Privacy Policy

Cre8so ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

1. Information We Collect

Account information: When you register, we collect your name, email address, and a hashed password. Creators also provide a PayPal email for payouts.

Purchase information: When you buy a product, we store your order details including the products purchased, amounts paid, and transaction IDs from PayPal. We do not store credit card numbers.

Usage data: We collect basic analytics such as pages visited, products viewed, and download events. This data is aggregated and used to improve the Platform.

Download logs: For fraud prevention and audit purposes, we log each download with a timestamp and anonymized IP address.

Communications: If you contact us, we keep records of your messages to provide support and improve our service.

2. How We Use Your Information

• To operate and improve the Platform
• To process your purchases and facilitate creator payouts
• To send transactional emails (receipts, download links, payout confirmations)
• To detect and prevent fraud and abuse
• To respond to support requests
• To send platform updates and announcements (you can opt out)

3. Sharing Your Information

We do not sell your personal data. We share data only in these circumstances:

• Service providers: Supabase (database and file storage), Resend (email), PayPal (payment processing), Vercel (hosting). These providers process data on our behalf and are bound by their own privacy policies.
• Legal requirements: We may disclose data if required by law, court order, or to protect the rights and safety of Cre8so and its users.
• Creator earnings data: Creators can see their own sales data. We do not share buyer identities with creators.

4. Data Retention

We retain account data for as long as your account is active. If you close your account, we delete personal data within 30 days, except where retention is required for legal or financial compliance (e.g., transaction records, which we retain for 7 years).

5. Cookies

We use essential cookies for authentication (session management) and basic analytics. We do not use advertising or tracking cookies. You can disable cookies in your browser, but this may affect your ability to log in.

6. Your Rights

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Opt out of non-essential communications
• Export your data in a portable format

To exercise any of these rights, email hello@cre8so.com.

7. Security

We use industry-standard security practices including encrypted connections (HTTPS), bcrypt password hashing, and signed time-limited URLs for file downloads. No system is perfectly secure — if you believe there is a security vulnerability, please report it to support@cre8so.com.

8. Children

Cre8so is not intended for users under 16. We do not knowingly collect data from children. If you believe a child under 16 has created an account, contact us and we will delete it.

9. Changes

We may update this policy. Material changes will be communicated by email. Continued use after changes take effect constitutes acceptance.

10. Contact

Privacy questions: hello@cre8so.com