Privacy Policy

Introduction

Creatos is an AI-powered content creation platform operated by CreatorFlow ("Creatos", "we", "us", or "our"). This Privacy Policy explains how we collect, use, disclose, and protect information that identifies you or can reasonably be linked to you ("Personal Data") when you visit our websites, create an account, or use our products and services (collectively, the "Services").

Information We Collect

We may collect the following categories of Personal Data:

Information You Provide

Account and Profile Information: Name, email address, profile details, and authentication details needed to create and access your account.
Content and Workflow Data: Sources you upload or import, workflow configurations, prompts or instructions, and generated outputs.
Communications: Support requests, feedback, and other messages you send to us.
Billing Information: Subscription status and transaction identifiers. Payment card details are handled directly by our payment processor.

Information We Collect Automatically

Device and Log Data: IP address, browser type, operating system, timestamps, and similar diagnostic information.
Usage Data: Interactions with the Services (e.g., pages visited, features used, performance and error events).
Cookies and Similar Technologies: See our Cookie Policy.

Information From Third Parties

Social Login Providers: If you sign in with a third-party authentication provider, we may receive information such as your name, email address, and profile image from that provider.
Service Providers: We may receive payment status or fraud signals from service providers, such as our payment processor.

How We Use Your Information

We use your information for the following purposes:

Provide, operate, and maintain the Services (including running your workflows and generating AI outputs)
Authenticate users, secure accounts, prevent fraud, and enforce our Terms
Process subscriptions, payments, and credit usage
Provide customer support and respond to your requests
Send service-related notices and, where permitted, marketing communications
Measure, analyze, and improve the Services (including performance and reliability)
Comply with legal obligations and protect the rights and safety of Creatos, our users, and others

AI Processing and Model Providers

To provide AI features, we may send parts of your inputs (such as prompts, source content, and context) to third-party AI model providers and infrastructure partners. These providers process that data to return outputs to you. Depending on the provider and configuration, providers may retain data for limited periods for abuse monitoring and service reliability.

Where available under provider terms and settings, we configure providers to not use submitted data to train their general-purpose models. You should avoid submitting sensitive personal data unless necessary and you have a lawful basis to do so.

We may share Personal Data with:

Service Providers: Vendors that help us operate the Services (e.g., hosting, storage, email delivery, payments, analytics, error monitoring, customer support).
AI Providers: Model providers used to generate outputs when you use AI features.
Authentication Providers: When you choose social login.
Legal and Safety: Law enforcement, regulators, or others if required by law or to protect rights, safety, and property.
Business Transfers: Parties involved in a corporate transaction (e.g., merger, acquisition) subject to appropriate safeguards.
With Your Direction: When you request or consent to sharing.

Data Security

We use reasonable technical and organizational measures designed to protect Personal Data, including:

Encryption in transit (SSL/TLS) where supported
Access controls and least-privilege practices
Security monitoring and incident response processes

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Third-Party Services and Subprocessors

Creatos uses third-party service providers to help us operate and improve the Services, such as:

Payment processing
Email delivery
Authentication (including social login, if enabled)
Cloud hosting, content delivery, and infrastructure
Data storage and file processing
Analytics, performance monitoring, and error tracking (if enabled)
AI model providers and content processing

These services have their own privacy policies governing how they handle your data.

Your Rights

You have the right to:

Access your personal data
Correct inaccurate data
Delete your account and associated data
Object to or restrict certain processing (depending on your location)
Receive a copy of certain personal data (depending on your location)
Opt out of marketing communications

To exercise these rights, contact us using the details below.

Legal Bases (EEA/UK)

If you are located in the EEA/UK, we process Personal Data under the following legal bases:

Contract: To provide the Services you request
Legitimate Interests: To secure, improve, and market the Services (balanced against your rights)
Consent: For certain cookies and marketing where required
Legal Obligation: To comply with applicable laws

Data Retention

We retain Personal Data for as long as necessary to provide the Services and for legitimate business purposes, such as complying with legal obligations, resolving disputes, and enforcing our agreements. If you delete your account, we will delete or anonymize your Personal Data within a reasonable period, unless we are required or permitted to retain certain information.

Contact form: /contact

Last updated: December 13, 2025