Privacy Policy

01Who we are

Creator Scalers is a business name of the partnership of Lindell Group Pty Ltd and Murdoch Capital Holdings Pty Ltd (ABN 39 680 954 230), based in Australia. In this policy, "we" and "us" mean Creator Scalers.

Our platform is called Richie, at richie.so. Its earlier addresses, scaler.gg and app.creatorscalers.com, still reach it.

We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988. For any question about your information, email admin@creatorscalers.com.

02What we collect

On our websites

• The waitlist: your email address.
• The enquiry form: your name, email, what you're interested in and your message.
• A Scale Advisory application: your name, email, a link to your main channel, your audience size, product stage, monthly revenue range and main goal.
• A Facebook service application: your name, email, your Facebook page and answers about your content.
• Booking a call: Cal.com, or Lemcal on our Facebook service page, takes the details you enter and the time you pick, and passes them to us.

Our websites don't use analytics or advertising trackers.

On the platform

• Your email address. We add it to give you access, and you sign in with a one-time code we email to it, or with Continue with Google.
• Continue with Google. If you choose it, Google gives us your email address, and we use it only to log you in. It works only for an email we have already added, so it never creates an account. We keep nothing else from Google: no Google key, profile or contacts.
• Which portals your email can open.
• Data from the accounts you connect. Facebook is covered in its own section below, and YouTube, Snapchat, Instagram and TikTok at the end of it.
• Files you send us: footage, reaction clips and videos for a copyright check, from your computer, your phone or your Google Drive.
• Roadmap requests and votes you make in your portal.
• What our team adds: notes from calls with you, staff notes, the Do's and Don'ts, content plan and summary we keep for each creator, and the posts we plan for your page, with their captions, notes and any videos we add for them.
• Your public TikTok profile: if our team asks, Apify reads the public posts on your TikTok profile by your handle. We keep a link to each post, its numbers, its subtitles and its cover image, so our team can pick clips to reuse.

When you buy from a creator's Store

Stripe runs the checkout on its own page. It takes your email and your payment, and we never see your card details. Stripe gives us your email, and we keep it with your order to send you your download link and for our records. The creator never sees it. If you tick the box to get news from the creator, we also keep your email on that creator's news list.

To stop abuse of the checkout, we keep a scrambled code made from your IP address, your browser and the day. It can't be turned back into your IP address, and we don't keep the address itself.

From Slack

If we work with you in a shared Slack channel, we read its messages to keep track of your plans, preferences and deadlines. For pages we manage, we also read our own team's channel about your page in the same way. We don't store the messages themselves. AI turns each day or thread into a short summary and a few facts, and we drop any fact that contains a figure, such as a fee or an earnings number, before anything is saved. We don't read direct messages or the contents of shared files.

03Facebook data

We connect to your Facebook page in one of two ways: you add Creator Scalers as a partner on your page in Meta Business Suite, or you connect the page yourself with Facebook Login in your portal. With Facebook Login we ask for four permissions. None of them lets us post, delete or change anything on your page.

• pages_show_list: to list the pages you manage, so you can pick which ones to connect.
• pages_read_engagement: to read your page's posts, videos and engagement.
• pages_read_user_content: to read the comments people leave on your posts.
• read_insights: to read your page's insights: views, followers, audience and earnings.

Once Meta approves it, we will also read the private messages people send your page, with pages_messaging and pages_manage_metadata, as described under "Messages to your page" below. Until then we don't read them.

What we read

• Your page's name and picture.
• Your posts and videos, with their numbers: views, watch time, retention, reactions and clicks.
• Daily page numbers: views, followers gained and lost, engagement and earnings, and earnings per post.
• Audience breakdowns by age, gender and country. Facebook gives these as totals, never as individual people.
• The text of comments on your posts. We don't keep who wrote a comment, only whether it was your page.
• Once Meta approves it, the messages people send your page and your page's replies: their text, when they were sent, and which conversation they belong to. We don't keep who sent a message.
• For pages we manage, videos that are scheduled but not yet published: their title, caption, length, format and a link to the video.

