Creator Reply — Privacy Policy

Last updated: December 11, 2025

This Privacy Policy explains how XplodeMedia Limited ("XplodeMedia", "we", "us", "our") collects, uses, discloses, and protects personal data in connection with the Creator Reply service ("Service").

XplodeMedia is incorporated in Hong Kong and acts primarily as a data controller for account, billing, and platform-level data. When we process data strictly on your instructions—such as fetching and replying to YouTube comments—we act as a data processor, and you are the data controller.

If you do not agree with this Privacy Policy, please discontinue use of the Service.

1. Who We Are

XplodeMedia Limited
Unit 1603, 16th Floor
The L. Plaza
367–375 Queen's Road Central
Sheung Wan
Hong Kong

For privacy-related requests, questions, or concerns, please contact us through the contact form on our website.

2. Scope of This Policy

This Privacy Policy applies to:

  • Users of the Creator Reply platform
  • Visitors to our websites and landing pages
  • Prospective customers interacting with us

If you are an end-user of one of our customers (e.g., you leave a comment on their YouTube channel), the customer controls your data. Please refer to their privacy policy.

3. Data We Collect

We only collect data that is relevant and necessary for legitimate purposes.

3.1 Data You Provide Directly

You provide data when you:

  • create an account
  • subscribe to a plan
  • connect YouTube channels
  • contact support
  • request a demo
  • complete a form
  • participate in webinars or events

Account information

  • Name
  • Email address
  • Username / Login details
  • Channel or company name

Billing information

  • Subscription tier
  • Billing status
  • Partial payment identifiers (we do NOT store full credit card numbers)

Support & communication

  • Messages sent through support channels
  • Feedback or survey answers

3.2 Data Collected Automatically

  • IP address
  • Device and browser type
  • Operating system
  • Pages viewed and actions taken
  • Timestamps and diagnostic logs
  • Session/authentication cookies

3.3 Data From Third Parties — YouTube / Google APIs

When you connect your YouTube channel and grant permissions via Google OAuth, Creator Reply uses YouTube API Services to access certain Google user data associated with your channel. This may include:

  • Channel metadata
  • Video metadata
  • Comment threads
  • Your YouTube profile information
  • Access & refresh tokens

We access this data only after you explicitly grant permission.

We use this to:

  • fetch comments
  • generate suggested replies
  • post replies
  • provide analytics

You may revoke access anytime via your Google Account settings.

We never sell Google user data or use it for advertising.

4. How We Use Personal Data

4.1 Service Delivery & Account Management

  • Account creation & management
  • Authentication
  • YouTube channel connections
  • Reply generation & posting
  • Saving templates & history

4.2 Billing & Subscription

  • Payment processing
  • Renewals
  • Invoices

4.3 Product Performance, Safety & Security

  • Monitoring service quality
  • Preventing abuse & fraud
  • Audit logging

4.4 AI & Machine Learning

We may anonymize and aggregate Customer Content to improve the Service. This data cannot identify you.

We do not use information received from Google APIs to develop or train generalized AI/ML models outside of Creator Reply's user-facing features, in compliance with Google's Limited Use requirements.

4.5 Customer Support

We use data to respond to inquiries and send service updates.

4.6 Marketing & Communication (B2B)

You may opt out anytime.

4.7 Legal Compliance

We process data as required by law and to protect our rights.

5. How We Share Data

We do not sell personal data.

Service providers include:

  • Hosting & infrastructure
  • Monitoring & logging
  • Email tools
  • Analytics & error tracking
  • AI processing partners

We do not share Google user data with third parties except as necessary to operate the Service in compliance with Google's policies.

6. International Data Transfers

Data may be processed in Hong Kong, the EU/EEA, the U.S., and other regions where providers operate. Appropriate safeguards are applied.

7. Data Retention

We retain data only as long as needed for service delivery, legal obligations, or dispute resolution. YouTube access stops immediately when you revoke permissions.

8. Your Rights

Depending on your region, you may have rights to:

  • Access
  • Correction
  • Deletion
  • Restriction
  • Portability
  • Object to processing
  • Withdraw consent

9. Cookies & Tracking

You may disable non-essential cookies at any time.

10. Children's Privacy

We do not knowingly collect data from minors.

11. Data Security

We apply security measures including encryption, access controls, monitoring, and regular reviews.

12. Changes to This Policy

We will notify users of material updates.

13. Contact Us

XplodeMedia Limited
Unit 1603, 16th Floor
The L. Plaza
367–375 Queen's Road Central
Sheung Wan, Hong Kong

14. Additional Disclosures for Google & YouTube Data

Creator Reply's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You may revoke access at any time at: https://myaccount.google.com/permissions

15. Relationship to YouTube Terms

Your use of Creator Reply's YouTube features is also governed by the YouTube Terms of Service and related policies.