CreateStudio Privacy Policy
Effective date: November 2, 2026
This Privacy Policy explains how CreateStudio (https://createstudio.keplerx.co) collects, uses, shares, stores and protects information when you use our website, web application and related services (the "Service").
1. Who we are
CreateStudio is a product of KeplerX, a sole proprietorship owned by Salman Agha and registered with the Federal Board of Revenue (FBR), Pakistan ("KeplerX", "we", "us", "our").
- Address: B-122, AEECHS, Gulistan-e-Johar Block 8, Karachi East, Karachi, Pakistan
- Phone: +92 334 7360763
- Privacy contact: [email protected]
- Support: [email protected]
- General: [email protected]
- Website: https://keplerx.co
KeplerX is the controller of the personal information described in this policy. Where we process data on behalf of a business client (for example, content and audience data for a client's brand), we act on that client's instructions.
2. What CreateStudio does
CreateStudio is an AI-powered marketing automation platform. It uses large language models (LLMs) and other AI tools to generate social media posts and reels, schedule and publish content to Facebook Pages, Instagram professional accounts, YouTube and TikTok, research competitors' marketing, and manage a content calendar, media library, brand settings and automations. Where a client enables it, CreateStudio may also create and manage ads and read ad insights through the Meta Marketing API, and manage messages through Messenger and Instagram messaging.
3. Information we collect
a. Account information. Name, email address, password (stored hashed) or sign-in identifiers, company or brand name, workspace and team member details, and your settings.
b. Connected social account information. When you connect a Facebook, Instagram, YouTube, TikTok or other account, we receive access tokens and basic profile identifiers (such as account ID, name and profile picture), and the list of Pages, Instagram accounts, channels, ad accounts or businesses you choose to authorize.
c. Page, channel and account data. Depending on the permissions you grant: posts, videos, captions, comments, engagement metrics, insights and analytics, Page or channel metadata, ad campaign data and performance, and messages sent to your Page or Instagram account.
d. Content you create or upload. Images, videos, audio, text, brand assets (logos, colors, fonts), prompts, drafts, scheduled posts, and AI-generated outputs.
e. Research inputs. Competitor names, URLs and publicly available content you ask CreateStudio to analyze.
f. Usage and device data. Log data, IP address, browser type, device information, pages and features used, timestamps, error reports, and cookies or similar technologies needed to keep you signed in and to operate the Service.
g. Payment information (if applicable). If you pay for a plan, billing name, billing contact details, plan and transaction history. Card details are handled by our payment provider; we do not store full card numbers.
h. Communications. Messages you send to our support or privacy contacts.
4. How we use information
We use information to:
- provide, operate and maintain the Service and your account;
- generate content, captions, reels and marketing recommendations at your request;
- publish, schedule and manage content on platforms you connect, only when you or your authorized team instruct it;
- show analytics, insights and reports about your connected accounts;
- run competitor and market research you request;
- create and manage ads and report on ad performance, where you enable it;
- receive, display and reply to messages on your connected Pages and Instagram accounts, where you enable it;
- provide support, send service notices, and process payments;
- secure the Service, prevent fraud and abuse, and fix errors;
- comply with law and platform policies.
We do not sell personal information, and we do not use data from connected platforms to build advertising profiles or for purposes unrelated to providing the Service to you.
5. Meta platforms (Facebook and Instagram)
When you connect Facebook or Instagram through Facebook Login, you choose which Pages, Instagram professional accounts, businesses and ad accounts to authorize. We use each permission only for the feature described below:
| Permissions | What we access | Why |
|---|---|---|
public_profile | Your name, Facebook user ID and profile picture | Identify you and link your Facebook account to your CreateStudio account |
pages_show_list, pages_manage_metadata, business_management | List of Pages and businesses you manage, Page settings and webhooks subscriptions, business assets | Let you choose which Pages and business assets to connect, and keep them in sync |
pages_read_engagement | Page posts, comments, reactions, followers and engagement metrics | Show performance analytics and inform content recommendations |
pages_manage_posts | Ability to create, edit, schedule and delete Page posts | Publish and schedule content you approve to your Page |
pages_manage_engagement | Ability to reply to, hide or delete comments on your Page | Let you manage comments from CreateStudio |
instagram_basic | Instagram professional account profile, media and basic metrics | Display your account and media in CreateStudio |
instagram_content_publish | Ability to publish photos, carousels and reels | Publish and schedule content you approve to Instagram |
instagram_manage_messages | Instagram direct messages to your account | Let you read and reply to messages from CreateStudio |
ads_management, ads_read | Ad accounts, campaigns, ad sets, ads, creatives and insights | Create and manage ads you request and report on their performance |
Data received from Meta is:
- used only to provide the features you use for your own accounts;
- not sold, rented or shared with data brokers;
- not used for advertising unrelated to your own campaigns, and not used to build profiles of people who interact with your Page;
- kept only as long as needed (see Retention) and deleted on disconnect or request.