Videos read by AI

When a page is first connected, we read its videos from the last 90 days, up to 300 of them. After that, for pages we manage and pages a creator connects in their portal, we read each new video every night, including scheduled videos that aren't published yet.

To read a video, we download it for a short time. Groq transcribes the audio, and Anthropic describes how the video is made from frames of it, its title and the transcript. Photo posts are read from their pictures. AI never sees earnings when it does this. The video file is deleted as soon as it has been read, and we keep the transcript and the description.

Scheduled videos

For pages we manage, we copy scheduled videos (title, caption, length, format and a link to the video) to our team's content schedule in Notion, so we can plan around them.

Copyright check

Every two hours, a scheduled check looks at the scheduled videos on pages we manage before they go out, and works through their other videos, newest first. It sends short audio samples to ACRCloud and a few frames to Anthropic and Google Cloud Vision, to find copyrighted music and footage. Videos you send us for a check in your portal go through the same steps. The video file is deleted when the check ends, and we keep the result.

When the licensor check is on for a creator, AI also writes a short text description of the video, at most 12 words, and we search BViral's public video library with it. Only that description goes to BViral: never the video file, the page or the creator's name.

Comments

AI (Anthropic) reads the text of comments to write a weekly note on what your audience is saying, and to suggest product ideas when our team asks for them. OpenAI makes the comment text searchable for our team. We remove email addresses and phone numbers from comments before AI reads them, and we never keep who wrote a comment.

Messages to your page

Once Meta approves it, we read the private messages people send your page, so our team knows what your audience asks for and can recommend content and products that answer it. We keep each message's text, when it was sent, whether your page sent or received it, and which conversation it belongs to. We don't keep who sent a message, and we never reply to or send messages. AI (Anthropic) sorts each message received into questions, requests for videos, interest in buying something, complaints and brand or collaboration enquiries, and writes a weekly note for our team with the counts and the main themes, never a message's words. We remove email addresses, phone numbers and links before AI reads a message. OpenAI makes the weekly note searchable for our team. Messages are only for our team: they are not shown in your portal, and they are not sent to Supermemory. The themes in the weekly notes become part of the summary of you our team keeps, which is copied to Supermemory. We delete each message 90 days after it was sent; the weekly notes keep only counts and themes.

Page access keys

When you connect with Facebook Login, Facebook gives us an access key for each page you pick. We keep these keys encrypted in Supabase Vault. Our database holds only a reference to each key and a short fingerprint. A key is never sent to your browser, put in a web address or written to our logs.

Facebook Login also gives us a key for your own Facebook account. We use it only to check which permissions you gave us, list your pages and get the key for each page you pick. We keep it encrypted in Supabase Vault while you pick your pages, stop using it after 30 minutes, and delete it once your pages are connected or you cancel. We also keep your Facebook user ID with each page you connect, so that when you remove our app in Facebook, we know which keys to delete.

Ad results

For businesses whose ads we run, we read their ad accounts' results with Meta's ads_read permission: spend, reach, clicks, purchases and revenue. It can only read, never change an ad. We keep daily totals in our database and post a daily summary in Slack.

We also keep a copy of each running ad's image, or a still from a video ad (never the video file), with the words that ran with it, so we can match each ad to its results. The pictures are kept in private storage with no public link.

What we never do

We never sell Facebook data, never use it for advertising or to target ads, and never pass it to data brokers. We use it only to run our services as this policy describes, including the combined learnings across pages in the next section.

YouTube data

You can connect your YouTube channel in your portal by signing in with Google. We ask for read-only access to your channel (youtube.readonly) and to its YouTube Analytics (yt-analytics.readonly). Neither lets us upload, delete or change anything. Once a day we read your channel's subscribers, total views and number of videos, and for each of your newest 500 videos its title, publish date, length, views, likes, comments and minutes watched. We use them to show you and our team how your channel is doing. We use YouTube API Services, and by connecting you agree to YouTube's Terms of Service. Google's handling of your sign-in is covered by the Google Privacy Policy.

