1. Introduction

This privacy policy applies specifically to the CreatorSense Data Sync Chrome extension (the "Extension") published by Creator Sense AI ("we," "our," or "us"). The Extension is an optional companion to your CreatorSense AI dashboard account and is distributed through the Chrome Web Store: CreatorSense Data Sync listing.

The Extension's sole purpose is to let you securely sync your own creator analytics from supported third-party creator tools into your authenticated CreatorSense AI dashboard. You remain in control of when sync runs, which platforms are connected, and when data is removed.

For data handled by the wider CreatorSense AI service (web dashboard, API, AI features, billing, etc.), see our main Privacy Policy.

2. What the Extension Does

The Extension reads your own creator analytics from supported provider websites that you are already logged into, and forwards that data to your authenticated CreatorSense AI account so it can be displayed in your dashboard.

  • It does not collect data from other users on those platforms.
  • It does not collect your passwords or your social graph.
  • It does not browse the web on your behalf or read pages outside the supported provider domains listed below.
  • It does not load any remote code; all logic ships inside the extension package reviewed by Google.

3. Supported Platforms

The Extension only operates on the following provider domains. These are the only sites where its content scripts run and the only sites it requests host permissions for:

Category Provider / Domain Data Read
Newsletter Beehiiv (app.beehiiv.com) Subscriber counts, growth, open/click metrics, revenue aggregates
Affiliate Amazon Associates (affiliate-program.amazon.com, .co.uk, .ca) Aggregate clicks, orders, earnings totals
Affiliate / Creator commerce LTK (company.ltk.com, business.ltk.com, api.ltk.com) Profile name, follower / sales / commission totals
Resale marketplace Depop (www.depop.com, api.depop.com) Profile, listings count, sales totals
Short-form video TikTok Studio (studio.tiktok.com) Channel name, video performance metrics, follower totals
Long-form video YouTube Studio (studio.youtube.com) Channel name, video / channel analytics, subscriber totals
Microblog X / Twitter Analytics (analytics.twitter.com) Account name, post and audience metrics
Social Meta Business Suite (business.facebook.com) Page name, page-level performance and audience metrics
Newsletter / blog Substack (*.substack.com) Publication name, subscriber and revenue aggregates
Podcast Spotify for Podcasters (podcasters.spotify.com) Show name, episode performance and listener metrics
Online courses Kajabi (app.kajabi.com) and Teachable (teachable.com) School / course name, enrolment and revenue aggregates
Dashboard handshake CreatorSense AI dashboard (app.creatorsenseai.com, api.creatorsenseai.com) Authenticates the sync session and receives your synced data

The Extension syncs data from subscription and social creator platforms.

4. Data the Extension Handles

4.1 Creator Analytics Data ("Platform Data")

From the providers listed above, the Extension reads only data that is already visible to you, the signed-in account holder, on those providers' analytics pages. Typical fields include:

  • Your account, channel, page, publication, store or show name
  • Your platform user / channel ID
  • Aggregate performance metrics (followers, subscribers, views, opens, clicks, watch time, listens, sales count)
  • Aggregate revenue / earnings figures where shown to you (e.g. affiliate commissions, newsletter revenue, course revenue)
  • Anonymised or pre-aggregated audience composition exposed by the provider (e.g. country and device breakdowns)

The Extension does not collect direct messages, subscriber email addresses, payment card numbers, bank details, or your platform passwords.

4.2 Authentication Context

To send your data to the correct dashboard account, the Extension stores in local browser storage (chrome.storage.local) the minimum information needed to identify your sync session - for example your CreatorSense AI session indicator, the list of platforms you have enabled for sync, and the timestamp of the last successful sync. This information never leaves your browser except to be sent to the CreatorSense AI API over HTTPS.

4.3 Diagnostic / Operational Data

For reliability and abuse prevention, the Extension may include in its requests to the CreatorSense AI API: extension version, the provider being synced, success/failure status and basic timing information. It does not include browsing history, content of pages you visit outside the supported provider domains, or personal identifiers beyond what is required to authenticate your session.

