Privacy Policy

Introduction

Creoglobal.co ("We" or "Us" or "Our" or "Creoglobal" or "Website") is committed to ensure Your privacy while providing Our services ("Services"). If You want to know more about Our Services you need to provide certain necessary information through Our Website form. Submission of such personal information is voluntary and you may decline to answer Our questions at any time. However, by providing your personal information, You consent to do so for the purpose of assisting you in connection with Our Service.

What Personal Information We Collect

Personal Information Provided by You:

We collect name, email address, your project estimated budget and any other information you voluntarily submit to Us.

How We Use Your Personal Data

To provide and enhance the Service:

We may use personal information data in-house in order to provide and enhance the Service, to improve customers' experience.

To Which Extent and to Whom We Disclose Your Personal Data

We use personal information collected via Our Website for a variety of business purposes described below. We process Your personal information for these purposes in reliance on Our legitimate business interests, in order to enter into or perform a contract with you, with your consent, and/or for compliance with Our legal obligations. We indicate the specific processing grounds We rely on next to each purpose listed below. We use the information We collect or receive:

• To send administrative information to you. We may use Your personal information to send you Service details, respond to your questions and provide other related information and/or information about changes to Our terms, conditions, and policies.
• To respond to legal requests and prevent harm. If We receive a subpoena or other legal request, We may need to inspect the data We hold to determine how to respond. We may disclose aggregate information about Our users for such legal purposes.
• For other Business Purposes. We may use Your information for other Business Purposes, such as data analysis, identifying usage trends, determining the effectiveness of Our Services, to evaluate and improve Our Services and Your experience. We will not use identifiable personal information without Your consent.

Information Sharing

When You provide information to Us, You give Your consent that We may process or share data based on the following legal basis:

• Legitimate Interests: We may process Your data when it is reasonably necessary to achieve Our legitimate business interests.
• Legal Obligations: We may disclose Your information where We are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process.
• Marketing and Promotion: With Your consent, We may use contact details You submitted through Our Website forms to tell You about Creoglobal-related products or Services. We do not sell Your personal information, and this never applies to data received from Google, Meta or other connected platform APIs (see the section below).

Connected Platform Data (ALens: Google, Meta and Other APIs)

ALens (https://alens.creoglobal.co) is Our marketing analytics and client-reporting platform, operated by CREO L.L.C-FZ. When you use ALens and choose to connect a third-party account through that platform's official authorization (OAuth) flow, this section applies in addition to the rest of this policy.

What data We collect

With Your explicit consent per source, We collect on Your behalf: account identifiers and names of the properties You connect, and read-only performance data of those properties. For Google this means Google Analytics metrics (sessions, users, conversions, channels, landing pages), Search Console metrics (search impressions, clicks, queries, index status), Google Ads campaign metrics (spend, clicks, impressions, conversions), Google Business Profile metrics (views, searches, calls, direction requests, reviews) and YouTube channel statistics (views, watch time, subscribers). For Meta this means Facebook Page and Instagram professional account insights and post engagement, and Meta Ads campaign metrics. Similar read-only metrics apply to other connectors (for example Microsoft Advertising, Bing Webmaster Tools, LinkedIn, Semrush, Zoho CRM). We request read-only access wherever the platform offers it and never request permission to publish, edit or delete content on Your accounts.

How We use this data

This data is used for exactly one purpose: displaying Your own marketing performance back to You and the workspace You place it in, as dashboards, scheduled reports, metric alerts and AI-generated report summaries computed from aggregated metrics. We do not use this data for advertising or ad targeting, do not use it to train machine-learning models, and do not combine it across customers.

Sharing, transfer and disclosure

We do not sell connected platform data, and We do not transfer or disclose it to third parties for purposes other than the ones described in this policy. It is shared only with: (a) the members of the workspace You place it in; (b) the service providers that host and operate ALens on Our behalf, namely GoDaddy.com, LLC (cloud server hosting), Cloudflare, Inc. (DNS, TLS and CDN), Resend, Inc. (delivery of scheduled report emails) and Google LLC (Gemini API, which receives only aggregated metric summaries to generate report narrative text); and (c) public authorities where disclosure is required by law.

How We protect this data

Security procedures are in place to protect the confidentiality of Your data. All data is encrypted in transit using TLS. OAuth access tokens are encrypted at rest with a dedicated key. Data is isolated per client workspace using database row-level security, passwords are stored as salted scrypt hashes, and access to production systems is restricted to authorized personnel.

Retention, deletion and revocation

Synced metrics are retained for as long as the connection and workspace exist so that historical reporting works, and no longer than needed for the purposes in this policy. You can disconnect any source at any time and choose to permanently delete its synced history, which removes it from Our database immediately; deleting a workspace deletes all data in it. You can also revoke ALens's access at the platform itself at any time (for example via Google Account security settings at https://myaccount.google.com/permissions or Facebook Business Integrations), which immediately invalidates Our access tokens. You may request deletion of Your data by emailing [email protected].

Google API Services (Limited Use) and YouTube

ALens's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. ALens also uses YouTube API Services; by connecting a YouTube channel you agree to the YouTube Terms of Service, and Google's handling of data is described in the Google Privacy Policy.

Meta and other platforms

Data received from Meta's APIs (Facebook Pages, Instagram, Meta Ads) is processed in accordance with Meta's Platform Terms; data received from LinkedIn, Microsoft, TikTok, Snapchat, Pinterest, Reddit, X and other connected platforms is processed in accordance with each platform's developer terms. In all cases the same rules above apply: read-only use, display only to Your own workspace, no sale, no advertising use, deletion on disconnect.

Data Security

We have implemented security measures designed to secure Your personal information from accidental loss and from unauthorized access, use, alteration, or disclosure. However, We cannot absolutely guarantee that unauthorized third parties will never be able to defeat those measures or use Your personal information for improper purposes.

Data Retention

We keep Your information for as long as necessary to fulfill the purposes outlined in this privacy policy unless otherwise required by law. When We have no ongoing legitimate business need to process Your personal information, We will either delete or anonymize it, or, if this is not possible then We will securely store Your personal information and isolate it from any further processing until deletion is possible.

Your Privacy Rights

In some regions (like the European Economic Area), You have certain rights under applicable data protection laws. These may include the right:

• to request access and obtain a copy of Your personal information,
• to request rectification or erasure;
• to restrict the processing of Your personal information; and
• if applicable, to data portability.

Cookie Policy

We may use cookies and other tracking technologies when you visit https://creoglobal.co to help customize Our Website and improve your experience. We use cookies on the Website to, among other things, keep track of services You have used, record Your user preferences, and track the pages You visit.

Types of Cookies

• Analytics Cookies: Monitor how users reached the Website, and how they interact with and move around once on the Website.
• Our Cookies: "First-party cookies" that are necessary for the Website to function properly.

Contact Information

If You have questions or comments about this policy, You may contact Us through our email at [email protected].

If You believe that Creoglobal has not adhered to this Privacy Policy, please contact Us and We will use commercially reasonable efforts to remedy the problem.