Privacy Policy

Version v1.0 · Effective date: September 7, 2026

1. Controller and contact

The data controller for the service is Echo Bridge Information Intelligence Limited, a company incorporated in Hong Kong. For any questions, privacy inquiries, or to exercise your data protection rights, please contact our team at support@creatorredd.vip.

2. Data we process

CategoryExamplesPurpose
Account dataPrimary email, display name, account statusAuthentication and user account management (via Clerk)
Billing mappingStripe customer ID, subscription status, invoice metadataEntitlement access, payment receipts, refund tracking
Your questions & research evidenceThe search queries and prompts you submit; which Reddit posts/comments are selected as evidenceGenerating, reproducing, and delivering research insights
Usage metadataCredits reserved and settled, token totals, request IDsUsage ledger calculation and abuse prevention
Publicly harvested contentPublic Reddit posts, comments, and creator profiles harvested from public boardsProviding the read-only research dataset
Operational logsRequest timestamps, IP metadata, HTTP status codesInfrastructure security and system reliability

3. Payment processing and security (PCI-DSS)

We do not store credit card details. All payment transactions and payment method updates are hosted and processed directly by our third-party payment gateway, Stripe. We never receive, process, or store your full credit card number, expiration date, or CVV/CVC security code on our servers. Stripe processes all payment data in compliance with the Payment Card Industry Data Security Standard (PCI-DSS).

4. Data flow & AI model providers

Your browser communicates directly with our API. When you interact with the AI research assistant, your query along with relevant harvested post excerpts are forwarded through our routing layer to configured model providers. Providers depend on deployment configurations and may include xAI, OpenRouter, and their downstream providers; in the event of an upstream provider outage, requests may fail over to a backup provider. We do not market any provider as "zero-retention"; data handling by model providers is governed by our enterprise agreements and provider terms.

5. Retention and deletion

6. No sale of personal information (CCPA / CPRA)

We do not sell your personal information. Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), we affirmatively state that we do not sell, rent, or lease your personal information to third parties, nor do we share your personal data for cross-context behavioral or targeted advertising.

7. Children's privacy (COPPA)

Our service is strictly intended for use by adults aged 18 years or older. We do not knowingly collect, solicit, or maintain personal information from children under the age of 13 (or under 18). If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at support@creatorredd.vip, and we will expeditiously verify and delete such information.

8. Cookies and local storage

We do not employ third-party tracking, advertising, or behavioral cookies. We solely use essential browser local storage (localStorage) and authentication tokens to keep you logged in (via Clerk) and to preserve your language selection (mvp_legal_lang). You can clear or block local storage through your browser settings at any time without compromising public page access.

9. Your rights and inquiries

Depending on your location, you may have the right to request access to, correction of, or deletion of your personal data. To submit a request, email us at support@creatorredd.vip. We verify your identity and respond within statutory timeframes.

10. Cross-border data processing

Authentication services (Clerk), payment processing (Stripe), and model providers may process and store data in data centers located in the United States and other jurisdictions outside Hong Kong. We ensure adequate contractual and security safeguards are maintained across our operational infrastructure.