4.4 What the Extension Does NOT Do

  • It does not sell, license, or rent your data.
  • It does not use your data for advertising, behavioural profiling, or creditworthiness / eligibility decisions.
  • It does not transfer your data to third parties for purposes unrelated to the Extension's stated single purpose.
  • It does not track you across the web; it only acts on the supported provider domains listed in Section 3.
  • It does not load, evaluate, or fetch remote JavaScript, WebAssembly, CSS or HTML.

5. Permissions and Why They Are Required

We request the minimum permissions necessary for the Extension's single purpose. Each permission below maps to a specific feature.

Permission Why it is required
activeTab Lets the Extension act on the tab you have explicitly opened when you click "Sync now," so we can read analytics on the page you are looking at without persistent background access.
storage Used to store your sync preferences, the list of enabled platforms, and the last-sync timestamp locally in the browser via chrome.storage.local.
alarms Used to schedule periodic background sync checks (for example, a daily refresh of the platforms you have enabled), without keeping the service worker alive unnecessarily.
offscreen Manifest V3 service workers terminate aggressively. The Extension uses an offscreen document with a short heartbeat to keep the service worker alive only while a sync is actively running, then closes it.
webNavigation Used to detect single-page-app navigations on supported provider sites (e.g. switching between analytics views) so the correct extractor can run after a client-side route change.
scripting Used to programmatically inject the relevant analytics extractor into the supported provider pages when sync starts.
Host permissions (Section 3 list) Required so the Extension can read your own analytics on the supported provider pages and securely transmit them to your authenticated CreatorSense AI account.

6. How Data Is Transmitted

All data extracted by the Extension is sent over HTTPS (TLS) directly to the CreatorSense AI API at https://api.creatorsenseai.com and associated to the CreatorSense AI account currently signed in. The Extension does not send your data to any third-party endpoint.

7. Storage, Retention and Deletion

Once received by CreatorSense AI, your synced analytics are stored and retained according to our main Privacy Policy and Data Retention policy.

You can remove your data at any time by:

  1. Disabling sync for a platform in the Extension popup - this stops further collection from that provider.
  2. Disconnecting a platform in your dashboard (Settings → Integrations) - this removes the synced data for that platform.
  3. Removing the Extension from Chrome - this clears all locally stored Extension state from your browser.
  4. Deleting your CreatorSense AI account from Settings → Data & Privacy, or by emailing support@creatorsenseai.com.

8. Data Sharing

The Extension does not share your data with third parties. Once your data reaches CreatorSense AI, the limited list of sub-processors used to operate the wider service (cloud hosting, error monitoring, transactional email, payment processing, AI inference) is disclosed in our main Privacy Policy. Each sub-processor is bound by confidentiality and data-processing terms and is prohibited from using your data for their own purposes.

9. Security

  • All network traffic uses HTTPS (TLS 1.2+).
  • The Extension's content scripts only run on the supported provider domains listed in Section 3.
  • The Extension's Content Security Policy restricts script-src and object-src to 'self' - no remote code is loaded or evaluated.
  • Server-side, your data is encrypted at rest and protected by the controls described in our main Security Policy.

10. Your Rights

Users in the European Economic Area (GDPR), United Kingdom (UK GDPR), California (CCPA/CPRA), and Australia (Privacy Act) have rights of access, correction, deletion, portability, restriction and objection with respect to their personal data. These rights are described in full in Section 8 of our main Privacy Policy and can be exercised for Extension-related data by contacting support@creatorsenseai.com.

11. Children

The Extension is intended for use by professional creators aged 18 or over and is not directed at children. We do not knowingly collect personal data from children through the Extension.

12. Changes to This Policy

We may update this policy when the Extension changes (for example when a new supported platform is added or a permission is added or removed). The "Last Updated" date above will reflect any change, and material changes will also be communicated through the dashboard or via email.

13. Contact

Creator Sense AI
Sydney, New South Wales, Australia
Email: support@creatorsenseai.com

For Chrome Web Store / extension-specific questions please mention "Chrome Extension" in the subject line so we can route your request promptly.