Privacy policy

CreatorTech Conversations (“we”, “us”) is a service run by Milan Dhanjee, trading as CreatorTech, in the United Kingdom. It helps creators and businesses reply to Instagram direct messages and comments with AI assistance. This policy explains what we collect, why, and your rights. We are the data controller for account data, and a data processor for the Instagram messages we handle on behalf of our customers.

What we collect

• Account details — your name, email address and an encrypted password when you sign up.
• Instagram data — when you connect a professional Instagram account, we receive your username and account ID, an access token (stored encrypted), and the direct messages, story replies and comments sent to your account, plus the replies sent from it.
• Data about the people who message you — their Instagram username, name (if public) and the content of their messages to your account.
• Imported messages — if you upload your Instagram data export, short pairs of messages and your replies from one-to-one chats are stored to learn your writing style. The rest of the file is processed in your browser and never uploaded.
• Business settings — information you enter about your business, lead magnets and booking links.
• Billing — handled by Stripe. We store your Stripe customer ID and subscription status, never your card details.
• Bookings — if you connect Calendly, the name, email and time of calls booked through your link.
• Store buyers — when someone claims or buys a product from a creator's store, we store their email, first name (if given), what they got and, for paid orders, their country and the amount. Card payments are handled by Stripe on the creator's own Stripe account; we never see card details. The creator is the controller of their buyers' data and we process it on their behalf.

How we use it

• To provide the service: receive Instagram messages, draft and send replies, and show them to you for review.
• To generate replies using an AI model (Anthropic's Claude). Message content is sent to Anthropic for this purpose only.
• To run billing, prevent abuse, fix problems and keep the service secure.

We do not sell personal data or use it for advertising. Our lawful bases are performance of a contract and our legitimate interests in running the service.

Who we share it with

• Meta (Instagram) — to receive and send messages through the Instagram Platform.
• Anthropic — AI model provider that drafts replies.
• Convex and Vercel — hosting and database providers.
• Stripe — payments. Resend — sending emails (account emails and store deliveries). Calendly — only if you connect it.

Some providers are based outside the UK. Where data is transferred internationally, it is protected by appropriate safeguards such as standard contractual clauses.

How long we keep it

We keep your data while your account is active. If you disconnect Instagram, we stop receiving new messages and delete your access token. If you delete your account, we delete your data within 30 days, except where we must keep billing records by law.

Your rights

Under UK GDPR you can ask to access, correct, delete or export your data, and object to or restrict how we use it. People who have messaged a customer of ours can also contact us. Email hello@creatortech.io. You can also complain to the Information Commissioner's Office (ico.org.uk).

Deleting your data

See our data deletion instructions.

Contact

Milan Dhanjee (CreatorTech) — hello@creatortech.io