Kre8r

Privacy Policy

Effective date: April 18, 2025  ·  Last updated: May 10, 2026

This Privacy Policy applies to the Kre8r application, a content production platform operated by 7 Kin Homestead. By using Kre8r, you agree to the practices described in this policy.

1. Who We Are

Kre8r is a private content production platform operated by 7 Kin Homestead (Jason Rutland). This Privacy Policy explains how we collect, use, and protect information when you use the Kre8r application and its integrations with third-party platforms including TikTok, YouTube, Instagram, and Facebook.

Kre8r is not a public consumer product. Access is restricted to authorized users only.

2. Information We Collect

We collect only what is necessary to operate the platform:

• Account credentials — username and hashed password for platform login.
• Platform OAuth tokens — access tokens granted by connected platforms (TikTok, YouTube, Instagram, Facebook) when you authorize the integration. These tokens are stored securely in our database and used solely to perform actions you explicitly request (e.g., publishing a video).
• Content you create or upload — scripts, project notes, video files, captions, and other creative assets you add to the platform. This content is stored locally on your instance and is not transmitted to third parties except as required to fulfill a publishing action you initiate.
• Analytics data — performance metrics fetched from connected platforms (views, engagement, etc.) to display within the platform dashboard.
• Usage logs — server logs for error diagnosis. Logs do not contain personally identifying information beyond IP address and are not retained beyond 30 days.

3. How We Use TikTok Data

When you connect your TikTok account to Kre8r, you grant us permission to post videos on your behalf using the TikTok Content Posting API. We use your TikTok access token exclusively to:

• Upload and publish videos you have selected and explicitly scheduled or posted through Kre8r.
• Fetch basic creator information (display name, avatar) to verify the connected account and display it in the platform interface.
• Retrieve post performance metrics (plays, reach, engagement) to display in the MirrΩr analytics dashboard.

We do not read your TikTok inbox, followers list, following list, or any content beyond what is explicitly needed for the features described above. We do not sell, share, or transfer your TikTok data to any third party.

You can revoke TikTok access at any time by disconnecting the integration within Kre8r or directly through your TikTok account settings at tiktok.com/settings. Upon disconnection, your TikTok access token is deleted from our database immediately.

4. How We Use YouTube, Instagram, and Facebook Data

The same principles apply to all connected platforms. OAuth tokens are stored securely, used only to perform actions you initiate, and never shared with third parties. You can disconnect any platform at any time from within PostΩr.

5. Data Sharing

We do not sell your data. We do not share your data with advertisers or data brokers.

Data is transmitted to third parties only in these circumstances:

• Platform APIs — when you publish content, video files and captions are sent to the respective platform's API (TikTok, YouTube, Meta) as part of the publish action you initiated.
• AI processing — script content and creative notes may be sent to Anthropic's Claude API to generate scripts, captions, and analysis. Anthropic's privacy policy applies to this data in transit. We do not use Anthropic's API in a way that allows your data to train their models.
• Legal requirements — if required by law or to protect rights and safety.

6. Data Retention

Your data is retained for as long as your account is active. Project data, scripts, captions, and analytics are stored in a local SQLite database on the server instance. You may request deletion of your data at any time by contacting us.

OAuth tokens are deleted immediately upon platform disconnection. Server logs are purged on a rolling 30-day cycle.

7. Data Security

Kre8r is served over HTTPS. Passwords are hashed using bcrypt before storage — we never store plaintext passwords. OAuth tokens are stored in an encrypted-at-rest SQLite database. Access to the platform requires a valid login session.

8. Children's Privacy

Kre8r is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children.

9. Your Rights

You have the right to:

• Access the data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Revoke platform OAuth authorizations at any time.

To exercise any of these rights, contact us at the address below.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date. Continued use of Kre8r after changes are posted constitutes your acceptance of the revised policy.