not use your content to train their models.

How long

Content and account are kept until you delete them. After you delete your account we keep invoices, the credit ledger and the activity log for accounting and reconciliation — but those rows are no longer linked to your email or name.

Deleting your account

You can delete at any time, without writing to ask:

• On the web — Account › Danger zone (studio.opencreator.app/account).
• On your phone — Settings › Delete account.

Before you confirm, the screen lists exactly what you are about to lose: the workspace, how many colleagues are affected, how many articles, and the credit balance. If you are the only owner of a workspace, that workspace goes with you. Any remaining credit is lost and is not refunded.

To get a copy of your data before deleting, or to correct your personal details, write to the address below.

Google account data

If you connect a Google account — YouTube, Search Console or Drive — the app asks for six separate permissions (scopes). This section says exactly what each one is used for, where the data goes, and how long we keep it.

• Upload to YouTube — lets the app upload your video file, replace its thumbnail, and set the exact time it goes live. Used only at the moment you press publish; nothing is uploaded on your behalf otherwise.
• View your YouTube channel — lets the app confirm which channel is connected and show its name and connection status.
• YouTube search terms — lets the app read the search terms that bring viewers to your channel from YouTube search, to suggest new article topics. It sees only the aggregated terms, never individual viewers.
• Search Console — lets the app read the queries, pages and positions of your own site in Google Search, to suggest topics. Read only: the app never writes anything to your Search Console.
• Google Drive — lets the app create a Google Doc from an article and upload its narrated audio, inside a folder named “Open Creator” that the app creates for itself. It cannot see, list or touch anything else in your Drive.
• Connected account — lets the app know which Google account is connected, so it can show that email to you.

The access key for each connection is stored in your workspace's own secrets, kept only for as long as the connection stays active, and is never sold, never used for advertising and never used to train any model.

Disconnecting erases it: pressing disconnect deletes every row of search-term data pulled through that connection first, then removes the connection itself; the access key is removed along with it.

Open Creator's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

YouTube API Services

Open Creator uses YouTube API Services to upload your videos, show which channel is connected, and read the search terms that bring viewers to your channel. By using the YouTube features of Open Creator you agree to be bound by the YouTube Terms of Service (https://www.youtube.com/t/terms). How Google handles your data is set out in the Google Privacy Policy (http://www.google.com/policies/privacy).

What YouTube API data we access, store and use:

• Channel ID and channel name — read when you connect or press Check, to show which channel is connected. The name is removed 30 days after the last Check unless a new Check refreshes it.
• Search terms — aggregated counts of the YouTube search terms that bring viewers to your channel, pulled once a day to suggest topics. Each row is deleted 30 days after the day it covers.
• Videos you publish — the video file, title, description, tags, thumbnail and scheduled time you chose are sent to YouTube when you press publish. This is your own content; the app reads nothing else from your channel.
• Access key — the key Google issues for the connection, stored encrypted in your workspace until you disconnect.

We do not share YouTube API data with third parties. The one exception is your own action: when you choose to write an article from a suggested search term, that term goes to the language model provider as part of your brief. YouTube API data is not stored in cookies or on your device; the app only keeps your sign-in and display preferences there.

The same Google project also runs our internal tool for our own YouTube channel. That tool uses the permission to manage YouTube videos (youtube.force-ssl) only to edit the title, description, tags and playlist of videos already published on that channel. It never deletes a video, and Open Creator does not ask your account for this permission.

Revoking access and deleting YouTube data

• In the app — disconnect the channel under Workspace › Channels. The access key and every search term pulled through it are deleted at once.
• At Google — revoke Open Creator's access at any time on the Google security settings page (https://security.google.com/settings/security/permissions).

To have your YouTube data deleted without disconnecting, write to hello@opencreator.app. We delete it within 7 days of your request.

Children

The service is for people who make content. It is not aimed at children under 13 and we do not knowingly collect their data.

Changes to this page

If we change something material we update the date at the top and tell you in the app before it takes effect.

Contact

Privacy questions, or a request for a copy of your data: hello@opencreator.app