Cresivioo

Privacy Policy

Last updated: November 5, 2026

This Privacy Policy explains how Cresivioo (“we”, “us”) collects, uses, shares and protects information when you use our content workspace (the “Service”), including when you connect a TikTok or Instagram account (Instagram is provided by Meta Platforms, Inc.) to publish content.

1. Information We Collect

Information you give us

  • Account details: your name, email address and password (stored hashed by our authentication provider).
  • Workspace details: brand profile, niche, team members you invite and their roles.
  • Content: photos, videos, captions, scripts, designs and other material you upload or create in the Service.

Information from connected accounts (such as TikTok)

When you choose to connect a TikTok account, TikTok shares the following with us, only within the permissions you approve:

  • Basic profile information: your TikTok open ID, username, display name, avatar and follower count, so you can see which account is connected.
  • Access and refresh tokens, so we can publish content you approve to that account.
  • Publishing status of videos and photos you post through the Service, so we can show whether a post succeeded.
  • Your recent videos’ links, captions, dates and public stats (views, likes, comments and shares), so Insights can report how your content performs.

We do not receive your TikTok password, and we do not read your private messages or your followers list.

Information from Meta (Instagram and Facebook)

When you choose to connect an Instagram professional account, Meta shares the following with us, only within the permissions you approve:

  • Basic profile information: your Instagram account ID, username and follower count, so you can see which account is connected.
  • Access tokens, so we can publish content you approve to that account.
  • Publishing status of the posts and Reels you publish through the Service, so we can show whether a post succeeded.
  • Your recent posts’ links, captions, dates and insights (views, likes, comments, shares and saves), so Insights can report how your content performs.

We do not receive your Instagram password, and we do not read your direct messages, the text of comments or your followers list.

Information collected automatically

  • Basic usage and device data, such as log entries, browser type and error reports, used to keep the Service working and secure.
  • Cookies needed to keep you signed in and remember your preferences, such as theme and workspace. We do not use advertising cookies.

Public content for research

When you run research, the Service collects publicly available posts and news (for example, public TikTok and Instagram posts and their engagement counts) about the topics and accounts you choose, to identify trends. We keep the creator’s public username and the link to the original post or article, so content made from it always credits the original source.

2. How We Use Information

  • To provide the Service: create, store, review, schedule and publish your content.
  • To publish to your connected TikTok or Instagram account only the content you or your authorized team members choose to publish, at the time you choose.
  • To generate research, insights, captions and design suggestions for your workspace.
  • To send account emails such as confirmations, password resets and important notices.
  • To secure the Service, prevent abuse and fix problems.
  • To comply with legal obligations.

We do not sell your personal information, and we do not use data from TikTok or Meta for advertising or to build profiles of you or other users. Data received from TikTok or Meta is used only to provide the publishing and Insights features you requested, and is never shared with data brokers or used for surveillance.

3. How We Share Information

  • With platforms you connect: when you publish, we send your content and caption to TikTok or Meta (Instagram), whichever you connected.
  • With your workspace: members of your workspace can see content and connected accounts according to their role.
  • With service providers: companies that host our infrastructure, database, file storage, authentication, email and data collection, under contracts that limit their use of the data to providing services to us.
  • For legal reasons: when required by law, or to protect the rights, safety and security of users or the Service.
  • In a business transfer: if Cresivioo is involved in a merger or acquisition, with notice to you.

4. Data Retention

We keep your information for as long as your account is active. Access tokens for TikTok and Instagram are kept only while the account stays connected and are deleted when you disconnect it. When you delete your account, we delete or anonymize your personal information within 30 days, except where we must keep it longer by law. Backups are overwritten on a rolling basis.

5. Your Choices and Rights

  • Access, correct or download your information from your profile, or by contacting us.
  • Disconnect TikTok at any time in the Service, or revoke Cresivioo’s access from your TikTok app settings (Settings and privacy → Security → Manage app permissions).
  • Disconnect Instagram at any time in the Service, or remove Cresivioo from the Apps and Websites section of your Instagram or Facebook settings.
  • Delete content, or ask us to delete your account and associated data.
  • Depending on where you live, you may have extra rights, such as objecting to or restricting processing. Contact us to use them.

6. Data Deletion

You can delete your data from Cresivioo at any time, including data we received from TikTok or Meta:

  • Remove a connected account: in the Service, open Brand Profile and disconnect the account. We delete its access tokens and stored profile information. You can also remove Cresivioo from your Instagram, Facebook or TikTok settings, after which we can no longer publish to that account.
  • Delete everything: in the Service, open your profile and choose Delete Account. This deletes your account and the data in it.
  • Ask us to do it: email supportcresivio@cresivio.web.id from your account email with the subject “Data deletion request”. We will confirm by email and complete the deletion within 30 days.

7. Security

We protect information with encryption in transit (HTTPS), access controls and restricted access to tokens and stored content. No system is completely secure, so we cannot guarantee absolute security.

8. International Transfers

Our service providers may process information in countries other than yours. When they do, we take steps to make sure your information stays protected as described in this policy.

9. Children

The Service is not intended for anyone under 13, and we do not knowingly collect information from children under 13. If you believe a child has given us information, contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If a change is material, we will notify you in the Service or by email before it takes effect.

11. Contact

Questions or requests about your privacy? Email us at supportcresivio@cresivio.web.id.