Last updated: October 9, 2026
Creative Augmentation ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website creativeaugmentation.in, including any other media form, media channel, mobile website, or mobile application related or connected thereto, and when you interact with us through Instagram or Facebook messaging. Please read this privacy policy carefully.
This website and the products described in this policy are operated by Creative Augmentation LLP, Old Gupta Colony, Vijay Nagar, Delhi 110009, India.
Grievance Officer: Anoop Gupta — mail@creativeaugmentation.in. You can write to the Grievance Officer at that address about any question, complaint or request concerning your personal data, including a request to access, correct or delete it.
We may collect information about you in a variety of ways. The information we may collect via the website includes:
We are an Amazon advertising agency. On behalf of our clients, and only with their explicit authorisation, we access data through the Amazon Advertising API and the Amazon Selling Partner API ("Amazon SP-API"). This section specifically addresses how we handle data obtained through Amazon's APIs.
We also manage Facebook and Instagram advertising for our clients through the Creativ Ads Console (ads.creativeaugmentation.com), using Meta's Marketing API. This section explains what data we access through Meta on our clients' behalf, how we use and protect it, and how it can be deleted.
Not the Shopify app. The Creativ Ads Console in this section, and in sections 2 and 4, is our agency console for clients with a service agreement. Our Shopify app of the same name, "Creativ Ads Console" on the Shopify App Store, is a separate product: it is installed and billed through Shopify, and section 7 describes it.
How access is granted. A business can connect its own Meta ad account from our console through Meta's business login (Facebook Login for Business). In Meta's own dialog it chooses the business portfolio, ad account and Facebook Page it shares with us — and, optionally, the Instagram professional account linked to that Page — and approves the permissions listed below. Alternatively, a client can share its ad account with our Meta Business portfolio (Creative Augmentation, Business ID 1396739397786188) in Meta Business Settings, or have us create and manage an ad account on its behalf. Either way, our access runs through a Meta System User whose permissions the business controls. The business can revoke that access at any time in Meta Business Settings, without contacting us.
What we access. For each connected or shared ad account we use the ads_read, ads_management and business_management permissions. For connected Facebook Pages we use the pages_show_list and pages_read_engagement permissions, and for an Instagram professional account linked to a connected Page we use the instagram_basic permission. We access:
Apart from the business's own Instagram account described above, we do not access Facebook or Instagram user profiles, messages, comments or reactions, or pixel/browser-level data of end users through the console, and we never publish, edit or delete a Page's posts. We hold no names, email addresses, phone numbers or other personal data of the people who see or interact with a client's ads.
How we use it.
We never sell advertising data, never combine one client's data with another's, and never use a client's data to advertise to anyone.
Where it is stored and for how long. Data is stored on Google Cloud in the Mumbai (asia-south1) region, isolated per client. We keep campaign- and ad-set-level daily performance for up to 730 days, ad-level daily performance and audience snapshots for up to 180 days, and a technical log of our API calls (endpoint, timing, outcome — no advertising data) for operational monitoring. Data is deleted on request at any time (see our Data Deletion page) and when a client relationship ends.
Who we share it with. Only the sub-processors needed to run the service — Google Cloud (hosting and storage) and the client's own Meta platform. We do not transfer Meta platform data to data brokers, advertising networks or any other third party.
How we protect it. Encryption in transit and at rest; a dedicated, least-privilege service identity for the Meta integration; API credentials held in a managed secret store, never in code or logs; the console reachable only through our web application firewall; per-user sign-in with named, revocable accounts and role-based access to each client; and an audit trail of every read and change. We comply with Meta's Platform Terms and Developer Policies.
Your rights. A client may ask us at any time to show, correct or delete the advertising data we hold for their ad account — see our Data Deletion page. Access is revoked directly in Meta Business Settings. A business that connected through Meta's business login removes "Creativ Ads Console" under Integrations → Connected apps; our daily access check then stops all reads within 24 hours. A client that shared its ad account removes our Business portfolio's access. Revoking access does not by itself erase the data already collected; our Data Deletion page explains how to have it deleted.
We use large language models in two of our products. This section names the provider for each and says where it processes the data.
Creativ Ads Console — your Amazon advertising data. We use large language models for:
What the models see, and who runs them. Only your own Amazon advertising data — never another client's. That data is sent to Anthropic (the Claude models), which processes it in the United States; this is a transfer of your data outside India. We do not use your data to train AI models, and Anthropic does not train on it.
Meta, Flipkart and Myntra data. Advertising data from Meta, Flipkart and Myntra is not sent to any AI model.
