Last updated: February 2025
Criota collects information you provide directly, including your email address, social media handles, and profile information when you create an account.
We use your information to provide and improve our services, connect creators with businesses, process payments, and communicate with you about campaigns.
Creators can connect an Instagram professional account or a TikTok account so that Criota can read the real performance of the content they post for a campaign. Connection is optional and is made through Instagram's or TikTok's own login, with the permissions shown on that screen. We never see your password.
What we read.
We do not post on your behalf, read or send messages, read comments, or manage your account. We only ask the platforms for what is listed above.
How long we keep it. The access token is stored encrypted and deleted the moment you disconnect, remove Criota from your platform settings, or delete your account. Post metrics tied to a campaign are kept for up to twelve months after the campaign closes so that the payment can be explained, then deleted.
How to delete it. Disconnect the account from your Criota profile, remove Criota from your Instagram or TikTok settings, or follow the steps on our data deletion page.
Businesses may also connect their Meta ad accounts and Facebook Pages. Criota reads those accounts to check that licensed creator content is used within the term it was licensed for, and, when a business asks it to, creates and pauses ads from licensed creator content in the business's own ad account. Meta bills the business directly for any ad spend; Criota never holds or charges ad money. Criota reads the delivery of a business's ads by day to tell a creator's effect from an ad's, and for nothing else. On a business's instruction Criota asks a creator, through Meta, for permission to run their post, and reads Meta's answer. A business may also choose to send its till purchases to its own Meta dataset: for a purchase where the till knows the customer, the amount and the customer's email and phone, hashed before they leave Criota, go to Meta so it can match them to people who saw the business's ads. This is off unless the business turns it on, and can be turned off at any time.
We share your profile information with businesses when you apply to their campaigns. We do not sell your personal data to third parties.
We implement appropriate security measures to protect your personal information against unauthorized access, alteration, or destruction.
You can access, update, or delete your account information at any time through your dashboard settings. You can also disconnect your social media accounts, and request deletion of the data we hold from them on our data deletion page.
If you have questions about this Privacy Policy, please contact us at privacy@criota.com.