Privacy Policy

01Who we are

Creator OS is operated by Reis Media LLC ("Reis Media", "we", "us", "our"), a Wyoming limited liability company with a principal place of business at 1000 Brickell Ave, Ste 715, PMB 1696, Miami, FL 33131, USA. Creator OS is a web and desktop application that helps creators and entrepreneurs bring their finances, time, energy, goals and work together in one place.

This Privacy Policy applies to the Creator OS application (web and desktop) where you sign in and where you may connect your bank through Plaid. If you have any question about it, email admin@philipereis.com.

02What we collect

We collect only what we need to run the features you use. Depending on what you connect, that can include:

Connecting a data source is always optional and in your control. If you don't connect a bank, Rize, or Whoop, we don't receive that data.

03Bank data & Plaid

To let you connect a bank account, we use Plaid Inc. ("Plaid"). When you choose to connect, Plaid securely collects your login with the bank on your behalf and gives us access to the account and transaction information needed to power your finance features. You enter your bank credentials into Plaid's secure interface — Creator OS never sees or stores your bank username or password.

By connecting an account, you also agree to Plaid's handling of your information as described in the Plaid End User Privacy Policy. When you connect, we receive from Plaid an access token plus the account and transaction data you authorized; these are kept server‑side and encrypted, isolated to your account. (Bank connection is a feature we are rolling out; it runs on the encrypted, per‑user‑isolated platform described in Section 7.)

04Why we collect it

• To provide the service — show your finances, time, energy, goals and work, and the insights built on them.
• To power the AI guide — give you relevant suggestions based on your own data (see Section 6).
• To handle billing — manage your subscription tier through Stripe.
• To support you — answer questions and fix problems.
• To keep the app secure — protect against fraud, abuse and unauthorized access.

We do not sell your personal information, and we do not use your bank or financial data for advertising.

05Consent & your choices

We collect, process and store your data with your consent, which you give by creating an account and by choosing to connect each data source:

• Connecting a bank requires you to actively authorize it through Plaid — an explicit, per‑connection consent.
• Connecting Rize, Whoop, or importing a CSV is similarly your choice, each time.
• You can withdraw consent at any time by disconnecting a source, or by deleting your account, which removes the associated data (see Section 11).

06AI features & your data

Creator OS includes an in‑app AI assistant that guides you using your own data. When you use it, the relevant pieces of your data needed to answer you may be sent to the AI model provider you select (for example, providers behind GPT, Claude or Gemini) so it can generate a response.

• This only happens when you use the AI features.
• Providers process that data under their own terms to return your answer; we do not permit them to use it to advertise to you, and we do not sell it.
• On the highest tier you may use your own API key, in which case your AI usage runs directly under your own provider account.

07How we store & protect it

Your data is stored in a managed PostgreSQL database (Supabase) hosted in the United States, with the following protections:

• Encryption in transit: all traffic uses HTTPS with TLS 1.2 or higher.
• Encryption at rest: data is encrypted at rest with AES‑256.
• Per‑user isolation: the database enforces Row‑Level Security, so your account can only access your own data — no other user can read or change it.
• Least‑privilege keys & server‑side secrets: powerful keys and the Plaid secret are never exposed to the browser; secrets are kept in a secure store, never in our code.
• Security review before every release.

No system can be guaranteed 100% secure, but we apply these reasonable, layered measures and continue to strengthen them (see our Information Security Policy).

08Who we share with (sub‑processors)

We share data only with the trusted providers needed to run Creator OS, and only the data each one needs. We do not sell personal data.

We may also disclose information if required by law, to protect our rights or users' safety, or in connection with a business transfer — in which case we will keep you informed as the law requires.

09How long we keep it

We keep your data for as long as your account is active and you find it useful. When you disconnect a source or delete your account, we remove the associated data as described in our Data Retention & Deletion Policy. In short: keep what you use, delete what you ask us to.

10Your rights

You have rights over your personal data, including the right to:

• Access the personal data we hold about you.
• Correct data that is wrong or out of date.
• Export a copy of your data.
• Delete your data (see Section 11).
• Withdraw consent and disconnect any source at any time.

Depending on where you live (for example under the GDPR or California's CCPA/CPRA), you may have additional rights, such as the right to object to or restrict certain processing and the right not to be discriminated against for exercising your rights. To exercise any of these, email admin@philipereis.com and we will respond within the timeframe required by applicable law.

11Deleting your data

You can ask us to delete your data at any time by emailing admin@philipereis.com (a one‑click in‑app delete is a planned addition). When you do:

• We delete your account and personal data from our active database, normally within 30 days.
• We revoke any Plaid access tokens so your bank connection is severed.
• Copies remaining in routine encrypted backups are purged on the normal backup rotation cycle.
• We may keep the minimum records the law requires us to retain (for example, certain billing/tax records).

12Children, changes & contact

Children

Creator OS is intended for adults (18+) and is not directed to children. We do not knowingly collect data from anyone under 18.

International users

Creator OS is operated from the United States, and your data is processed and stored there. If you access Creator OS from outside the United States, you understand that your information will be transferred to, and processed in, the United States, where data‑protection laws may differ from those in your country. We take reasonable steps to protect your data consistent with this policy.

Changes to this policy

We may update this policy as the product evolves. We'll change the "Last updated" date above and, for material changes, take reasonable steps to let you know.

Contact

Reis Media LLC · 1000 Brickell Ave, Ste 715, PMB 1696, Miami, FL 33131, USA · admin@philipereis.com