Back to site

Privacy Policy

Last updated September 2026

This Privacy Policy describes how By Cre8tive ("we", "us") collects, uses, and protects information within the By Cre8tive Client Portal (the "Portal"), available at bycre8tive.com. The Portal is a private client-management tool used by By Cre8tive and its social media management clients — it is not a public consumer product, and access requires an account created by By Cre8tive.

Visitors to our public website

Our public marketing pages use Google Analytics to measure traffic. It records pages viewed, approximate location by region, device and browser type, and how you arrived at the site. It sets cookies to recognise a returning browser. This measurement runs only on the public pages. It is switched off inside the Portal itself, so nothing you do while signed in to your account is measured this way. You can opt out for every site using the Google Analytics opt out browser add on.

Information we collect

  • Account information: your email address, used to sign in via Firebase Authentication.
  • Business information you provide: business name, website, and social media handles or URLs entered in Settings.
  • YouTube — if you connect your YouTube account, we access your channel's analytics (views, watch time, subscriber changes, traffic sources) via the YouTube Data API and YouTube Analytics API, using Google OAuth 2.0. We request read-only scopes only (youtube.readonly, yt-analytics.readonly) — we cannot upload, edit, or delete anything on your channel.
  • TikTok — if you connect your TikTok account, we access your public profile and account statistics (follower count, likes, video count) via TikTok's Login Kit, using read-only scopes.
  • Facebook & Instagram — if you connect your account through Facebook Login, we read your Facebook Page's follower count and the profile info (username, follower count, media count) of the Instagram Business account linked to that Page, via the Meta Graph API. We request read-only permissions only (pages_show_list, pages_read_engagement, instagram_basic) — we cannot post, comment, message, or modify anything on your Page or Instagram account.
  • Google Analytics — if you provide a Google Analytics property ID, we read website traffic summaries for the domain you specify.
  • Manually entered statistics for platforms you haven't connected, entered by you or your By Cre8tive account manager.

How we use this information

We use this information solely to display your own metrics inside your own private dashboard in the Portal. We do not sell, rent, or share your data with third parties, and we do not use it for advertising.

Data storage

Data is stored in Google Firebase (Firestore) under your client account. OAuth access and refresh tokens are stored securely on our servers and are never exposed to any browser or client-side code — only our backend uses them to make read-only API calls on your behalf.

Revoking access

You can disconnect any connected account (YouTube, TikTok, Facebook, or Instagram) at any time from Settings, which deletes the stored tokens from our systems. You can also revoke access directly from your Google Account, your TikTok account (Settings → Manage account → Apps and websites access), or your Facebook Business Integrations settings.

Data retention

We retain your data for as long as your account with By Cre8tive is active. If you'd like your data deleted, see our Data Deletion instructions or contact us using the details below.

Contact

Questions about this policy: contact@bycre8tive.com