You can remove CreateStudio's access at any time in Facebook under Settings & privacy > Settings > Apps and websites, or in your Instagram settings. See our Data Deletion Instructions.
6. Google and YouTube
CreateStudio uses YouTube API Services. When you connect a YouTube channel through Google OAuth, with your permission we may access your channel information, upload videos, manage your channel content (such as titles, descriptions, thumbnails, playlists and scheduling), and read channel analytics.
By connecting YouTube you agree to be bound by the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy.
CreateStudio's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
- We use Google user data only to provide and improve the user-facing features you use in CreateStudio.
- We do not transfer Google user data to others except as needed to provide those features, to comply with law, or as part of a merger or acquisition with notice to you.
- We do not use Google user data for advertising, and we do not sell it.
- No person at KeplerX reads your Google user data unless you give us explicit consent (for example, for a support request), it is necessary for security purposes (such as investigating abuse), to comply with applicable law, or the data is aggregated and anonymized for internal operations.
- We do not use Google user data to develop, improve or train generalized or non-personalized AI or machine learning models.
You can revoke CreateStudio's access at any time at https://security.google.com/settings/security/permissions. When you revoke access or disconnect your channel, we delete stored tokens as described below.
7. AI and LLM processing
To generate posts, captions, scripts, images, reels and research, CreateStudio sends the relevant inputs (such as your prompts, brand details, selected content and research material) to third-party AI model providers, which return the generated output. We send only what is needed for the task. We choose providers whose terms do not allow them to use API data to train their models, where such terms are available. Google user data is never used to train generalized AI models. AI output may be inaccurate; please review content before publishing.
8. How we share information
We do not sell personal information. We share it only:
- With the platforms you connect (Meta, Google/YouTube, TikTok), to publish and manage content at your instruction;
- With service providers (subprocessors) that help us run the Service, such as cloud hosting and storage, databases, AI model providers, email delivery, analytics, error monitoring and payment processing. They may use data only to provide services to us, under confidentiality and security obligations;
- Within your workspace, with team members you invite;
- For legal reasons, when required by law, or to protect the rights, safety and security of users, KeplerX or others;
- In a business transfer, such as a merger or acquisition, with notice to you.
9. Retention
- We keep account data while your account is active.
- Access tokens for connected accounts are deleted within 30 days of you disconnecting that account or deleting your CreateStudio account.
- Platform data, content and media are deleted within 30 days of account deletion or a valid deletion request, unless we must keep certain records (for example, billing records) to comply with law.
- Backups are overwritten on a rolling schedule.
10. Security
We use reasonable technical and organizational measures, including encryption in transit (HTTPS), encrypted storage of access tokens, access controls limited to authorized personnel, and monitoring. No method of transmission or storage is completely secure, but we work to protect your information and will notify you as required by law if a breach affects you.
11. Your rights and choices
Depending on where you live, you may have the right to access, correct, export or delete your personal information, object to or restrict certain processing, and withdraw consent. You can:
- edit your profile and settings in the app;
- disconnect any connected platform at any time;
- delete your account in the app;
- email [email protected] for any request.
We will respond within 30 days and may need to verify your identity.
12. Children
The Service is for businesses and is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.
13. International transfers
KeplerX is based in Pakistan, and our service providers may process data in other countries, including the United States and the European Union. Where we transfer data, we take steps to ensure it is protected as described in this policy.
14. Changes to this policy
We may update this policy. We will post the new version on this page with a new effective date and, for material changes, notify you by email or in the app.
15. Contact us
KeplerX B-122, AEECHS, Gulistan-e-Johar Block 8, Karachi East, Karachi, Pakistan Phone: +92 334 7360763 Privacy: [email protected] · Support: [email protected]