Creata

Draft for legal review

Privacy Policy

Effective date: [EFFECTIVE DATE]

This draft describes processing identifiable in Creata’s current application source. The controller’s legal name, address, privacy contact, actual retention periods, subprocessors, and deployment settings must be confirmed before publication. It is not a claim of legal compliance.

Information processed

  • Account email and authentication identifiers managed through Supabase.
  • Subscription, payment status, plan, and transaction references processed through Supabase and Paystack. Do not enter full card details in Creata; confirm Paystack’s hosted payment handling and data roles.
  • Search queries and public profile content returned from platform search integrations (Scrape Creators); website data may be retrieved by the optional Firecrawl integration.
  • Search and lead records, saved notes, and public contact details you choose to save.
  • When signup geolocation is enabled: country is looked up through ipapi.co from a public IP; the selected currency and optional salted IP hash are stored. Raw IP storage is not intended. Confirm proxy configuration, vendor terms, and retention before launch.
  • AI-assisted search sends the query and selected onboarding context (role, business type, industry, offer, ideal customer, target regions, and goal) to OpenRouter when available. Search results and profile evidence are also sent to OpenRouter for relevance evaluation. [CONFIRM MODEL, RETENTION, TRAINING USE, AND PROCESSING REGION.]
  • Onboarding answers about your role, business, offer, target audience, goals, and acquisition source, if you choose to provide them.
  • Cookie choices as described in the Cookie Policy.

Why and how long

Data is used to operate accounts, search and organize leads, provide requested AI-assisted features, administer plans, process payments, and protect the service. Specific retention schedules are not present in the reviewed source: [ADD RETENTION PERIODS FOR ACCOUNTS, LEADS, LOGS, PAYMENTS, AND BACKUPS]. Retention by payment, hosting, AI, search, and geolocation vendors is governed by their terms and settings and must be checked.

Public information and responsible use

Search features may retrieve information made publicly available on third-party platforms and websites. Availability does not establish accuracy, permission for every use, or an endorsement by Creata. You are responsible for complying with platform terms, privacy, marketing, and scraping rules that apply to your use. Creata does not authorize bypassing access controls.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal data, and to withdraw consent. Contact [PRIVACY CONTACT EMAIL] to make a request. We may need to verify your request. You may also contact the relevant data protection authority. Requests and rights are handled subject to applicable law.

Processor/vendor list and countries of processing: [CONFIRM SUPABASE, PAYSTACK, OPENROUTER, SCRAPE CREATORS, FIRECRAWL, HOSTING, AND TRANSFER DETAILS]. Questions: [CONTROLLER NAME, ADDRESS, AND CONTACT EMAIL].