Privacy Policy

1. About this policy

CreatoR OS is a Video Production Operating System operated under the trading name Discretion Media Group ("we", "us" or "our"). This policy covers our website, desktop application and associated services. It explains how we handle information for account management, content production, connected accounts, scheduling, publishing and performance reporting. Features and connections depend on what is available in your version and what you enable; this policy does not activate a feature or grant account permissions.

We are responsible for information used to operate our accounts, support and service. When a business or creator instructs us to process information for a brand or client, that customer determines the purpose of its content processing and must have authority to provide it. We process that information to carry out the requested service, subject to applicable data-processing obligations. Questions and requests can be sent to privacy@discretionmediagroup.com.

2. Information we process and why

• Account and workspace information: name, email address, profile image, sign-in identifier, account preferences, workspace membership and the companies or brands you manage. We use these to authenticate you, organize your work and control authorized access.
• Content and project information: media you provide, prompts, scripts, transcripts, captions, thumbnails, edits, outputs, project labels and associated metadata. We use these to organize, transcribe, analyze, edit, generate, render and deliver the content you request. Linking assets or published content to a project helps you manage that work.
• Connected-account information: platform and channel identifiers, profile details, authorization tokens, granted permissions, publication records, content metadata and scheduling settings. We use these to maintain authorized connections, identify the correct destination, retrieve permitted records and carry out the actions you request. Connecting one account does not grant access to all accounts or authorize every available action.
• Performance information: permitted views, watch time, engagement, subscriber changes, audience summaries and similar platform reports. Where available and separately authorized, this includes estimated revenue and monetization reports. We use this information to present your performance, compare your own content where permitted and help you plan your work. Metrics can be delayed, aggregated, estimated or unavailable.
• Operational and support information: service interactions, timestamps, device and app details, IP addresses, error reports, request identifiers, API usage and cost information, and correspondence you send us. We use these for support, reliability, security, troubleshooting and explaining service usage. Logs may contain account or project identifiers; they are not all anonymous.

Prompts, conversations and workflow records: we may capture and retain prompts, relevant conversation history, AI responses, feedback, and execution records describing the requested task, selected services, steps, tool calls, retries, errors and results. These records may include content and personal information; they are not limited to anonymous usage counts. We use the information necessary to reproduce failures, investigate repeated or unsuccessful steps, evaluate service behavior, refine instructions and workflow coordination, and improve user-facing quality, reliability and safety. This is service evaluation and software improvement, not training or fine-tuning AI models.

Information comes from you, authorized workspace members, services you connect, your use of the application and permitted public sources used for a feature you request. Public availability does not remove privacy, copyright or platform restrictions. We do not obtain permission to access private messages, address books, unrelated cloud files or other accounts merely because you sign in.

3. AI processing and product improvement

CreatoR OS facilitates AI work through third-party providers. Depending on the enabled feature and selected service, relevant media, prompts, transcripts or context may be sent to Google Gemini, Anthropic Claude, OpenAI, Perplexity or ElevenLabs for tasks such as transcription, content assistance, search, analysis or generation. Selecting one service does not mean your content is sent to every listed provider. API credentials authenticate requests to their intended provider; they are not content for model prompts.

CreatoR OS does not use customer content, prompts, outputs or connected-account data to train or fine-tune AI models. We do not operate a customer-content training opt-in program. Processing a request, evaluating a failure, testing a workflow or refining service instructions is separate from training a model. Product improvement may use the relevant prompts, conversation excerpts and execution records described above, as well as de-identified usage and diagnostic information. We minimize the content used, remove identifying details where practical and do not attempt to re-identify de-identified information. This is not permission to pool unrestricted customer conversations, disclose one customer's information to another, or override platform restrictions.

Access and monitoring: automated checks may examine prompts, conversations, inputs, outputs and execution records to detect misuse, unauthorized extraction, attempts to defeat access controls, or harmful instructions embedded in submitted material. Authorized personnel may review relevant records for necessary troubleshooting, service evaluation or security investigation, subject to purpose-based access limits and any required consent. We restrict collection and review to relevant information and exclude or redact passwords, API keys and access tokens from diagnostic content. Do not intentionally place credentials in prompts. Google API data, including copies inside conversations or logs, remains subject to the stricter Limited Use and human-access rules below; general service-improvement wording is not permission for unrestricted staff review.

