Privacy Policy
Last updated: May 22, 2026
This Privacy Policy explains what information Idea Heist collects, how we use it, and your choices. The Creator Playbook is a product of John Malecki LLC, a Pennsylvania limited liability company. By using the Service, you agree to the practices described here.
1. What We Collect
- Account information: name, email address, and (if you create a password account) a salted scrypt hash of your password. If you use Google Sign-In, we receive your verified email, name, and avatar URL from Google.
- Channel + avatar profiles: the audience avatars, channel descriptions, content buckets, and YouTube URLs you submit through the avatar builder and heist flow.
- Heists + ideas: the source videos you heist from, the AI-generated breakdowns and ideas, and any ideas you save to your Idea Pool.
- Usage data: heists per month, plan status, and basic request metadata (IP address for rate limiting).
2. How We Use It
- Run the avatar builder, heist pipeline, and Idea Pool features for your account.
- Enforce plan limits (3 free heists per month; unlimited for TCP Members).
- Communicate with you about your account and the Service.
- Improve the Idea Heist Framework, title patterns library, and Service in aggregate. We do not sell your data.
3. Third Parties We Share Data With
We use the following processors to operate the Service. Each has its own privacy policy.
| Provider | Purpose | Data shared |
|---|---|---|
| OpenAI | Generate avatar coaching, breakdowns, ideas, and improvements via GPT-5.2 and gpt-image-1 | Avatar profile, channel context, source video metadata, conversation history (excluding password) |
| YouTube Data API (Google) | Fetch public video metadata (title, description, thumbnail, view counts, channel stats) for URLs you submit | YouTube URLs you submit |
| Google Sign-In | Optional sign-in authentication | Google profile email, name, avatar URL |
| Railway | Application hosting and persistent data storage | All application data |
| GoHighLevel | Internal CRM and member communications (Creator Playbook) | Name, email, source = "idea-heist" tag |
4. Retention
We retain your account, channels, heists, and saved ideas for as long as your account is active. If you delete your account, we remove your personal information and content within 30 days. Aggregated, de-identified data may be retained for analytics and product improvement.
5. Security
Passwords are stored as salted scrypt hashes — never in plain text. Session tokens are HMAC-signed and expire after 7 days. Data is hosted on Railway, which encrypts data in transit and at rest. Despite reasonable safeguards, no system is perfectly secure; we cannot guarantee absolute security.
6. Your Rights
You can:
- Request a copy of the personal data we hold about you.
- Correct inaccurate personal data through your Account page.
- Delete your account and associated data.
- Unsubscribe from marketing emails sent through GoHighLevel at any time using the unsubscribe link.
To exercise any of these rights, email support@creator-playbook.com.
7. Cookies and Local Storage
We use browser local storage to keep you signed in and to persist your in-progress avatar conversation. Google Sign-In may set its own cookies. We do not use third-party advertising or cross-site tracking cookies.
8. Children's Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal data from children.
9. International Users
The Service is operated from the United States. If you access it from outside the US, you consent to the transfer and processing of your information in the US.
10. Changes
We may update this Privacy Policy. Material changes will be reflected here with an updated "Last updated" date.
11. Contact
Questions or requests? support@creator-playbook.com