Privacy Policy

Last updated: 2026-07-29

1. Controller Identity

AI CREATOR HUB LTD acts as controller for personal data processed through AI Creator Hub.

Company registration number, registered office address, and direct privacy contact details are pending founder confirmation and are not included in this draft.

2. Data We Process

  • Account and authentication information, including profile details and sign-in records.
  • Projects, saved content, AI prompts, generated outputs, and usage history.
  • YouTube Production Studio data, including project state, generation requests, and execution metadata.
  • Subscription, billing, and payment-related information handled through Stripe and related account flows.
  • Contact, support, feedback, and operational security information.

3. Purposes

  • To create and manage user accounts and authenticate access to the service.
  • To provide AI generation, project management, and YouTube production features.
  • To manage subscriptions, credits, billing, and related payment operations.
  • To operate security, abuse prevention, rate limiting, and service protection controls.
  • To handle support requests and privacy-related rights requests.

4. Lawful Basis

Where applicable, processing is based on CONTRACT to provide the requested account, subscription, or product service; LEGAL OBLIGATION where required to comply with applicable law or financial/accounting obligations; and LEGITIMATE INTERESTS for reasonable security, fraud/abuse prevention, service protection, and ordinary operational needs.

5. Data Subject Rights

The service includes authenticated export, deletion, and account settings workflows for certain personal data requests, subject to legal and operational limitations.

6. Service Providers and International Processing

We use service providers such as Supabase for authentication and database services, OpenAI for AI processing, Stripe for payments, Resend for transactional email, and Vercel for hosting and infrastructure. These providers may process data internationally where they operate, and applicable safeguards are used where required.

7. Retention

We retain personal data while the account or service relationship remains active and while needed to provide the requested features, support the service, and meet legal, accounting, dispute, fraud, or security obligations. Some data may be deleted as part of account deletion or service workflows, but immediate deletion cannot be guaranteed in every backup, log, or operational copy.

8. Security

The platform uses authenticated routes, access controls, server-side processing, webhook signature verification, and other operational safeguards to reduce unauthorised access and misuse.

9. Automated Decision-Making

V1 does not rely on solely automated decisions with legal or similarly significant effects for the core service experience.

10. Complaints

Users may contact the service support team with privacy concerns. Where applicable, users may also exercise rights under applicable data protection laws.