AI providers apply their own terms, retention practices, safety review and account controls. These can differ between API products, free or paid services, plans and settings. We do not make a blanket guarantee that every provider uses every request in the same way or that every provider offers zero retention or excludes training. The provider and account configuration for your selected workflow matter, including when you supply your own API key. Review the applicable provider terms before submitting material whose permitted use is restricted.

We remain responsible for our own disclosures, provider selection and transfers where required by law or platform rules. We do not authorize provider training for our benefit. Before transferring Google API data to an AI provider, we identify the provider, explain the relevant data use and obtain your consent for that requested feature. Google API data is not sent to a provider whose terms or configuration permit uses incompatible with Google's requirements. Permission to run an AI task is not permission to train a generalized model, sell data or use it for unrelated advertising.

Provider privacy information: Google, Anthropic, OpenAI, Perplexity and ElevenLabs. Product-specific API terms and agreements also apply. Media-library connections, such as Storyblocks and Epidemic Sound, may receive searches, asset identifiers and authorization information necessary for your requested library use.

4. Google sign-in and YouTube API Services

Google sign-in supplies basic identity information, including your Google account identifier, name, email address and profile image, to authenticate and associate your CreatoR OS account. It does not by itself connect a YouTube channel. YouTube features, when enabled, use YouTube API Services and require separate authorization for the relevant permissions.

• Channel access: channel identity, channel details, playlist information and video metadata, such as titles, descriptions, thumbnails, publication dates and visibility, identify your channel and organize existing publications.
• Publishing and management: media and publication settings you provide are sent to YouTube to upload content, update permitted metadata or schedule publication when you request those actions. Access does not authorize us to publish, delete or change visibility independently of your instructions.
• Analytics: authorized channel and video reports supply performance and available audience summaries. Monetary reports are accessed only where the relevant reporting feature is enabled and you grant its additional permission.

We store the permitted identifiers, metadata, reports, authorization information and operation records needed for these visible features. Access is limited to you, people you authorize and service providers necessary to deliver the requested feature under applicable restrictions. Importing a record or video metadata is not permission to download YouTube audiovisual content. Source-media processing uses files you lawfully provide or another method expressly permitted by YouTube.

CreatoR OS's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. We use that information only for permitted, disclosed user-facing features. We do not sell it, use it for advertising or credit decisions, or train generalized AI models with it. These restrictions also apply to aggregated, de-identified and derived Google API data. Human access is limited to circumstances Google permits, such as your specific agreement to view particular information for support, necessary security investigation or legal obligations.

You can revoke access through Google's security permissions page or Google Account connections. Reconnecting requires a new authorization and does not restore deleted records automatically. Google's handling of information is described in the Google Privacy Policy. Revocation and deletion timing are explained below.

5. Sharing, storage and security

We do not sell personal information or customer content, or share personal information for cross-context behavioral advertising. We disclose information to the services needed to operate enabled features: Google/Firebase for authentication and hosted services; Cloudflare for domain, network and email-routing services; selected AI and media providers; and connected platforms receiving your requested actions. Domain services do not receive all project content simply because they support our website. Authorized collaborators can access information made available to their workspace role. We may also disclose information when required by law, to address abuse or security threats, or to protect legal rights, subject to applicable restrictions.

If the service changes ownership, a transfer of information must remain subject to this policy, applicable law and platform rules, with notice and consent where required. Such a transfer does not create permission to sell Google API data or expand its permitted use.

Information can be held on your device and, for enabled cloud features, by hosting and processing providers in the United States or other countries where they operate. Local media and backups remain on your device unless an enabled workflow sends them to a service. International transfers must use a valid legal basis and required safeguards, such as appropriate contractual protections where applicable. Contact us for information about recipients or safeguards relevant to your use.

We use authentication, access controls and protected network connections for cloud services. Supported Windows desktop builds use operating-system encryption for configured local credentials. That does not mean every local media file or activity record is encrypted. Keep your device and accounts secure. No service can guarantee absolute security; material incidents are handled with notices required by applicable law.

