Privacy Policy

Effective October 9, 2026

Who we are

CreatorsAPI is operated by Friday Labs. This policy explains how we handle personal information when you visit creatorsapi.com, create an account, purchase credits, or use our API and agent integrations. Contact us at tyler@fridaylabs.com with privacy questions or requests.

Information we collect

When you create an account with email and password, our authentication provider processes your email address and password credentials. When you choose Google sign-in, we receive your Google account identifier, email address, verification status, and basic profile information, which may include your name and profile picture. We use this information to authenticate you and associate your login with your CreatorsAPI account. Google sign-in does not request access to your Gmail messages, Drive files, calendar, or contacts.

We maintain account identifiers, API-key hashes and labels, credit balances, purchase and payment references, and API usage records such as the endpoint requested, request time, response status, and credits charged. Stripe processes payment details; our application stores payment references rather than full payment-card numbers.

We process the URLs, usernames, search terms, identifiers, and other inputs you submit to our API. We retrieve creator information from supported platforms and may cache API responses. This can include public profiles, posts, videos, comments, and related metadata. Avoid submitting private information that is unnecessary for your request.

Our hosting, authentication, and security providers may process technical information such as IP addresses, device and browser information, and service logs. If you contact us, we receive the information you include in your message.

How we use information

We use information to operate the service, authenticate accounts, fulfill API requests, manage keys and credits, process payments, deliver account verification and password-reset messages, provide support, diagnose errors, and protect against fraud and abuse. We may also retain information to meet legal obligations and resolve disputes.

We use Google account information for authentication and account management. We do not sell Google account information or use it for advertising or to train general-purpose AI models. Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements where applicable.

Service providers and sharing

We use Vercel for application hosting, Supabase for authentication and data storage, Stripe for payment processing, Google for optional Google sign-in, and Resend for transactional email delivery. These providers process information needed to provide their services. Requests to supported creator platforms or infrastructure providers may include the inputs necessary to retrieve the requested data.

When you connect CreatorsAPI to an agent, MCP client, or another application, that application receives the API responses you request. Its provider handles those responses under its own policies. Choose integrations you trust and protect the API keys you give them.

We may disclose information when required by law, to protect the service or people from harm, or in connection with a business transfer subject to appropriate safeguards. We do not sell personal information or share it for cross-context behavioral advertising.

Browser storage

The account application uses browser storage to keep your authentication session active. Signing out clears the application's active session. Clearing browser storage may sign you out. Our service providers may use cookies or similar technologies for authentication, security, and payment functionality.

Retention and deletion

We keep account information while it is needed to provide your account and the service. We retain billing, security, and usage records as reasonably necessary for accounting, fraud prevention, disputes, and applicable legal requirements. Cached responses, operational logs, and backups may remain for a limited period after a deletion request while they are removed through normal retention processes.

You can request account deletion by emailing tyler@fridaylabs.com. We may ask you to verify ownership before acting. We will delete or de-identify information that we no longer need, subject to legal requirements and legitimate recordkeeping needs. Removing a Google connection does not by itself delete your CreatorsAPI account or billing records.

Your choices and rights

You can sign out, revoke your API keys through the account page, and remove CreatorsAPI's Google access through your Google account settings. Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, object to or restrict certain processing, withdraw consent, or complain to a relevant privacy authority. Contact tyler@fridaylabs.com to make a request.

Security and international processing

We use access controls, encrypted connections, and other safeguards designed to protect information. No service can guarantee absolute security. Keep your password and API keys confidential. Our providers may process information in the United States and other locations where they operate; applicable protections can differ by location.

Children

CreatorsAPI is intended for developers and businesses and is not directed to children under 13. If you believe a child has provided personal information to us, contact tyler@fridaylabs.com so we can investigate and take appropriate action.

Changes

We may update this policy as our service changes. We will post the updated policy and effective date on our website and provide additional notice when required.