Privacy Policy

1. Who we are

Creo Medya CRM is the content management platform used by the social media agency Creo Medya to serve its clients. Creo Medya is the data controller. This policy covers all data processed on crm.creomedya.com.

Creo Medya is a brand operated by Ludens Medya ve Yazılım Ticaret Limited Şirketi; that company is the legal entity responsible for the obligations in this policy.

2. What data we process

Clients connect their social accounts through each platform's official authorisation (OAuth) screens: Instagram, Facebook Pages, YouTube, TikTok and Google Business Profile. We store only the account/page/channel name and id plus the access tokens issued by the platform. We never receive or store your passwords.

We also process contact details (name, email, phone), content files (images/video), your content approval decisions and billing information as part of the agency relationship. Where comment automation is enabled, only the text of comments on the specified post and the commenter's username are processed temporarily so that a reply can be sent.

3. How we use the data

Connected accounts are used solely at the client's request: scheduling and publishing content, automatic replies/DMs to comments, and performance reporting. We do not sell your data, do not use it for ad targeting, and do not share it with third parties for marketing.

4. Service providers

We use Supabase and Hostinger for hosting and database, Google Drive for file storage and Metricool for scheduling infrastructure. These providers process data only on our behalf.

5. Retention and security

Data travels over encrypted connections (HTTPS); access tokens are stored server-side and reachable only by authorised agency staff. Tokens are deleted when a connection is removed. Content with an approval or revision decision is removed from the portal after one week. When the agency relationship ends, data is deleted within 30 days, except records we must retain by law (e.g. invoices), which are kept for the period the law requires.

6. Your rights and data deletion

You have the right to access, correct and delete your data. You can remove a connection at any time from the Connections page in the client portal or from the platform's own account settings. For deletion of all your data, follow the steps in the Data Deletion Instructions page or email creomedya@gmail.com; requests are completed within 30 days.

7. Use of platform data

Google: Creo Medya CRM's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Our YouTube integration is additionally subject to the YouTube Terms of Service and the Google Privacy Policy; users can revoke our access at any time via Google security settings. Google user data is never used to train artificial intelligence or machine learning models.

Meta (Instagram / Facebook): Data obtained from Meta platforms is used only to publish content, manage comments and produce reports for the client's own account, is handled in line with the Meta Platform Terms, and is not transferred to third parties.

TikTok: Data obtained from TikTok is used only to upload and publish content to the client's own account in line with the TikTok Developer Terms, and is never used for advertising or profiling.

How we handle data requests from public authorities is described in a separate document: Government Data Request Policy.

8. Cookies

We use strictly necessary cookies only: a session cookie to keep you signed in and your interface language preference. No advertising or third-party tracking cookies are used.

9. Children's privacy

The platform is intended for businesses only; we do not knowingly collect data from anyone under 18.

10. Changes and contact

If this policy changes we will update this page and its date. Questions: Creo Medya · creomedya@gmail.com

Legal entity: Ludens Medya ve Yazılım Ticaret Limited Şirketi · Adnan Kahveci Mah. Anadolu Cad. Beyaz Vadi Apartmanı No: 12 İç Kapı No: 14, 34528 Beylikdüzü / İstanbul, Türkiye