Google gives us a key for your channel. We keep it encrypted in Supabase Vault, the same way as the Facebook keys above. When you disconnect YouTube in your portal, we delete the key, ask Google to cancel it, and delete the figures we stored for your channel. You can also remove our access at any time in your Google account's security settings. Our next daily read then finds the key no longer works, and 7 days later we delete the figures we stored for your channel, unless you connect it again before then. You can also ask us to delete them sooner. Our use of information we receive from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We never sell YouTube data, never use it for advertising, and never use it to train AI models.

Snapchat data

You can connect your Snapchat Public Profile in your portal by signing in with Snapchat. We ask only for access to your Public Profile's figures (snapchat-profile-api), which doesn't let us post, delete or change anything, or read your Snaps or messages. Once a day we read, for each of the last 90 days, your subscribers, subscribers gained, views, viewers, Story views, saved Story views, Spotlight views and profile views. We use them to show you and our team how your profile is doing. By connecting you agree to Snap's Terms of Service, and Snap's handling of your sign-in is covered by the Snap Privacy Policy.

Snapchat gives us a key for your profile. We keep it encrypted in Supabase Vault, the same way as the Facebook and YouTube keys above. When you disconnect Snapchat in your portal, we delete the key and the figures we stored for your profile. We never sell Snapchat data, never use it for advertising, and never use it to train AI models.

Instagram and TikTok data

You can connect your Instagram and TikTok accounts in your portal. You sign in with Instagram or TikTok on a page run by Zernio, a service that connects to these platforms for us, so the sign-in screen names Zernio. When you connect for figures, we ask Zernio only for your accounts' figures: we only read them, and never post, delete or change anything, or read your messages. Letting Richie post is a separate choice, described below. Instagram's or TikTok's sign-in screen may list more permissions than that, because it shows everything Zernio's app can do. Instagram needs a Business or Creator account. Once a day we read, for each of the last 90 days, your followers and the views, reach, likes, comments, shares and saves your posts got that day, and for each post published in that time its views, reach, impressions, likes, comments, shares and saves, its link and when it was published. Zernio reads these from Instagram's and TikTok's own APIs and passes them to us. We use them to show you and our team how your accounts are doing. By connecting you agree to Zernio's Terms of Service, and Zernio's handling of your data is covered by the Zernio Privacy Policy.

Zernio keeps the keys Instagram and TikTok give for your accounts; we don't store them. When you disconnect Instagram or TikTok in your portal, we ask Zernio to remove the account and delete the figures we stored for it. You can also remove access in Instagram's or TikTok's own settings. We never sell Instagram or TikTok data, never use it for advertising, and never use it to train AI models.

Summaries of your YouTube, Snapchat, Instagram and TikTok figures

So our team, and Claude when they ask it about you, can find how your accounts are doing, we write short summaries from the figures above after each daily read: one for each YouTube video and each Instagram or TikTok post, with its title or link and its figures, one for each account, and one for each month. Snapchat gets the account and monthly summaries only, because Snap doesn't give us posts. Our own code writes them from the stored figures; no AI writes their words or figures. OpenAI turns each one into a search index so it can be found by meaning, and a copy goes to your memory in Supermemory, described below. When the figures are deleted (you disconnect, or for YouTube 7 days after you remove our access), the summaries are deleted too, and so are their copies in Supermemory.

Letting Richie post for you

You can also let Richie post and schedule videos for you on Facebook, Instagram, TikTok and YouTube. You choose this in your portal, one platform at a time, and sign in with the platform on Zernio's page, under a line saying Richie will be able to post and schedule for you. For Facebook you pick the Page Richie may post to. We ask Zernio for posting permission (for Facebook, pages_manage_posts), plus your figures on Instagram and TikTok. Facebook's sign-in screen also lists the permissions Zernio asks for on every Page connection, such as listing your Pages and Page messaging; we never ask Zernio to read or send your messages. For Facebook and YouTube we ask for nothing to read through Zernio: their figures keep coming from the connections described above. After you connect, we ask Zernio whether posting was allowed, and for Facebook which Page it is, and keep both with the connection. If our team connects an account of yours for posting, Richie doesn't post to it until you allow posting yourself in your portal. Zernio keeps the platform's key; we don't store it. Your portal shows which accounts Richie can post to. Disconnect or Stop posting in your portal asks Zernio to remove the account, and Richie can no longer post to it. You can also remove Zernio's access in the platform's own settings.

