Privacy Notice

1. Our role

We act as the data controller for personal data processed through Top Creative. This notice explains what we collect, why, and with whom we share it.

2. Data we collect and why

• Account data (name, email, login credentials, language) — to create and manage your account and authenticate you. Legal basis: performance of a contract.
• Content you upload (video creatives, briefs, prompts, generated analyses and ideas) — to deliver the requested service. Legal basis: performance of a contract.
• Usage and credit data (credit balance, transactions, feature usage, timestamps) — to meter usage, bill correctly and support you. Legal basis: contract and legal obligation.
• Technical data (IP address, device and browser identifiers, logs) — for security, fraud prevention, troubleshooting and product improvement. Legal basis: legitimate interests.
• Support messages — to answer your requests. Legal basis: legitimate interests.
• Marketing communications — only where you have consented. Legal basis: consent, which you may withdraw at any time.

3. Who we share data with

• Service providers and subprocessors: cloud hosting, database and storage, AI model providers that process submitted content to generate outputs, analytics and support tooling.
• Paddle.com, our Merchant of Record, for the sale of the product, subscription management, payments, tax compliance and invoicing.
• Professional advisers (legal, accounting) where necessary.
• Authorities, where required by law.

We do not sell personal data.

4. International transfers

Our providers may process data outside your country, including in the United States and the European Union. Where required, transfers rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

5. Retention

We keep account and usage data for as long as your account is active and for up to 5 years thereafter where required for tax and legal purposes. Uploaded videos and generated analyses are retained while your account is active and are deleted or anonymised on account deletion or on request, unless we must keep them by law.

6. Your rights

Subject to applicable law (including the Brazilian LGPD and, where relevant, the GDPR), you may request confirmation of processing, access, correction, deletion, anonymisation, portability, restriction, object to processing, withdraw consent, and obtain information about data sharing. Write to support@topcriative.com and we will respond within the legal deadline (generally up to one month). You may also lodge a complaint with your supervisory authority (in Brazil, the ANPD).

7. Security

We apply appropriate technical and organisational measures, including encryption in transit, access controls, row-level authorisation on stored records and least-privilege administration.

8. Cookies

We use essential cookies and local storage to keep you signed in and to remember your language preference. Checkout pages may set cookies from Paddle to process payments and prevent fraud. You can manage or delete cookies in your browser settings; disabling essential cookies will break sign-in.

9. Changes

We may update this notice and will publish the current version on this page.