Privacy Policy.

This policy describes what data Creator Agent OS collects, what we do with it, who we share it with, and the controls you have over your own information. We try to keep the data footprint small and the processing transparent — the specifics are below.

1. Who we are

Creator Agent OS is operated by Studio 1111 LLC, a New York limited liability company. References to “we,” “us,” or “Studio 1111” in this policy mean the LLC.

2. What we collect

2.1 Account information

When you sign up: your email address, a hashed password (we never store the plaintext), your name if you provide one, and the invite code you redeemed. We also assign your account a unique forwarding address at inbound.creatoragentos.com derived from the local part of your email.

2.2 Profile information

Anything you add to your profile in Settings: your niche, the platforms you create on, your follower count, your bio, your tax reserve rate. W-9 information (legal name, business name if applicable, address, taxpayer identification number) when you generate invoices — taxpayer IDs are encrypted at rest with AES-256-GCM.

2.3 Deal and pipeline data

The deals you log manually, brand names, deliverables, fees, contract dates, payment status — all the structured fields you fill in.

2.4 Forwarded brand emails

When you forward a brand email to your inbound address, we receive and store: the sender's name and email, the subject line, the message body, any attachments (typically contract PDFs), and the AI-parsed summary we generate from that content.

2.5 Uploaded contracts

When you upload a contract PDF or DOCX, we store the file and any AI-generated risk analysis derived from it. Contract content is encrypted in transit and stored on Vercel Blob private storage.

2.6 AI-generated outputs

Rate calculations, contract risk flags, response drafts, email summaries — anything our AI features produce based on your data.

2.7 Payment information

Pro subscribers go through Stripe Checkout. We receive and store your Stripe Customer ID and subscription metadata (plan tier, status, billing period). We never see or store your card number — Stripe handles that directly.

2.8 Product usage and diagnostics

We log basic product analytics through PostHog (event names, feature usage timestamps, anonymized session identifiers) so we can understand which features get used and where users get stuck. Server-side error logs are captured by Vercel for debugging.

3. How we use your information

We use your data only to:

• Provide the service — store your deals, summarize forwarded emails, analyze your contracts, generate your invoices, send your transactional emails
• Bill you for Pro (when applicable)
• Communicate with you about your account (welcome emails, password resets, security notices, important service updates)
• Improve the product based on aggregated, anonymized usage patterns — we don't look at individual deal content for product analytics
• Comply with legal obligations and enforce our Terms of Service

We don't sell your data, ever.We don't run ads, we don't share data with third-party advertisers, and we don't monetize the data you bring into Creator Agent OS in any way other than charging you a subscription to use the service.

4. Who we share data with

We share data only with the third-party services we need to operate the platform. Each is listed below with the specific purpose:

4.1 Stripe (payments)

Stripe processes Pro subscription payments and hosts the Customer Portal where you manage your subscription. They receive your billing email, name, billing address, and payment method. Their privacy practices: stripe.com/privacy.

4.2 Postmark (email)

Postmark handles outbound transactional emails (welcome, password reset, invoice deliveries to brands) and inbound email forwarding (when you forward a brand email to your inbound address, Postmark receives it and webhooks the content to us). Their privacy practices: postmarkapp.com/privacy-policy.

4.3 Anthropic (AI processing)

Anthropic's Claude API processes brand email content, contract content, and rate-calculation context to produce the AI features in Creator Agent OS. Anthropic does not train models on data sent through their commercial API. See our AI Disclosure for details. Their privacy practices: anthropic.com/legal/privacy.

4.4 Vercel (hosting + file storage)

Vercel hosts the Creator Agent OS web application and serves it from edge regions. Vercel Blob is the private-storage backend for uploaded contract files and generated invoice PDFs. Their privacy practices: vercel.com/legal/privacy-policy.

4.5 Neon (PostgreSQL database)

Neon hosts the production Postgres database that stores your account, deal pipeline, and structured data. Their privacy practices: neon.tech/privacy-policy.

4.6 PostHog (product analytics)

PostHog receives anonymized event-level usage data. We don't send your deal content, brand email content, or contract content to PostHog — only feature-usage telemetry. Their privacy practices: posthog.com/privacy.

4.7 Legal disclosures

We may disclose data if required by valid legal process (subpoena, court order) or to protect the safety, rights, or property of Studio 1111, our users, or the public. We'll notify you of any such request unless legally prohibited.

5. How long we keep your data

While your account is active, we keep your data for as long as you keep your account. If you delete your account (by emailing hello@creatoragentos.com), we delete the bulk of your data within 30 days — including deals, forwarded brand emails, uploaded contracts, and AI-generated outputs.

Some records are retained longer when required by law or for fraud prevention: payment records for tax purposes (typically 7 years), security logs for incident investigation (typically 12 months), and anonymized aggregate analytics that cannot be tied back to you.

6. Your rights

6.1 Access

You can request a copy of the personal data we hold about you by emailing hello@creatoragentos.com. We'll respond within 30 days.

6.2 Correction

Most account info you can correct yourself in Settings. For anything you can't edit directly, email hello@creatoragentos.com.

6.3 Deletion

Email hello@creatoragentos.comfrom the address on your account to request deletion. We'll confirm and process within 30 days (see retention exceptions in §5).

6.4 Data export

You can request a machine-readable export (typically CSV or JSON) of your deal data, calculator history, and account info by emailing hello@creatoragentos.com.

6.5 California residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to know:what personal information we've collected, used, disclosed, or shared
• Right to delete:personal information we've collected from you
• Right to opt out of sale:we don't sell personal information, so there's nothing to opt out of, but the right exists
• Right to non-discrimination: exercising any of these rights doesn't change the service you receive

To exercise California rights, email hello@creatoragentos.comwith the subject line “CCPA request.”

7. Cookies and tracking

We use functional cookies needed for the service to work — authentication session tokens, CSRF protection, and preference settings. We do not use advertising cookies, do not run third-party ad pixels, and do not engage in cross-site tracking.

8. Security

We protect your data with industry-standard measures: TLS in transit, encrypted-at-rest storage on managed cloud infrastructure (Vercel, Neon, Vercel Blob), bcrypt-hashed passwords, AES-256-GCM encryption for taxpayer identification numbers, and least-privilege access controls on our internal systems.

No system is perfectly secure. We'll notify affected users without undue delay if we discover a security incident that materially affects their data.

9. Children

Creator Agent OS is not directed to anyone under 18 and we do not knowingly collect data from minors. If you believe a minor has signed up, email hello@creatoragentos.comand we'll delete the account.

10. International users

Creator Agent OS is currently US-only. If you access the service from outside the United States, you do so on your own initiative and are responsible for compliance with local law. Your data is stored and processed in the United States.

11. Changes to this policy

We may update this policy as the product, our processors, or applicable law evolves. Material changes will be announced via email at least 14 days before they take effect. The “Last updated” date at the top of this page reflects the latest version.

12. Contact

Privacy questions, data requests, or anything else policy-related: email hello@creatoragentos.com.

Studio 1111 LLC
New York, NY