04How we use it

• To run the services you've signed up for: running and growing your Facebook page, Scale Advisory, and the platform.
• To show you your results in your portal: earnings, posts, audience and what's next.
• To plan content and recommend what to post and when.
• To check videos for copyright problems before they're posted.
• To tell you what your audience is saying, and to suggest products you could make. Our team uses the counts and themes from messages to your page for this; the messages themselves are not shown to you or anyone outside our team.
• To report ad results to the businesses whose ads we run.
• To deliver what you buy in a creator's Store, and to keep a record of the sale.
• To sign you in and keep your account secure.
• To reply to enquiries and applications, and to email you about your account.

We use AI models to help with this work: to transcribe and describe videos, check them for copyright, sum up conversations and comments, make your information searchable, and draft content and product ideas.

Learning across pages

We also learn what works across all the pages connected to us, for example which kinds of hooks or formats earn more per view. We work these patterns out from the pages' numbers combined, and use them to advise every creator we work with. The advice never names a page or a person.

05Who processes it

These services handle data for us. Each gets only what it needs for its job.

Vercel

Hosts our websites and the platform, and runs the copyright check on videos you send us.

Supabase

Our database, including the encrypted Facebook keys.

Cloudflare R2

Stores the files you send us and the videos our team adds for you, the files creators sell in their Store, TikTok cover images, and the pictures of running ads described above.

GitHub

Runs our scheduled jobs, which pull page data, read new videos and run the copyright check. It also holds our team's records of running ads: the words that ran with each one and its results.

Anthropic (Claude)

AI that describes videos, checks them for copyright, sums up conversations, writes the weekly audience notes, sorts and sums up messages to your page, and drafts content and product ideas.

OpenAI

Makes text searchable by meaning, including transcripts, post summaries (for Facebook, YouTube, Instagram and TikTok), account and monthly summaries, comments and the weekly notes on messages to your page.

Groq

Transcribes the audio of videos.

ACRCloud and Google Cloud Vision

Check videos for copyrighted music and footage, from short audio samples and a few frames.

BViral

When the licensor check is on for a creator, we search its public video library with a short text description of a video. Nothing else is sent.

Supermemory

Keeps a searchable memory for each creator. It gets facts about the creator, notes from calls, Slack and our team, the Do's and Don'ts, content plan and summary, post summaries with their views and earnings, transcript excerpts, monthly totals, page profiles, the summaries of your YouTube, Snapchat, Instagram and TikTok figures described above, comments on posts (never who wrote them), the weekly audience notes, and, once we read messages to your page, the themes from them as part of your summary (never the messages). Every creator has memory on unless they ask us to switch it off. We remove email addresses and phone numbers before anything is sent.

Slack

Where we talk with you. We read shared channels as described above, and post the daily ad results summaries.

Google (sign-in)

If you choose Continue with Google, Google confirms your email address so we can log you in.

Google (YouTube)

If you connect YouTube, you sign in with Google, and we read your channel's figures from YouTube's own APIs.

Snap (Snapchat)

If you connect Snapchat, you sign in with Snapchat, and we read your Public Profile's figures from Snap's own API.

Zernio

If you connect Instagram or TikTok, you sign in on Zernio's page, and Zernio keeps the account's key and passes us its figures. It gets your Instagram and TikTok accounts' figures and posts as described above. If you let Richie post for you, Zernio also holds posting access to the Facebook Page, Instagram, TikTok or YouTube account you connect, and tells us which Page it is and whether posting was allowed. It gets nothing else from Facebook or our other sources.

Google Drive

If you pick a file from Google Drive, your browser signs in to Google directly. Your Google sign-in never reaches our servers.

Stripe

Runs the checkout for creators' Stores. It takes the buyer's email and payment, and we never see card details.

Resend

Sends sign-in codes, account emails, and the email with a Store buyer's download link.

Apify

Reads a creator's public TikTok profile by their handle, when our team asks it to.

Formspree

Receives the forms on our websites.

Cal.com and Lemcal

Book calls with our team.

Notion and Linear

Our team's content schedule, including scheduled videos from pages we manage, and the roadmap requests you send from your portal.

