Privacy Policy

1. Scope and data controller

This Privacy Policy explains how OpenCreat, operated by Shenzhen Touchpoint Link Technology Co., Ltd. (深圳市触点连接科技有限公司), collects, uses, stores, shares, and protects personal information when you visit our website, create an account, use a workspace, contact support, or otherwise use the service.

For questions, privacy requests, or concerns about this policy, contact support@truedianai.com. This policy applies to the public website and the OpenCreat service; a customer may also process creator or recipient data as an independent business decision-maker under its own legal and privacy obligations.

2. Information we collect

Account information may include your name, work email, password or authentication credentials, organization name, role, language preference, and workspace membership. We use this information to create and secure your account and provide workspace access.

Workspace information may include creators you save, profile notes, CRM stages, campaign briefs, deliverables, budgets, tasks, conversation records, assignments, follow-up dates, imports, exports, and settings configured by workspace members.

Connected service information may include mailbox provider, account address, connection status, permission scope, sending and delivery events, usage counters, and provider error messages. We do not ask for or display a mailbox password when the provider connection does not require it.

Support and contact information may include your request type, name, email, company or team, message, source page, attachments or links you choose to provide, and correspondence with our support team.

Technical information may include IP address, browser and device information, language, approximate location derived from IP, timestamps, diagnostic events, and security logs. We use this information for availability, abuse prevention, troubleshooting, and service improvement.

When you use OpenCreat Creator Workbench for Chrome, the extension handles the current supported public profile context (platform, public handle, and public profile URL), OpenCreat workspace data you explicitly request, a short-lived authentication state, and user-triggered operation data. It does not scan unrelated tabs or browsing history, read private social content, collect messages or comments, download social media, or run autonomous background monitoring.

3. Sources and purposes

We collect information directly from you, from your workspace administrators or invited members, from the mailbox and other providers you authorize, from creator-data providers when you request discovery or enrichment, and automatically from your browser or device.

We use information to provide discovery, profile intelligence, CRM, campaigns, outreach preparation, conversations, mailbox health, billing, team collaboration, security, support, diagnostics, and service improvement. We may also use aggregated or de-identified information to understand product usage and performance.

Chrome extension data is used and transferred only to provide the extension's single purpose. It is sent to the official OpenCreat service and, only after an explicit user request and any required confirmation, to configured creator-data providers needed for that operation. Consistent with the Chrome Web Store Limited Use requirements, we do not sell this data, use or transfer it for unrelated purposes, or use it to determine creditworthiness or for lending.

We do not sell personal information. We do not use connected mailbox content for unrelated advertising. We do not use creator data to promise a match, reply, conversion, or commercial result.

4. Creator and recipient data

OpenCreat may display public creator information, platform identifiers, public content signals, audience or growth indicators, contact availability, and provider-returned profile fields. Availability, accuracy, freshness, and completeness depend on the source platform, provider response, account visibility, and your selected data depth.

You must have a lawful basis and appropriate notices or permissions before importing or contacting creators, recipients, or other individuals. Do not upload private, sensitive, or unrelated data merely because the product accepts an import format.

If you believe information about you is present in a customer workspace, contact the relevant customer first where appropriate. You may also contact us, and we may need to identify the relevant workspace and verify the request before taking action.

5. Mailboxes and communications

When you connect a mailbox, we use the permissions and configuration you authorize to prepare or send messages, synchronize replies, detect delivery events, and monitor mailbox health. The exact data available depends on the provider and the permissions granted.

You can disconnect a mailbox from the workspace. Disconnecting stops new access through the connection, but does not automatically delete messages, campaign history, billing records, or other workspace records already created. You may request deletion subject to security, legal, and dispute-handling needs.

You remain responsible for message content, recipient permissions, opt-out handling, sending frequency, provider rules, and applicable anti-spam and advertising requirements.

6. Cookies and similar technologies

We may use strictly necessary cookies or local storage to keep the site functional, remember language or interface preferences, maintain sessions, protect forms, and understand whether a page is being used securely. We may also use privacy-conscious analytics where enabled by the current site configuration.

You can manage cookies through your browser settings. Disabling strictly necessary storage may prevent login, language persistence, forms, or other parts of the service from working. We do not use cookies to sell personal information.

7. Sharing and service providers

We may share information with infrastructure, hosting, email, authentication, payment, creator-data, analytics, customer-support, and AI providers that process information on our behalf. They may access only the information reasonably needed for the contracted function and must apply appropriate security and confidentiality controls.

We may disclose information when required by law, valid legal process, a regulator, or a court; to protect users, the service, or the public; to investigate fraud, abuse, or security incidents; or in connection with a merger, financing, restructuring, or transfer of assets.

We do not disclose private workspace data to the public merely because a creator-data provider or platform contains public information about a creator.

8. International processing and retention

Our service providers may process information in countries or regions outside your own. Where required, we use appropriate contractual, technical, and organizational safeguards for such processing. You should not use the service to store data that your organization is not permitted to transfer.

We retain account and workspace information while the workspace is active and for a reasonable period afterward for security, billing, audit, dispute handling, fraud prevention, backups, and legal obligations. Retention periods vary by data type and purpose.

Deletion from active systems may not immediately remove encrypted backups, provider copies, legal records, or information that must be retained to establish or defend a claim. Such information is isolated and deleted or anonymized when the applicable retention need ends.

9. Security

We use access controls, workspace permissions, provider authorization boundaries, transport protections, logging, monitoring, backups, and operational procedures appropriate to the nature of the service. Security controls cannot eliminate every risk, and you are responsible for protecting credentials and invited-member access.

If you believe an account, mailbox, or workspace has been compromised, contact support@truedianai.com promptly and include enough information for us to investigate without sending passwords or secrets.

10. Your rights and choices

Depending on your location and applicable law, you may request access to, correction of, export of, restriction of, or deletion of personal information, or object to certain processing. We may verify your identity and authority, and may need to coordinate with the relevant workspace customer.

To make a request, email support@truedianai.com with the request type, the account or workspace concerned, and a safe way to contact you. We will respond within the period required by applicable law or explain why additional time or information is needed.

11. Children and changes

The service is intended for business and professional use and is not directed to children. Do not create an account or upload a child’s personal information unless you have the authority and lawful basis required to do so.

We may update this policy when the service, providers, or applicable law changes. We will publish the updated version and date on this page. Material changes may also be communicated through the service or the email associated with your account where appropriate.