How Pitshop handles personal information.

Overview

Pitshop, operated by Creator AI Tech Private Limited, processes personal data in connection with the Pitshop website, creator storefronts, affiliate workflows, and related services.

What We Collect

Direct information

• Contact and inquiry details submitted through forms or support messages.
• Registration, account, profile, payment, and commission information.
• Creator storefront information such as bio, location, interests, and social links.
• Survey, testimonial, and event registration responses.

Automatic information

• Log and usage data such as IP address, browser details, referrer, and activity timing.
• Analytics and location signals derived from device and browsing patterns.
• Affiliate tracking data for clicks, bookings, and attribution events.

Third-party information

• Affiliate partner data, social profile data, service-provider data, and publicly available sources.
• YouTube API related data where relevant to connected services.

Instagram and Facebook Data

When a creator connects an Instagram or Facebook account to power their storefront or comment automation, we access the following through Meta's official APIs:

What we collect

• Public profile information: handle/username, display name, profile photo, bio, and engagement counts (followers, posts, Reels) shown on the creator's storefront.
• For comment automation: the Instagram username and user ID of someone who comments on the creator's own post, and the numeric ID of that comment. We do not store the text of the comment itself, and we do not store the content of the automated reply that is sent.
• The Instagram or Facebook access token issued when the account is connected, stored encrypted (AES-256-GCM) and never included in any API response.

What we use it for

• Displaying the creator's own public stats on their storefront.
• Detecting a trigger phrase the creator has configured in comments on the creator's own posts, and sending one automated private reply on the creator's behalf.

We do not use data obtained through the Instagram or Facebook integration for advertising, for marketing to third parties, and we do not sell it.

Retention and deletion

Disconnecting an account (from Settings, or by revoking pitShop.ai's access directly within Instagram or Facebook) immediately deletes the stored access token and stops any further reading or sending on that account. Cached profile stats and comment-automation records may be retained after disconnection to preserve the creator's own delivery history. To request full deletion of profile or comment data tied to a connected account, contact pr@pitshop.ai.

How We Use Data

• Operate and improve the platform, including product design and support.
• Provide personalized travel recommendations, storefront experiences, and marketing.
• Track affiliate performance, compute commissions, and process payouts.
• Communicate updates, support messages, and partner opportunities.
• Protect the security, integrity, and legal compliance of the services.

Cookies and Tracking

The policy explains that Pitshop and its providers may use cookies, pixels, embedded scripts, beacons, and similar technologies for essential functionality, analytics, personalization, advertising, and affiliate attribution.

• Essential cookies for login and service functionality.
• Functional cookies for language and preference memory.
• Performance and analytics cookies for product improvement.
• Targeting cookies for advertising relevance.
• Affiliate tracking cookies for creator commission attribution.

Sharing and Disclosure

The policy permits disclosure to affiliates, affiliate partners, ad and marketing providers, customer service vendors, hosting and infrastructure providers, and in connection with business transactions, legal obligations, or user consent.

Your Rights

The document includes rights to access, rectify, erase, restrict, object, and port personal data, subject to applicable law. It also describes the deletion request flow and contact points for privacy and grievance matters. For data obtained through Instagram or Facebook specifically, see Instagram and Facebook Data above.