Privacy Policy

Last updated: 23 September 2026

This policy explains what personal data Creative Media (“we”, “us”), a social media and marketing agency in Erbil, Kurdistan Region, Iraq, collects, why, and how we protect it. It covers this website (https://creativecompany.net) and the social media management tools we use to run our clients' Facebook Pages and Instagram accounts, including our Meta app “Creative Media Social”.

1. Visitors to this website

  • Contact form: the form does not store anything on our servers. It opens WhatsApp or your email app with your message filled in; we receive it only if you send it there.
  • Server logs: our web server records technical data for each request (IP address, date and time, page, browser type) to keep the site secure and working. Logs are deleted automatically, normally within 30 days.
  • Preferences: your browser stores your light/dark mode choice locally. We do not use advertising or tracking cookies.
  • Third parties: fonts are loaded from Google Fonts and the office map from Google Maps, which receive your IP address when those load.

2. Data from Facebook and Instagram

When a business hires us, it gives us access to its Facebook Page and linked Instagram professional account through Meta's official tools. Using the permissions the business approves, our tools can access:

  • the Page and account details (name, ID, profile picture) and the access tokens needed to act on the business's behalf;
  • posts, photos and videos we publish or schedule for the business, and basic information about them;
  • messages sent to the business's Page or Instagram account (the sender's name and ID as provided by Meta, the message text and attachment details), so the business's team can read and answer them.

We use this data only to provide our service to that business: to publish and schedule content, to show and answer its messages, and to report on its accounts. We do not sell it, use it for our own advertising, or combine it with other data to profile people.

3. AI-assisted replies

If a business switches on AI replies, the text of a conversation and the business information it has given us are sent to our AI provider, Anthropic (Claude), to draft a reply. Depending on the business's settings, a staff member reviews the draft before it is sent, or it is sent automatically; the AI hands conversations to a person when it is unsure. Anthropic processes this data on our behalf and does not use it to train its models.

4. Who we share data with

Only the service providers needed to run the service: Meta (Facebook and Instagram), Anthropic (AI replies), and our hosting providers. We may disclose data if required by law.

5. Storage, security and retention

Data is stored in databases on servers we control. Access tokens are encrypted, and only our team can sign in to our tools. We keep data from a business's accounts while we work for that business. When the business ends our service or removes our access, we delete its tokens, messages and related data within 30 days, except where the law requires us to keep something longer.

6. Your rights

You can ask us what data we hold about you, ask us to correct it, or ask us to delete it. See our Data Deletion Instructions or email info@creativecompany.net. We answer within 30 days.

7. Children

Our website and services are meant for businesses and are not directed at children under 13.

8. Changes

If we change this policy, we will update the date above. Important changes will be announced on this page.

9. Contact

Creative Media, Erbil, Kurdistan Region, Iraq · info@creativecompany.net · +964 770 531 3311