Security & Data Privacy
Your content, your data, your business. Here's how we protect it.
Your Knowledge Base is Private
Everything you add to your knowledge base — notes, URLs, transcripts, competitor research, personal context — is completely private to your account. No other user can see it. It's stored in an isolated database partition scoped to your organization. Even our team doesn't access your knowledge base content unless you explicitly ask for support help.
Your Data is Never Used for AI Training
We use AI (Claude by Anthropic and OpenAI Whisper) to generate ideas, captions, and transcriptions. Your content is sent to these APIs for processing, but it is never used to train their models. Both Anthropic and OpenAI's API terms explicitly state that API inputs are not used for training. Your proprietary frameworks, strategies, and expertise stay yours.
Encrypted at Rest and in Transit
All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Your videos are stored in AWS S3 with server-side encryption. Database credentials are managed via AWS Secrets Manager, never hardcoded. Platform OAuth tokens (for social media connections) are encrypted with a dedicated encryption key before storage.
Organization-Level Isolation
Every database query is scoped to your organization. Your videos, ideas, knowledge base, recordings, and settings are isolated from every other account. Team members you invite share your organization's data, but no one outside your team can access it.
You Own Your Content
Unlike some free tools that claim rights to content you create on their platform, CreateSocial has no such clause. Every video, caption, blog post, and piece of content you create is 100% yours. We claim no license, no rights, and no ownership over anything you produce. You can download and delete your content at any time.
Delete Anytime
You can delete individual videos, knowledge base items, or your entire account at any time. When you delete content, it's removed from our database and storage. We don't keep hidden copies.
Infrastructure
- ✓ Hosted on AWS (US-East-1)
- ✓ Authentication via AWS Cognito (SOC 2 compliant)
- ✓ Database: AWS RDS PostgreSQL with encryption at rest
- ✓ File storage: AWS S3 with AES-256 server-side encryption
- ✓ All API communication over HTTPS (TLS 1.2+)
- ✓ JWT-based authentication with signature verification
- ✓ No third-party analytics access to your content
Questions about security or data privacy? Email us at ben@createsocial.ai