Skip to content
CBLabs
Sign in

Creator Analytics

Privacy Policy

Last updated: 8 November 2026

What this service is

The Creator Analytics Dashboard reports on how content performs on Facebook, Instagram, YouTube and TikTok for the independent content creators that Creator Analytics works with. Those creators own and run their accounts. The reports are used by the agencies those creators work with and shared with the creators they describe. Creators can create their own account; agencies join by invitation.

Creator Analytics is a service of CBLabs Information Technology Services (“we”, “us”), which is responsible for the data described here. You can reach us at support@creator-analytics.ph.

What we collect

Facebook Pages. When a Page admin connects their Page — by signing in with Facebook and approving the request on Facebook’s own consent screen — we read the following through the Meta Graph API:

  • the Page’s name, and whether it is live;
  • its posts, videos and livestreams, with their captions, likes, reactions, shares and comment text;
  • Page insights, which otherwise only the Page’s admins can see: reach, views, watch time and followers, which countries and cities followers are in, how many of a post’s views came from followers, and the age range, gender and country of a video’s viewers.

We do not read the admin’s personal profile, friends or messages.

Instagram accounts. When a creator connects an Instagram Creator or Business account — by signing in with Instagram and approving the request on Instagram’s own consent screen — we read the following through the Instagram API:

  • the account’s username, name, account type and profile picture;
  • its follower, following and post counts, and its daily reach and views;
  • how its followers break down by age range, gender, country and city;
  • its posts, reels and carousels, with their captions, likes and comment counts, and their insights: views, reach, saves, shares and total interactions.

We do not read comment text, stories or messages.

YouTube channels. A channel’s public data needs no sign-in. Using YouTube API Services, we read:

  • the channel’s title, handle, picture and subscriber count, and whether it is live;
  • its videos and livestreams, with their view, like and comment counts;
  • public comment text.

Granted analytics. If you own a channel and explicitly approve it through Google’s consent screen, we also read your YouTube Analytics reports: watch time, view duration, shares, subscribers gained and lost, how often your thumbnails are shown and clicked, and your viewers' age range, gender and country. This access is read-only: we cannot post, edit or manage anything, and we do not request revenue data.

TikTok accounts. When a creator connects their TikTok account — by signing in with TikTok and approving the request on TikTok’s own consent screen — we read the following through the TikTok Display API:

  • the account’s display name, username and avatar;
  • its follower, following, like and video counts;
  • its public videos, with their view, like, comment and share counts.

We read no comment text or messages. This access is read-only: we cannot upload, post, edit or delete anything on the account.

Audience breakdowns are totals and percentages reported by each platform; they never identify a follower or viewer.

What we deliberately do not keep. Commenter identities — names, profile links, avatars — are discarded before comments are stored. The dashboard shows what was said, never who said it.

How we use and store it

The data produces performance reports for the creators concerned and the agencies they approve. Nothing read from TikTok is published on a public website; it appears only in the signed-in dashboard and in our private reporting spreadsheets. Access credentials (Facebook Page tokens, Instagram access tokens, Google refresh tokens and TikTok refresh tokens) are stored encrypted with AES-256-GCM and are never exposed to browsers, spreadsheets or third-party automation.

How long we keep it. Facebook, Instagram and TikTok reports are kept for as long as Creator Analytics works with the creator, unless deletion is requested (see our Data Deletion page). A creator on their own Creator plan who leaves it unpaid for 90 days after it ends is deleted automatically, after two email reminders. YouTube data follows YouTube’s rules: public channel and video data is refreshed or deleted within 30 days, and granted YouTube Analytics data is kept only while the owner’s permission is re-checked at least every 30 days.

Data is hosted on Supabase (PostgreSQL) and Vercel. Reports are exported to Google Sheets through our reporting automation (n8n). Comment text is shown only inside the signed-in dashboard; it is not exported and is not sent to any AI model provider. Payments are processed by PayMongo (PayMongo Philippines, Inc.), which receives the amount, your chosen payment method, a payment reference, and the name and contact details you enter at checkout for its receipt; we never see or store card or e-wallet details. Sign-in and account emails are sent through Resend.

A creator’s reports are seen only by the agencies that creator has approved. An agency that wants to work with a creator asks for them by the email they sign in with, and nothing is shared until the creator approves. A creator can stop working with any agency at any time from their own Settings page, and that agency then no longer sees their data. Each agency’s own notes and contract details about a creator stay private to that agency.

We do not sell any data, and we do not share it with third parties beyond the processors named above. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Because the dashboard uses YouTube API Services, the YouTube Terms of Service and the Google Privacy Policy also apply.

Your control

A creator can withdraw access at any time from the platform itself: in Facebook or Instagram by removing Creator Analytics from their settings, in TikTok by removing the app, and for YouTube Analytics at myaccount.google.com/permissions. Collection that relied on that access stops at the next attempt. When Instagram tells us an account has removed the app, we disconnect it and delete everything we hold for it, its profile, posts and metrics, at once. When you remove our access to your YouTube Analytics, we delete the analytics we hold for your channel within 7 days. A YouTube channel’s public data needs no permission, so it is read until the channel is disconnected from the dashboard.

Disconnecting a Page, channel or account from the dashboard stops all further collection for it. Disconnecting a YouTube channel also deletes everything we hold for it and withdraws any analytics access at Google. To ask about or request deletion of stored data, email support@creator-analytics.ph. The steps for each platform are set out on our Data Deletion page.

Accounts

For everyone who signs in (a creator, or a member of an agency’s team) we keep an email address and name, the creator or agency the account belongs to, its role and the countries it may see, its plan and payment records, and a record of administrative actions taken. Sign-in itself is handled by Supabase Auth, which keeps its own sign-in records. A creator can delete their account from their own page (Settings, then Account); a member of an agency’s team is removed by that agency’s administrator; anyone can ask us to by emailing support@creator-analytics.ph.