Privacy Policy for One Peak Creative

Effective Date: January 3, 2026

One Peak Creative ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, applications, and services, including Format Finder.

This policy applies to:

  • Our website at onepeakcreative.com
  • Our software applications, including Format Finder
  • Our online courses and coaching services
  • Any other services we provide

Please read this Privacy Policy carefully. By using our services, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide Directly

Account Information:

  • Name
  • Email address
  • Password (encrypted)
  • Billing address
  • Payment information (processed securely by Stripe; we do not store full payment details)

Profile Information:

  • Username
  • Profile picture (optional)
  • Business or creator information you choose to share

Communications:

  • Support requests and correspondence
  • Feedback and survey responses
  • Course comments and community posts

1.2 Information from Third-Party Platforms

When you connect your social media accounts (such as Instagram) to our services, we collect information from those platforms with your authorization. This includes:

From Instagram (via Instagram Graph API):

  • Your Instagram username and profile information
  • Your public profile picture
  • Your posted content (videos, images, captions)
  • Content engagement metrics (likes, comments, views, reach, impressions)
  • Follower count and basic audience demographics (when available)
  • Account insights and analytics data

Important: We only access data that you authorize through the official Instagram connection process. We do not access your private messages, password, or data from accounts you do not own.

1.3 Information Collected Automatically

Usage Data:

  • Features you use and actions you take
  • Time spent on our platforms
  • Error logs and performance data

Device and Technical Data:

  • IP address
  • Browser type and version
  • Device type and operating system
  • Referring URLs
  • Pages visited and navigation paths

Cookies and Similar Technologies: We use cookies, pixels, and similar technologies to:

  • Keep you logged in
  • Remember your preferences
  • Analyze usage patterns
  • Improve our services

See Section 8 for more details on cookies.

1.4 Information You Upload

Screenshots and Files: When you upload screenshots (such as retention curve graphs) for analysis, we process this content to provide our services. These uploads may contain:

  • Performance metrics from social media platforms
  • Analytics visualizations
  • Any other content you choose to upload

2. How We Use Your Information

We use your information for the following purposes:

2.1 Providing Our Services

  • Creating and managing your account
  • Processing subscriptions and payments
  • Delivering courses and digital content
  • Analyzing your connected social media content
  • Generating insights, recommendations, and suggestions
  • Transcribing video content for analysis
  • Providing customer support

2.2 Improving Our Services

  • Understanding how users interact with our platforms
  • Identifying and fixing bugs and errors
  • Developing new features and services
  • Conducting research and analysis

2.3 Communications

  • Sending transactional emails (receipts, account updates)
  • Providing customer support responses
  • Sending marketing communications (with your consent)
  • Notifying you of changes to our services or policies

2.4 Security and Legal

  • Protecting against fraud and unauthorized access
  • Enforcing our Terms and Conditions
  • Complying with legal obligations
  • Responding to legal requests and preventing harm

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

3.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

Provider Purpose Data Shared
Stripe Payment processing Payment and billing information
Supabase Database and authentication Account and usage data
Vercel Application hosting Technical and usage data
OpenAI/Anthropic AI-powered analysis Content for analysis (anonymized where possible)
Kajabi Course delivery Account and purchase information

These providers are contractually obligated to protect your information and use it only for the services they provide to us.

3.2 With Your Consent

We may share information when you direct us to or give explicit consent.

3.3 Legal Requirements

We may disclose information if required by law, regulation, legal process, or governmental request, or to protect our rights, privacy, safety, or property.

3.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or uses of your personal information.

3.5 Aggregated or De-identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you.

4. Third-Party Platform Data (Instagram)

4.1 What We Access

When you connect your Instagram account, we access:

  • Your profile information (username, bio, profile picture)
  • Your media content (videos, images, reels)
  • Performance metrics for your content
  • Account-level insights and analytics

4.2 How We Use This Data

We use Instagram data to:

  • Display your videos within our application
  • Transcribe video content for analysis
  • Analyze performance metrics you share (via screenshots)
  • Generate personalized recommendations to improve your content
  • Track your content performance over time (if you choose)

4.3 How We Protect This Data

  • Instagram access tokens are encrypted at rest
  • We do not share your Instagram data with other users
  • We do not post to your Instagram account without explicit action from you
  • We do not access your Instagram direct messages

4.4 Disconnecting Your Account

You can disconnect your Instagram account at any time through:

  • The settings page in our application
  • Your Instagram settings (Settings → Website permissions → Apps and Websites)

When you disconnect:

  • We stop accessing new data from your Instagram account
  • Previously collected data may be retained according to our retention policy
  • You can request deletion of all Instagram-related data (see Section 6)

4.5 Instagram's Policies

Your use of Instagram is also governed by Instagram's Terms of Use and Privacy Policy. We encourage you to review those policies.

5. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes described in this policy.

Data Type Retention Period
Account information Duration of account + 2 years
Payment records 7 years (legal requirement)
Video transcripts Duration of account or until deleted
Analytics data Duration of account or until deleted
Support communications 3 years
Usage logs 1 year

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.

6. Your Privacy Rights

Depending on your location, you may have the following rights:

6.1 All Users

  • Access: Request a copy of your personal data
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your data
  • Portability: Request your data in a portable format
  • Withdraw Consent: Withdraw consent for optional data processing
  • Disconnect Accounts: Disconnect linked social media accounts at any time

6.2 European Economic Area (EEA) Residents — GDPR

If you are in the EEA, you have additional rights under GDPR:

  • Right to object to processing
  • Right to restrict processing
  • Right to lodge a complaint with a supervisory authority

Legal Basis for Processing:

  • Contract performance (providing services you requested)
  • Legitimate interests (improving services, security)
  • Consent (marketing communications, optional features)
  • Legal obligations (tax records, fraud prevention)

6.3 California Residents — CCPA/CPRA

If you are a California resident, you have the right to:

  • Know what personal information we collect
  • Request deletion of your personal information
  • Opt-out of the sale of personal information (we do not sell your data)
  • Non-discrimination for exercising your rights

6.4 Canadian Residents — PIPEDA

As a Canadian company, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA).

6.5 Exercising Your Rights

To exercise any of these rights, contact us at:

We will respond to your request within 30 days. We may need to verify your identity before processing certain requests.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

Technical Measures:

  • Encryption of data in transit (TLS/SSL)
  • Encryption of sensitive data at rest
  • Secure authentication mechanisms
  • Regular security assessments
  • Access controls and monitoring

Organizational Measures:

  • Employee training on data protection
  • Limited access to personal data on a need-to-know basis
  • Incident response procedures
  • Regular review of security practices

While we strive to protect your information, no method of transmission or storage is 100% secure. If you become aware of any security issues, please contact us immediately.

8. Cookies and Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and understand how you use the site.

8.2 How We Use Cookies

Cookie Type Purpose Duration
Essential Authentication, security, basic functionality Session
Functional Remember preferences and settings 1 year
Analytics Understand usage patterns and improve services 1 year
Marketing Deliver relevant advertisements (with consent) 1 year

8.3 Your Cookie Choices

You can manage cookies through:

  • Your browser settings (block or delete cookies)
  • Our cookie consent banner (where applicable)
  • Opt-out tools for specific analytics providers

Note that blocking certain cookies may affect your experience with our services.

8.4 Do Not Track

Some browsers have a "Do Not Track" feature. Our services do not currently respond to Do Not Track signals, but you can manage tracking through the methods described above.

9. Children's Privacy

Our services are not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected], and we will delete such information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including Canada and the United States. These countries may have different data protection laws.

When we transfer data internationally, we implement appropriate safeguards:

  • Standard contractual clauses approved by relevant authorities
  • Data processing agreements with service providers
  • Compliance with applicable data transfer frameworks

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes:

  • We will update the "Effective Date" at the top
  • We will notify you via email or prominent notice on our platforms
  • We may request renewed consent where required by law

Your continued use of our services after changes take effect constitutes acceptance of the updated policy.

12. Third-Party Links and Services

Our services may contain links to third-party websites or services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you access.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: [email protected]

General Support: [email protected]

Mailing Address: One Peak Creative Attn: Privacy Officer Kelowna, British Columbia Canada

Response Time: We aim to respond to all privacy-related inquiries within 30 days.

14. Supplemental Notices

14.1 Instagram Data Use Disclosure

In compliance with Meta Platform Terms, we disclose that:

  • We use Instagram data solely to provide content analysis services to the account owner
  • We do not use Instagram data for advertising or sell it to third parties
  • We do not use Instagram data to build profiles on non-users
  • Users can revoke access at any time through our app or Instagram settings
  • We delete Instagram data upon user request or account disconnection (subject to our retention policy)

14.2 AI and Automated Processing

Our services use artificial intelligence and automated processing to:

  • Transcribe video content
  • Analyze content performance
  • Generate recommendations and suggestions

These automated processes assist in providing our services but do not make decisions that significantly affect you without human oversight.

Last Updated: January 3, 2026

Previous Versions: Available upon request