Privacy Policy
Effective 21 October 2026.
This policy explains what personal data CreekX handles, why, for how long, and what you can ask of us.
Who we are. CreekX ("we", "us") makes the CreekX live video server and runs creekx.io. Contact for anything in this policy: [email protected]. We answer within 30 days.
1. Two different situations
CreekX installed on your own server. When you install CreekX (from creekx.io, or from a cloud marketplace image), it runs on your server, under your control. The videos, recordings, accounts, viewer data and chat on that server are yours, and you decide what happens to them: for that data you are the controller (the "data fiduciary" under India's DPDP Act 2023), and we never receive it. The software does not send us usage data, analytics or telemetry.
The one exception is a licence key. When you run creekx activate (or add a
key in the app), your server sends us the key and the details in section 2.3, so we can
check the key and issue the licence. Nothing else is sent to us.
If you watched a stream or chatted on a CreekX server run by someone else, that organisation is responsible for your data there. Ask them.
Our website, creekx.io. For the website and the forms on it, we are responsible for your data, as described below.
2. What we collect, why, and for how long
2.1 When you visit creekx.io
| What | Why | How long |
|---|---|---|
| Your IP address, browser and the pages requested, in our hosting provider's request logs | Delivering the site, security, stopping abuse | As set by our hosting provider (Cloudflare), typically days |
We do not use analytics, advertising or tracking cookies, and we load no third-party scripts or fonts. The site sets no cookies for visitors. Your browser may keep a preference such as light or dark theme in its own local storage; it never leaves your device.
2.2 When you ask for a free trial or contact us
| What | Why | How long |
|---|---|---|
| Name, company, email address, phone number, what you want to use CreekX for | To send your trial key, reply to you, and follow up about CreekX | 24 months after our last contact with you, then deleted |
| Your message (contact form) | To answer it | 24 months after our last contact with you, then deleted |
| The country your request came from and your IP address | Stopping spam and abuse of the trial | With the request above |
| A one-time code to check your email address (stored only as a hash) | Making sure trial keys go to real addresses | Until used or expired |
| Rate-limit records (email address or IP address, time) | Stopping automated sign-ups | 1 hour |
The legal basis is your request (to give you the trial or answer you) and our legitimate interest in following up on it. You can tell us at any time to stop contacting you.
2.3 When you activate a licence
| What | Why | How long |
|---|---|---|
| The licence key, your server's installation ID, its hostname and CreekX version | Checking the key, issuing and replacing the licence | While the licence exists, and 24 months after it ends |
| The IP address and country the activation came from | Spotting stolen or shared keys | As above |
| The name, company and email address the licence is for | Sending the licence and renewals | As above |
2.4 When you buy a licence
The details needed to invoice you (name, company, billing address, tax number where required), kept for as long as tax law requires (in India, at least 8 years).
3. Emails
We send: the email-check code, your trial key and how to install, licence emails, replies to your messages, and occasional follow-ups about your trial or licence. We do not send newsletters or marketing to anyone who has not asked for them. Every follow-up can be stopped by replying "stop" or writing to [email protected].
4. Who else handles your data
We do not sell or rent personal data, and we do not share it for advertising. These service providers process it for us, only to run creekx.io:
- Cloudflare (website hosting, the forms' server code and the database that holds the records in section 2). Data may be processed in Cloudflare's data centres in several countries.
- Namecheap Private Email (sending and receiving our email).
We may also disclose data where the law requires it, for example to a court or authority.
Captions, transcripts and AI-drafted titles in the CreekX product are made on your own server; CreekX sends nothing to an AI service.
5. Transfers outside India
Our service providers may process data outside India (and outside your country). We use providers with established security practices and only for the purposes above.
6. Security
Website records are kept in an access-controlled database, reachable only with an admin password; email-check codes are stored only as hashes; sign-in to the admin area is rate-limited. In the CreekX product, passwords are hashed with scrypt, stored secrets and keys are encrypted (AES-256-GCM), each workspace's data is kept apart inside the database, sign-in is rate-limited, and changes are recorded in a tamper-evident log. If a breach affects your personal data, we will tell you and the authorities as the law requires.
7. Your rights
You can ask us to:
- tell you what personal data we hold about you, and give you a copy;
- correct it, or delete it;
- stop contacting you, or withdraw a consent you gave;
- name someone to act for you if you cannot.
Write to [email protected] from the email address concerned. We answer within 30 days. If you are not satisfied, you can complain to the Data Protection Board of India, or, if you are in the EU or UK, to your data protection authority.
8. Children
creekx.io and CreekX are for businesses and adults. We do not knowingly collect data from anyone under 18. If you believe a child has sent us data, write to us and we will delete it.
9. Changes
When this policy changes, we update it here with a new effective date. If a change is significant, we will also tell people we are in contact with by email.
10. Contact
CreekX, [email protected], https://creekx.io