Privacy Policy

Last updated: September 2026

CreamSync is an internal content scheduling and publishing tool built and operated by Creamaholic Studio. It is not a public product — access is limited to Creamaholic Studio’s own team, and it is used solely to prepare, review, and publish our studio’s social media content.

What we store

To do its job, CreamSync stores:

Account information for signed-in team members (email address, authentication credentials), managed through Supabase Auth. Uploaded media files (images and videos) and the drafts, captions, hashtags, and scheduling details generated or entered for them. OAuth access and refresh tokens for the social media accounts our team has connected (currently Facebook, Instagram, Threads, Pinterest, TikTok, and YouTube), used only to publish content to those same accounts on our behalf.

How we use it

Stored data is used exclusively to operate CreamSync’s own workflow: drafting post content, letting a team member review and approve it, and publishing approved posts to our studio’s own connected social media accounts at the scheduled time. We do not sell, rent, or share this data with third parties, and we do not use it for advertising or any purpose unrelated to running CreamSync.

Third-party platforms

When CreamSync publishes a post, it sends the relevant content (media, caption, hashtags) directly to the social media platform’s own API for that connected account. Each platform then handles that content under its own privacy policy and terms of service.

Data retention

Uploaded media, drafts, and post records are retained for as long as they remain useful to our team’s workflow, and are removed at our discretion. Platform access tokens are stored only for as long as an account stays connected to CreamSync, and are removed when a connection is revoked.

Contact

Questions about this policy can be sent to creamaholicstudio@gmail.com.