Creativ Chat Studio — AI replies to your customers. Replies are generated by Google Vertex AI (Gemini). Messaging data is stored in India (asia-south1), but Vertex AI serves these requests from its global endpoint, so the message text used to generate a reply may be processed outside India. Google does not train its models on it.
Creativ Social. No Creativ Social data is sent to any AI model.
Our Shopify apps. Section 7 says, per app, whether any Shopify data is sent to an AI model.
Accuracy. AI-generated classifications, insights and recommendations are estimates, not guarantees. They can be wrong. Any classification can be reviewed and overridden by a human, and we apply automated validation checks and guardrails before any change reaches your Amazon account.
Automated changes. Where you have enabled automation, we may adjust bids and budgets on your behalf. Every automated change is bounded by limits you configure (minimum and maximum bid, maximum budget), is subject to cooldown periods, and is logged.
Data freshness. Reporting data is refreshed at least daily. Amazon itself restates advertising figures for up to 14 days after the fact, so recent numbers may change.
We provide an AI messaging assistant and a shared team Inbox that answer customer messages across Meta's messaging platforms — Instagram Direct, Facebook Messenger, and WhatsApp. We operate this both on our own business accounts and, as a service (our "Chat Studio" product), on the accounts of business clients who authorise us to act on their behalf. This section explains how we handle data obtained through Meta's platforms when you message a business we serve.
Creativ Chat (Android/iOS) is the companion app to Creativ Chat Studio, for businesses and their team members. When you use the app we process: your name and email address (from your Google or Microsoft sign-in — we never receive your password), the Instagram Direct Message conversations of your business's connected account (to show the inbox and let authorised team members reply), saved replies and chat-assignment records you create, a push-notification token for your device (only if you allow notifications, used to tell you a conversation was assigned to you), and basic service logs.
This data is stored on Google Cloud Platform (Mumbai, India); conversation threads and service logs are automatically deleted after at most 90 days. It is shared only with the processors that make the service work — Meta Platforms (Instagram messaging), Google Cloud (hosting), Google/Microsoft (sign-in), and Expo (notification delivery) — and is never sold or used for advertising. The app contains no ads and no third-party tracking. All data is encrypted in transit.
You may sign out at any time (removing the token from your device), disable notifications in system settings, and request access, correction, or deletion of your data by emailing mail@creativeaugmentation.in. The app is intended for business users aged 18 and over.
We publish two apps on the Shopify App Store: Creativ Chat and Creativ Ads Console. This section explains, for each app, what it reads from a merchant's Shopify store, why, where it is kept and for how long. Everything in this section applies only to data that comes from Shopify.
Two products named "Creativ Ads Console". The Shopify app Creativ Ads Console is separate from the Creativ Ads Console agency console in sections 2 to 4, which our advertising clients use under a service agreement. Installing the Shopify app does not create an account in, or a contract for, the agency console.
Creativ Chat answers your store's customers in chat, using your product catalogue and, if you turn on order tracking, your orders.
read_products and read_orders, both read-only.Creativ Ads Console shows you your own store's sales performance inside your Shopify admin.
read_reports, read_products and read_orders, all read-only.How long Creativ Ads Console keeps your data.
Both apps answer the three privacy requests Shopify sends on behalf of merchants and their customers:
customers/data_request — a customer of your store asked for their data. Neither app holds Shopify customer records, so there is nothing to export; each app acknowledges the request.customers/redact — a customer of your store asked for their data to be deleted. Neither app holds Shopify customer records, so there is nothing to delete; each app acknowledges the request.shop/redact — sent by Shopify 48 hours after you uninstall an app. Creativ Chat deletes your store's data when the request arrives. Creativ Ads Console deletes your store's data at once, apart from the billing record described above.Our Shopify apps are billed by Shopify on your Shopify invoice; we receive no card details. Creativ Chat has one monthly plan, shown on its plan page in Shopify. If you already pay us directly for Creativ Chat, your store is linked to your existing account outside Shopify and you are not charged for it on Shopify.
You can uninstall either app at any time from your Shopify admin. For questions about this section, or to ask for your store's data to be deleted sooner, email mail@creativeaugmentation.in. See also our Data Deletion page.
Creativ Outreach (outreach.creativeaugmentation.com) is our outbound messaging tool. It is currently used by our own team; use by client brands is planned. It sends multi-step email and WhatsApp sequences from mailboxes and WhatsApp Business numbers that the customer owns, and it stops a recipient's sequence when they reply, bounce, unsubscribe or send STOP.
