Privacy Policy

When you use BigCreator we collect:

• Account details: email, optional name, niche keywords you provide.
• Usage data: scripts and captions you generate, transcripts you create, content calendar entries, search queries.
• Payment metadata: Razorpay payment IDs, subscription IDs, plan, amount, billing dates. We do not store card numbers — Razorpay handles payment instruments directly.
• Analytics: page views and product events via Google Analytics 4 (anonymized IP, no cross-site tracking).
• Public social data: when you use Competitor Analyser, we fetch publicly available posts via Apify. We don't scrape private accounts.

• To deliver the features you request (generate scripts, run analyses, etc.).
• To process payments and manage your subscription.
• To send transactional emails (welcome, payment confirmation, plan expiry).
• To send occasional product updates — you can unsubscribe any time from any email.
• To debug, secure the service, and prevent abuse.

We share necessary data with:

• Supabase — auth + database hosting (data resides in their managed Postgres).
• Vercel — application hosting.
• Razorpay — payment processing (PCI-DSS compliant).
• Anthropic, OpenAI, Groq — AI inference for scripts, captions, transcription. Each provider sees only the input for that one request.
• Apify — public-data scraping for Competitor Analyser. We send only the handle/URL you searched.
• Resend — transactional and marketing emails.
• Google Analytics — anonymized usage analytics.
• Meta (Instagram Graph API) — when you connect your Instagram account via our Insights feature, we use Meta's official Instagram API to read your profile, recent posts (up to 50 reels), per-post insights, and audience demographics. We use your long-lived access token (encrypted at rest) only to fetch these metrics on a daily sync. We never post, comment, or DM. See Delete Instagram Data for how to revoke and erase.

We do not sell your data to advertisers or third parties.

We use essential cookies for authentication and a small number of cookies for analytics. No third-party advertising cookies.

We retain your account data for as long as your account is active. Generated content (scripts, transcripts, calendar entries) is retained indefinitely so you can refer back. Webhook events and payment records are kept for 7 years for tax and audit purposes (required under Indian law). You can request deletion of personal data at any time — see below.

You can request to access, correct, export, or delete your personal data by emailing bigcreatorai@gmail.com from the email associated with your account. We'll respond within 30 days. Note that some financial records must be retained per Indian statutory requirements even after account deletion.

For Instagram data specifically (collected via our Insights feature), you can also self-serve deletion in three ways — see Delete Instagram Data. Revoking the app from your Instagram settings triggers automatic deletion within 24 hours.

All connections are encrypted in transit (HTTPS). Data at rest is encrypted by our infrastructure providers (Supabase, Vercel, Razorpay). We use server-side service-role keys for privileged operations and never expose them to the browser. We don't store card numbers.

No system is perfectly secure. If you suspect unauthorised access to your account, email bigcreatorai@gmail.com immediately.

BigCreator is not intended for users under 13. We do not knowingly collect data from children.

BigCreator is operated from India. By using the Service you consent to your data being processed in India and other jurisdictions where our providers operate.

We may update this policy with notice on this page. The “Last updated” date at the top reflects the most recent change.

For privacy questions or data requests: bigcreatorai@gmail.com.