Legal

Privacy Policy

Last updated: April 24, 2026

1. Information We Collect

Account information: When you register, we collect your name, email address, and profile picture (if you sign in with Google). Payment information is processed securely by Stripe and is never stored on our servers.

Usage data: We collect information about how you use the Service, including generation prompts, feature interactions, and session data. This helps us improve the product and provide support.

Uploaded content: If you upload reference images or brand assets, we store them securely to provide the Service. These are associated with your account and not shared with other users.

2. How We Use Your Information

To provide and maintain the Service, including processing your generation requests, managing your account, and delivering purchased features.

To communicate with you about your account, including transactional emails (signup confirmation, password resets, billing receipts) and, with your consent, product updates.

To improve the Service through aggregated, anonymized usage analytics. We do not use your prompts, generated content, or uploaded images to train AI models.

3. Third-Party Services

We use the following third-party services to operate CreatorAssets.ai:

Supabase — Authentication, database, and file storage. Your account data and uploaded assets are stored in Supabase infrastructure.

Stripe — Payment processing. Stripe handles all credit card and payment information under their own privacy policy. We receive only a transaction reference and billing status.

Google (OAuth) — If you choose to sign in with Google, we receive your name, email, and profile picture from your Google account. We do not access any other Google data.

AI model providers (Google Gemini, OpenAI) — Your generation prompts are sent to AI providers to produce visual content. These providers may process your prompts under their respective data policies, but we do not send personally identifiable information with generation requests.

4. Data Storage & Security

Your data is stored on secure, encrypted infrastructure. We use industry-standard security measures including HTTPS encryption in transit, encrypted storage at rest, and role-based access controls.

Access to user data is restricted to authorized personnel who need it to operate and improve the Service. We conduct regular security reviews of our systems.

While we strive to protect your data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials.

5. Your Rights

Access & export: You can view and download your generated content and brand profiles at any time through the dashboard.

Correction: You can update your account information, brand profiles, and other personal data through the dashboard settings.

Deletion: You may request deletion of your account and associated data by contacting us at support@creatorassets.ai. We will process deletion requests within 30 days, subject to legal retention requirements.

If you are located in the European Economic Area (EEA), you have additional rights under GDPR, including the right to data portability and the right to object to processing. Contact us to exercise these rights.

6. Cookies & Analytics

We use essential cookies to maintain your authentication session and preferences. These are necessary for the Service to function and cannot be disabled.

We may use anonymized analytics to understand how the Service is used in aggregate. We do not use third-party advertising cookies or tracking pixels.

7. Data Retention

We retain your account data and generated content for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law (e.g., billing records).

Anonymized, aggregated usage data that cannot be linked back to you may be retained indefinitely for product improvement purposes.

8. Children's Privacy

The Service is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify registered users of material changes via email at least 14 days before they take effect.

Your continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this Privacy Policy or want to exercise your data rights, contact us at support@creatorassets.ai.

Questions about your data? Contact us