How Creavily handles account, publishing, and platform data.

Who operates Creavily

Creavily is a social publishing service operated by EcomWith. This policy applies to the Creavily website, workspace application, public API, and connected social account features.

It does not replace the privacy policies of Pinterest or any other social platform. Those services control the information they process on their own systems.

Information we handle

• Account and workspace information, such as your name, email address, organization, brand, membership, and sign-in records.
• Publishing information, such as uploaded media, captions, drafts, schedules, selected destinations, job status, published links, and audit records.
• Connected account information authorized through a social platform, including the account identity, granted scopes, board or destination information, webhook subscriptions, comment or engagement events, and publishing results needed for the feature you chose.
• OAuth credentials and refresh information. Creavily stores these on the server using encrypted secret storage and does not expose them in browser code or public pages.
• Limited service, security, and diagnostic information used to protect accounts, investigate failures, and maintain the service.

How we use information

• Provide sign-in, workspace, media, scheduling, publishing, reporting, and support features requested by the user.
• Send authorized content to the destinations selected by the user and return the resulting status or published link.
• Protect accounts, enforce workspace boundaries, prevent abuse, troubleshoot failures, and keep an audit trail for sensitive actions.
• Meet legal obligations and enforce the terms that apply to Creavily.

Pinterest API data

Creavily accesses a Pinterest account only after the account holder completes Pinterest OAuth and grants the displayed permissions. Creavily never asks for a Pinterest password or Pinterest session cookie.

The integration uses authorized data to identify the connected account, list available boards, create or schedule Pins individually selected by the user, and display the resulting Pin status and Pinterest source link. Creavily stores the credentials and minimum identifiers and publishing records needed to operate and secure that connection. Other Pinterest information is requested from Pinterest when the feature needs it.

Creavily does not sell, rent, or share Pinterest API data with unrelated third parties. We do not combine it with another person's account data, use it for advertising outside Pinterest, or use Pinterest Materials to train, fine-tune, or improve an artificial intelligence or machine learning model.

Creavily is not endorsed by, sponsored by, or affiliated with Pinterest.

Facebook and Instagram API data

Creavily connects Facebook Pages and linked Instagram professional accounts through Meta OAuth. It never asks for Meta passwords or session cookies.

For connected accounts, Creavily may receive Page/Instagram IDs, post/media IDs, publishing results, and comment events from Meta API/webhooks for account selection, publishing, delivery status, Inbox, and approved replies.

Webhooks are verified, deduplicated, and scoped to workspace posts. We retain limited IDs, text, timestamps, reply status, and receipts for Inbox and reconciliation.

Encrypted server-side; no Meta data sale or AI training. Not affiliated with Meta.

When information is shared

We share information only when needed to run the service, complete an action you requested, protect the service, comply with law, or complete a business transfer. Service providers may support hosting, storage, security, email, and delivery. They receive only the information needed for their role and remain subject to their own legal and contractual duties.

Publishing content and related instructions are sent to the social platform selected by the user. Each platform processes that information under its own terms and privacy policy.

Retention and deletion

We keep information while it is needed to provide the service, protect accounts, maintain reliable publishing and audit records, and meet legal obligations. Retention depends on the type of information and the reason it is held.

Disconnecting a social account removes or revokes the active credential references held by Creavily and stops new publishing through that connection. It does not automatically delete every workspace record. A verified deletion request can cover the connected account data and other account or workspace information that the requester is authorized to control.

Limited records may remain when required for security, fraud prevention, legal compliance, dispute resolution, or backup integrity. Backup copies are removed through the normal backup lifecycle.

Your choices

• Disconnect a social account from the Social Accounts page in Creavily.
• Revoke Creavily from the connected platform's account settings, including Pinterest settings.
• For Facebook or Instagram, remove Creavily from Meta Business Integrations or connected-app settings.
• Email [email protected] to request access, correction, deletion, or help with a connected account. We may need to verify your identity and authority over the workspace or account.

Security and children

Creavily uses access controls, workspace separation, encrypted credential storage, redacted logging, and audited sensitive actions. No internet service can guarantee absolute security. Please contact support promptly if you believe an account or credential has been exposed.

Creavily is a business publishing service and is not intended for children under 13.

Policy updates and contact

We may update this policy when the service or legal requirements change. The effective date on this page identifies the current version. Questions and privacy requests can be sent to [email protected].