Privacy Policy

CAD (“Creator Analytics Dashboard”, “we”, “us”) is an invite-only analytics and content management platform for social media creator teams, available at https://getcad.app. This policy explains what information we collect, how we use it, and the choices you have. Questions about this policy or your data can be sent to info@getcad.app.

Information we collect

• Account information — your name, email address or username, and a hashed password. Accounts are created by invitation only.
• Workspace content you provide — model profiles, social account handles and related notes, manually entered statistics (such as daily link clicks), and content files you choose to manage through the platform.
• Public social media data — publicly available profile and post information (follower counts, captions, view/like/comment counts, thumbnails, and videos) for the social accounts a workspace chooses to track, collected via third-party data providers.
• Usage and log data — standard server logs (IP address, browser type, pages requested) used for security and troubleshooting.

Cookies

We use only essential cookies: a session cookie to keep you signed in and a CSRF token to protect forms. We do not use advertising or cross-site tracking cookies.

Google user data

A workspace administrator may connect a Google account so that CAD can work with Google Drive. When you connect Google Drive, CAD accesses it strictly to provide user-facing features you initiate:

• listing the folders you select and reading the video files inside them, so they can be captioned, organised, and delivered through your content feeds;
• copying video files from your selected folders to our media storage so they remain available for playback and delivery;
• uploading videos into folders in your Drive when you use the archiving feature.

We store the OAuth tokens Google issues (encrypted at rest) and the file metadata needed for these features (file IDs, names, sizes). We do not use Google user data for advertising, we do not sell it, and no humans read it except with your explicit permission for support, for security purposes, or where required by law.

CAD’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Google Drive at any time from Settings inside CAD, or revoke CAD’s access from your Google account permissions page. Disconnecting deletes the stored tokens.

How we use information

• to provide, secure, and maintain the platform;
• to display analytics and manage content for the social accounts your workspace tracks;
• to send essential account emails (password resets and invitations) — we do not send marketing email;
• to investigate abuse and comply with legal obligations.

We do not sell personal information and we do not use it for advertising.

Service providers

We rely on a small number of infrastructure providers to run the service: cloud hosting for the application and database, Cloudflare (media storage and optional bot protection on the login form), Resend (transactional email), social media data providers used to retrieve public profile and post information, and optional integrations a workspace may enable (such as GetMySocial link analytics or Telegram notifications). Each provider receives only the data needed to perform its function.

Data retention and deletion

We keep your information while your account is active. Media files are subject to workspace retention settings and may be deleted automatically. When an account or workspace is deleted, or on request to the contact address above, we delete the associated personal data within 30 days, except where a legal obligation requires longer retention.

Security

All traffic is encrypted in transit (HTTPS). Passwords are hashed, and sensitive credentials such as OAuth tokens and API keys are encrypted at rest. Access to production systems is restricted to the operator.

Your rights

Depending on where you live (including under UK and EU GDPR), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Contact us at the address above and we will respond within a reasonable timeframe.

Changes to this policy

If we make material changes we will update this page and revise the “last updated” date. Continued use of the service after changes take effect constitutes acceptance of the revised policy.