Privacy Policy
Last updated: April 22, 2026
This Privacy Policy explains what information Packaging Review collects, how we use it, and your choices. The Creator Playbook is a product of John Malecki LLC, a Pennsylvania limited liability company. By using the Service, you agree to the practices described here.
1. What We Collect
- Account information: name, email address, hashed password (if you create a password account), and Google profile data (if you use Google Sign-In).
- Payment information: handled entirely by Stripe. We do not store card numbers. We receive a Stripe customer ID and subscription status.
- Submitted content: the thumbnails (images) and titles you upload, and the AI-generated reviews we return to you.
- Usage data: number of reviews per day, plan status, and basic request metadata (IP address for rate limiting).
2. How We Use It
- Generate your reviews and show them back to you.
- Enforce plan limits (3 free reviews per day; unlimited for Pro).
- Communicate with you about your account and the Service.
- Improve the scoring framework and Service in aggregate. We do not sell your data.
3. Third Parties We Share Data With
We use the following processors to operate the Service. Each has its own privacy policy.
| Provider | Purpose | Data shared |
|---|---|---|
| Anthropic (Claude API) | Generate AI reviews of your packaging | Uploaded thumbnail + title |
| Stripe | Payment processing, subscription billing | Name, email, card details (held by Stripe) |
| Sign-in authentication (optional) | Google profile email, name, avatar | |
| Railway | Application hosting and data storage | All application data |
| Notion | Internal lead tracking (Creator Playbook) | Name, email (on sign-up only) |
| GoHighLevel | CRM and marketing communications | Name, email (on sign-up only) |
| BuddyPro | Internal sync of review summaries | Name, email, review summary |
4. Retention
We retain your account and review history for as long as your account is active. If you delete your account, we remove your personal information and review history within 30 days. Aggregated, de-identified data may be retained for analytics and product improvement.
5. Security
Passwords are stored as salted scrypt hashes — never in plain text. Data is hosted on Railway, which encrypts data in transit and at rest. Despite reasonable safeguards, no system is perfectly secure; we cannot guarantee absolute security.
6. Your Rights
You can:
- Request a copy of the personal data we hold about you.
- Correct inaccurate personal data.
- Delete your account and associated data.
- Unsubscribe from marketing emails at any time using the unsubscribe link.
To exercise any of these rights, email support@creator-playbook.com.
7. Cookies and Local Storage
We use browser session storage to keep you signed in during your visit. Google Sign-In may set its own cookies. We do not use third-party advertising or cross-site tracking cookies.
8. Children's Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal data from children.
9. International Users
The Service is operated from the United States. If you access it from outside the US, you consent to the transfer and processing of your information in the US.
10. Changes
We may update this Privacy Policy. Material changes will be reflected here with an updated "Last updated" date.
11. Contact
Questions or requests? support@creator-playbook.com