When a customer connects a Google mailbox, Creativ Outreach requests two Gmail permissions through Google's OAuth consent screen, and uses each only as described:
gmail.send) — to send the messages the customer composed, to the contacts the customer imported, on the schedule the customer set. Every email carries the customer's own sender address and a one-click unsubscribe link.gmail.metadata) — to read message headers only (sender, recipient, subject, date, message identifiers such as Message-ID, In-Reply-To and References, and automatic-reply and delivery-failure markers). We use these to recognise that a recipient replied or that a message bounced, and to stop that recipient's sequence. We never read message bodies, attachments, drafts, contacts or labels beyond what the headers carry, and we never change mailbox settings.We also read the connected mailbox's email address to label the connection in the portal.
Creativ Outreach's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Status: WhatsApp campaign sending is built but is not yet sending in production — no WhatsApp campaign message has been sent. The paragraph below describes how it works once it is enabled.
WhatsApp messages are sent only as Meta-approved message templates, from a WhatsApp Business number on the customer's own WhatsApp Business Account, through Meta's WhatsApp Business Platform. Replies and STOP messages are received so that a recipient's sequence can be stopped and their number suppressed; Creativ Outreach does not answer messages. Delivery and read receipts are stored per message for reporting.
If you received an email or WhatsApp message sent through Creativ Outreach, the customer who sent it holds your name, email address and/or phone number, company details they imported, and a record of what was sent to you, whether it was opened or clicked, and whether you replied. Emails include a small tracking image and tracked links so the sender can see opens and clicks. You can stop further messages at any time: use the unsubscribe link in any email, reply STOP to any WhatsApp message, or write to mail@creativeaugmentation.in. An opt-out is applied within minutes and honoured permanently: we keep a hashed record of an opted-out address or number precisely so it is never contacted again. Message and event records are kept while the sending account is active. To have your details deleted, write to mail@creativeaugmentation.in: we delete them within 30 days of a verified request and confirm by email, keeping only the hashed opt-out record. See our Data Deletion page.
Creativ Social (social.creativeaugmentation.com) is our social content calendar. A brand's team uploads finished images and videos, writes the captions, sends the post for approval, schedules it, and Creativ Social publishes it at the scheduled time to the brand's own Facebook Page and Instagram professional account through Meta's official APIs. LinkedIn is being added, through LinkedIn's official Community Management API — see LinkedIn below; it is not live yet. Creativ Social is in early access: a private pilot with selected Creative Augmentation clients. During the private pilot, publishing is limited to Creative Augmentation's own test accounts; connecting a brand's own Page and Instagram account opens after Meta's review.
You sign in with Google or Microsoft. We receive only basic sign-in details — your email address, your name and the provider's subject identifier, from the openid, profile and email scopes. We never receive your password, and we hold no Google or Microsoft API tokens. Who may work on which brand is decided in the Creative Augmentation account portal; Creativ Social keeps no membership records of its own.
All of this is held on Google Cloud in India (asia-south1). Media is stored in a private Cloud Storage bucket, never a public one, and is handed to Meta through short-lived signed links only at the moment a post publishes. Uploads that are never completed are deleted automatically after 2 days. The access token for a Meta connection is held in Google Secret Manager and nowhere else.
Data is sent to Meta only when an approved post publishes — the post's text, its media and, on an Instagram post, the AI-disclosure label if the person who created the post ticked it. We do not read comments, direct messages, insights or follower lists, and we collect nothing about the people who see or interact with your posts. No Creativ Social data is sent to any AI model. We do not sell data. The only processors involved are Google Cloud, Google and Microsoft sign-in, and our own account portal.
Disconnect in the app. You can disconnect a Meta connection at any time in Creativ Social, under Settings → Social accounts: we delete the stored access token, unmap the Facebook Page and Instagram account, and stop publishing for them. The connection record is kept, marked as revoked and without the token.
Remove the app at Meta. Removing the app in Meta Business settings revokes our access the same way. Here too we keep the connection record, without the token.
Meta's data-deletion request. We honour Meta's deauthorise and data-deletion callbacks. A deletion request deletes a connection when the Meta user id in the request matches the one stored on that connection, and we return a confirmation code together with the status link Meta shows you, where you can check the request's progress. A connection made through Facebook Login for Business is stored against a Meta system user's id, so a request sent for an individual's own Meta user id may not match it.
Everything else, by email. Posts, uploaded media and brand settings can be deleted in the app. For anything the routes above do not cover — including a connection a deletion request did not match — write to mail@creativeaugmentation.in and we will delete it. See our Data Deletion page.