6. Cookies and local storage

The public information website does not include advertising trackers or optional analytics scripts. Hosting services may process network and security logs. The application and authentication providers may use storage or cookies necessary to keep you signed in, preserve preferences or operate a feature. A linked third-party website has its own policy. Nonessential tracking requiring consent will not be introduced without the appropriate notice and choice.

7. Retention, disconnection and deletion

We retain account and project information while it is needed to provide the service you use. The criteria are your active account and saved-work instructions, the feature's purpose, whether a request or dispute remains open, security needs and applicable legal duties. Content is deleted or de-identified when no longer needed for those purposes. We do not retain identifiable content indefinitely merely for product improvement.

Operational, support and service-evaluation records, including captured prompts, conversations and execution records, are kept only while necessary for the identified troubleshooting, quality, safety, request-handling or legal purpose. Relevant criteria include whether the issue remains unresolved, whether a bounded evaluation is still active, and whether security evidence is needed for an investigation or claim. When that purpose ends, we delete the records or remove identifying information where doing so is permitted. Improvement does not justify indefinite retention of raw conversations. Backup copies are restricted from ordinary use pending deletion or expiry; restoration must not reintroduce information due for deletion. A legal retention exception is limited to the information and period actually required. Platform-specific deletion deadlines also apply to logs, backups and derived records; backup handling is not an exemption.

• YouTube deletion requests or revocation through CreatoR OS: we delete the relevant stored data as soon as possible and within seven calendar days. Revocation also ends use of that authorization.
• Revocation through Google: related YouTube API data is deleted as soon as possible and within 30 calendar days of revocation. No separate deletion request is required. Authorization validity must be checked so revoked access is detected.
• Stored YouTube API data: data subject to YouTube's refresh rules is refreshed or deleted within 30 calendar days. Authorized analytics and statistics may be retained while necessary and permitted, with authorization reconfirmed at least every 30 calendar days. These exceptions do not override revocation or deletion requests.

For other data, contact us to delete your account, a project or a specified connection. We verify authority proportionately and act within applicable legal and platform deadlines, explaining any permitted exception. Disconnecting stops future access once processed; it does not delete a video already published on a platform or necessarily cancel a publication already scheduled there. Manage those items directly on the destination platform. You control original files and independent copies on your device; a cloud-account request cannot remotely erase every copy you hold. See Data deletion for instructions.

8. Your choices and privacy rights

Depending on applicable law, you may request access, correction, deletion, a portable copy, restriction or objection to processing, withdraw consent, appeal a decision or complain to your relevant privacy regulator. We do not discriminate against you for exercising a protected right. You may use an authorized representative where permitted, subject to verification. Withdrawing permission may make a dependent feature unavailable and does not invalidate prior lawful processing.

Where a legal basis is required, service delivery relies on the applicable contract or requested pre-contract steps; optional processing on consent; security, support and limited service improvement on legitimate interests balanced against your rights; and legally required records on legal obligations. This policy is not blanket consent to all processing. We do not use the service to make automated decisions about your eligibility for employment, credit, housing or similarly significant matters.

The service is intended for adults able to enter a binding agreement, not children under 18. If you believe a child has supplied account information, contact us. A customer's authorized upload of content depicting someone else remains subject to that person's rights and any required permissions. We do not use uploaded faces or voices to identify people; any feature requiring separately regulated biometric processing requires its own notice and any necessary consent before use.

9. Changes and contact

We reserve the right to revise this Privacy Policy as our practices or legal requirements change and show the revision date above. We provide notice of material changes through the application, email or another appropriate service notice before they take effect, except where an immediate change is required by law or to address an urgent security issue; in that case, notice follows as soon as reasonably practical. Where new consent is required, including for a new use of Google API data, we obtain it before that use begins. A policy update does not retroactively authorize an undisclosed use of information already collected.

Contact privacy@discretionmediagroup.com for privacy requests, recipient details or complaints; support@discretionmediagroup.com for product help; or info@discretionmediagroup.com for other inquiries. Do not send passwords, access tokens or API keys.