Security

Your data is kept apart

• Every query on customer data is scoped to your workspace, and the database enforces that rule itself, not only the app.
• Browsers can read your data but cannot write it directly. Every change goes through an authenticated server route.

Your files are private

• Videos, audio and clips live in private storage under random, workspace-specific names. There is no public folder of customer media.
• You and our workers reach a file only through a short-lived link: 15 minutes for the browser, a few hours for processing.
• Everything travels over encrypted connections (HTTPS).

Accounts and sign-in

• Sign-up and sign-in are protected by a bot check that stays invisible unless something looks wrong.
• Passwords are never stored in readable form. You can also sign in with Google.
• We never see your card number. Payments are handled by our payment provider, which acts as the seller.
• Social accounts you connect are linked through a dedicated posting service, which holds the sign-in to them.

Backups and deletion

• The database is backed up every day, and the backups are encrypted.
• Files are deleted on a fixed schedule (see the Privacy notice), and deleting your account removes your data.
• We do not use your videos to train AI models.

What we do not claim

Creatr has not been through a formal SOC 2 or ISO 27001 audit. We do not claim certifications we do not hold. If your company needs a security questionnaire, write to us.

Reporting a problem

If you find a vulnerability, email support@creatr.app with the subject "Security" and enough detail to reproduce it. Please do not access other people's data or disrupt the service while testing. We will read it, fix real issues, and tell you when it is done.