We keep your content — brand settings, posts, approvals and media — until you delete it or ask us to delete it. There is one exception: the audit trail, the records of revoked Meta connections and the records of deletion requests are kept for security and compliance purposes, and we have not yet set a fixed expiry for them. Unfinished media uploads are deleted after 2 days, as described above.
We are adding LinkedIn to Creativ Social, using LinkedIn's official Community Management API: publishing a scheduled post to the brand's own LinkedIn Page and, if the person who connects chooses it, to their own LinkedIn profile. LinkedIn publishing is not live yet — connecting a LinkedIn Page opens after LinkedIn's review of our application, in the same way as connecting a brand's own Facebook Page and Instagram account. Nothing described below happens unless and until someone connects LinkedIn.
What we access, only after you connect LinkedIn. A connection is made in Creativ Social through LinkedIn's official OAuth consent screen, where the person signs in to LinkedIn and approves the permissions. We never ask for, and never accept, a LinkedIn password. With that consent we access:
The permissions we request are for publishing only: posting to a LinkedIn Page the person administers (w_organization_social) and, if they choose it, posting to their own LinkedIn profile (w_member_social).
What we send to LinkedIn. Data is sent to LinkedIn only when an approved post publishes — the post's text and its media, to the LinkedIn Page or the profile chosen for that post. Nothing else, and on no other occasion.
What we do not do. We do not read comments, messages or follower lists on LinkedIn, and we collect nothing about the people who see or interact with your LinkedIn posts. LinkedIn data is never used for advertising, sales, recruiting, lead generation, audience building or to enrich a CRM; it is never combined with our own data, with other LinkedIn data or with third-party data to build or add to profiles of people; and it is never sold, exported out of Creativ Social or shared with another client. It is shown only to the people who work on that brand. No Creativ Social data is sent to any AI model, LinkedIn data included.
How long we keep it, within LinkedIn's own storage limits:
Disconnecting and deletion. You can disconnect LinkedIn at any time in Creativ Social, under Settings → Social accounts: we delete the stored access token and stop publishing to LinkedIn. The connection record is kept, marked as revoked and without the token. You can also revoke our access at LinkedIn itself, under Settings → Data privacy → Permitted services (shown there as "Other applications"). For anything a disconnect does not cover, including deleting what we already hold, write to the Grievance Officer at mail@creativeaugmentation.in, as on the rest of this policy and our Data Deletion page.
Who else is involved. The processors are unchanged — Google Cloud, Google and Microsoft sign-in, and our own account portal — plus LinkedIn itself, as the platform your posts are published to.
Having accurate information about you permits us to provide you with a smooth, efficient, and customised experience. We may use information collected about you via the website to:
We use commercially reasonable physical, administrative, and technological safeguards to preserve the integrity and security of all information collected through our website.
However, no method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach, we will notify affected users in accordance with applicable law.
If you are a resident of the European Economic Area (EEA), you have certain data protection rights. Creative Augmentation aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your personal data. You have the following rights:
We will respond to all legitimate requests within one month. If you wish to exercise any of these rights, please contact us at mail@creativeaugmentation.in. For a fast, self-serve way to delete your data — including any data collected through Instagram or Facebook messaging — see our Data Deletion page.
We do not sell, trade, rent, or otherwise share your personal information with unauthorised third parties. We may share your information only in the following situations:
We will never sell or misuse your personal information for purposes unrelated to the services we provide.
Subprocessors. We use the following providers to process data on our behalf. Each is bound by contractual confidentiality and security obligations, and none of them use your data to train their models:
We keep this list current and will update it before adding a new subprocessor that processes client data.
Our website and services are not directed to children under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us immediately. If we become aware that we have collected personal data from anyone under the age of 13 without verification of parental consent, we will take steps to remove that information from our servers.
We may use your information to send you newsletters, promotional materials, and other communications related to our services. This includes:
You can opt out of receiving marketing communications from us at any time by clicking the "unsubscribe" link in any marketing email, or by contacting us at mail@creativeaugmentation.in. Please note that even if you opt out of marketing communications, we may still send you transactional or administrative messages related to your account or our services.
Outreach emails sent through Creativ Outreach carry a one-click unsubscribe (List-Unsubscribe) header in addition to the unsubscribe link.
We may update this Privacy Policy from time to time in order to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this page.
Your continued use of the website after any changes or revisions to this Privacy Policy shall indicate your agreement with the terms of such revised Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.
If you have questions or concerns about this Privacy Policy, please contact us at mail@creativeaugmentation.in.