Google Fonts, Fontshare and cdnjs

Serve the fonts and icons on our websites, so they see your IP address like any website you load.

Apart from the services above, including the short description we send to BViral, we don't share your information with anyone unless the law requires it. Our team sees your data only to do their work for you.

06Data outside Australia

Our platform and database run in Sydney, Australia. Some of the services listed above process data overseas, mainly in the United States, and a few in other countries. We choose services with strong security, and each one gets only what it needs for its job.

07Keeping it safe

• You sign in with a one-time code sent to your email, so there's no password of yours for us to store.
• Each portal shows only its own creator's data, and every page checks who's asking.
• Our database is reached only from our own systems, never from your browser.
• Facebook keys are encrypted, and files you send go to private storage.

08How long we keep it

• Your account, page data and creator context: while you work with us. When you ask, we delete it within 30 days.
• Facebook data of a page we stop working with: we stop pulling the page, and keep the data we already have for 90 days in case you come back. Then we delete it.
• Page access keys: until you disconnect the page or remove our app in Facebook. If we stop working with the page, its key is deleted with the rest of its Facebook data.
• The key for your Facebook account: deleted once your pages are connected or you cancel. We stop using it after 30 minutes.
• YouTube channel key and figures: until you disconnect YouTube in your portal. Then the key is deleted and cancelled at Google, and the figures are deleted. If you remove our access in your Google account instead, the figures are deleted 7 days after our daily read finds the key no longer works. The summaries made from the figures, and their copies in Supermemory, are deleted with them.
• Snapchat profile key and figures: until you disconnect Snapchat in your portal. Then the key and the figures are deleted, with the summaries made from them and their copies in Supermemory.
• Instagram and TikTok figures: until you disconnect the account in your portal. Then we ask Zernio to remove it, and the figures we stored are deleted, with the summaries made from them and their copies in Supermemory.
• Accounts you let Richie post to: the account's name, whether posting was allowed, whether you allowed it yourself and, for Facebook, the Page's id, until you disconnect it in your portal. Then we ask Zernio to remove it.
• Pictures and records of ads we run: while we run ads for the business, including ads that have stopped running, so we can compare them. When the business asks, we delete them within 30 days.
• Videos read by AI: deleted as soon as they're read.
• Videos sent for a copyright check: deleted as soon as the check ends. We keep the result.
• Slack messages: never stored. We keep the short facts drawn from them.
• Messages to your page: deleted 90 days after they were sent. We keep the weekly notes of counts and themes written from them.
• Sign-in codes: work once and expire after 10 minutes.
• Website form entries: as long as we need them to reply and follow up, or until you ask us to delete them.
• Store orders: we keep the buyer's email with the order for our records. If you ticked the box for news from the creator, your email stays on that creator's news list until you ask us to remove it.

We may keep records the law requires us to keep, such as invoices and agreements.

09Your rights

You can ask to see the personal information we hold about you, ask us to correct it, or ask us to delete it. Email admin@creatorscalers.com from the email address you use with us, and we'll reply within 30 days.

To remove our access to your Facebook page or have your data deleted, follow the steps on our data deletion page.

10Cookies

Our websites don't set cookies of their own. If you book a call, the booking window is run by Cal.com under its own privacy policy.

The platform uses only the cookies it needs to work:

• A sign-in cookie that keeps you signed in for up to 30 days.
• A device cookie that remembers a device you've signed in on for up to 90 days, so next time your email is enough. We store only a scrambled copy of it.
• A cookie that lasts 10 minutes and keeps Facebook Login secure while you connect a page, and one like it each while you connect YouTube, Snapchat, Instagram or TikTok, or use Continue with Google.
• A cookie that remembers you've entered the password for an older password-protected report.
• A cookie that remembers your time zone for up to a year, so dates show in your own time.

Our team's accounts use two more cookies for staff tools. A creator's Store pages set no cookies of ours, and Stripe's checkout page runs under Stripe's own privacy policy.

11Questions and complaints

If you have a question or a concern about your information, email admin@creatorscalers.com. We'll reply within 30 days.

If you're not happy with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

If we change this policy, we'll update this page and the date at the top.