Privacy Policy

Creaboost Inc. and its affiliates, including DEEPCASTR SAS (collectively, “Creaboost”, “we”, “us”, or “our”), value and respect your privacy.

This Privacy Policy explains how we collect, use, store, and disclose personal information when you:

• use the Creaboost software-as-a-service platform available at https://app.creaboost.com (the “Creaboost Solution”);
• visit our website at https://creaboost.com (the “Website”);
• interact with us as a customer, prospect, partner, or job applicant; or
• otherwise communicate with us.

Creaboost primarily provides analytics, reporting, and performance insights to business customers (“Clients”). In doing so, we may process data relating to our Clients’ end users or customers (“End Users”) on behalf of our Clients.

1. Scope and Roles

1.1 Data Controller vs. Data Processor

• When processing data on behalf of our Clients through the Creaboost Solution, Creaboost acts as a data processor, and the Client is the data controller.
• When processing data for our own purposes (e.g., Website visitors, marketing contacts, job applicants), Creaboost acts as a data controller.

Clients are responsible for providing appropriate notices to End Users and for ensuring they have a lawful basis to provide data to Creaboost.

2. Personal Information We Collect

2.1 Data Processed on Behalf of Clients

When providing the Creaboost Solution, we may process the following categories of data on behalf of Clients:

• Advertising and marketing performance data (e.g., impressions, clicks, spend, conversions);
• Campaign, ad group, keyword, creative, or product-level metrics;
• Online engagement or attribution signals;
• Technical identifiers associated with advertising platforms.

This data may be obtained:

• directly from Clients;
• via authorized integrations with third-party platforms (e.g., Google Ads, Meta Platforms, TikTok);
• through APIs explicitly authorized by the Client via OAuth or similar mechanisms.

👉 Creaboost does not independently collect End User data for its own marketing purposes.

2.2 Data Collected Directly from You

We may collect personal information directly from you when you:

• create an account;
• purchase a subscription;
• contact support;
• subscribe to marketing communications;
• apply for a job;
• engage with us on social media;
• participate in surveys or events.

This information may include:

• name;
• email address;
• job title;
• company name;
• billing information;
• login credentials;
• communication content.

2.3 Website and Technical Data

When you visit our Website, we may automatically collect:

• IP address;
• browser type;
• operating system;
• pages viewed;
• timestamps and referring URLs.

This data is used for security, analytics, and Website improvement.

3. How We Use Personal Information

We use personal information solely for the following purposes:

• to provide, operate, and maintain the Creaboost Solution;
• to generate analytics, dashboards, and reports requested by Clients;
• to authenticate users and manage accounts;
• to provide customer support;
• to secure our infrastructure and prevent fraud or abuse;
• to comply with legal obligations;
• to communicate with Clients and prospects (where permitted).

Important Restrictions

• We do not sell personal data.
• We do not use data obtained from Google APIs or Meta APIs for advertising targeting, retargeting, profiling, or resale.
• We do not use such data to train generalized artificial intelligence or machine-learning models.

4. Third-Party Platforms and OAuth

4.1 OAuth Authorization

Clients may authorize Creaboost to access data from third-party platforms (such as Google Ads or Meta Platforms) using OAuth or similar authorization mechanisms.

Clients may revoke this authorization at any time:

• through the relevant third-party platform settings; and/or
• through the Creaboost Solution where available.

Upon revocation, Creaboost will cease accessing the relevant platform data.

4.2 Google API Services User Data Policy

If the Creaboost Solution accesses Google APIs:

Creaboost’s use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

Google-derived data is used only to provide the requested reporting and analytics services to the Client.

4.3 Meta Platform Data

If the Creaboost Solution accesses Meta Platforms APIs, such data is used solely in accordance with Meta Platform Terms and applicable developer policies.

5. Sharing of Personal Information

We do not sell personal information. We may share personal information only in the following circumstances:

5.1 Service Providers

We may share data with trusted service providers who assist us with:

• hosting and infrastructure;
• payment processing;
• customer support;
• analytics and security.

Service providers may only process data under our instructions and for the purposes described in this Policy.

5.2 Legal Obligations

We may disclose personal information where required to do so by law, regulation, legal process, or governmental request.

5.3 Business Transactions

In the event of a merger, acquisition, reorganization, or sale of assets, personal information may be transferred as part of that transaction, subject to appropriate safeguards.

6. Data Retention

We retain personal information only for as long as necessary to:

• provide the Services;
• comply with legal obligations;
• resolve disputes;
• enforce agreements.

Aggregated or anonymized data may be retained for analytical and statistical purposes.

Unless otherwise required by law, we generally retain platform reporting data for the duration of the Client’s subscription. Upon account closure or disconnection, we delete or de-identify such data within 30 days, except where retention is required for legal, security, or dispute-resolution purposes.

7. Security

We implement reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, or disclosure.

No system is 100% secure, but we continuously work to protect our data and systems.

8. Your Rights

Depending on applicable law, you may have the right to:

• access your personal information;
• correct inaccurate data;
• request deletion;
• object to or restrict processing.

Where Creaboost processes data on behalf of a Client, requests should be directed to that Client. We will assist our Clients as required by law.

Requests may be submitted using the contact details below.

9. International Data Transfers

Personal information may be processed in countries other than your country of residence, including the United States and the European Union. Where required, appropriate safeguards are implemented.

10. Updates to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated with reasonable notice. The “Last updated” date at the top indicates when this Policy was last revised.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us at:

Email: privacy@creaboost.com
Attention: Privacy & Data Protection Officer

‍