Kre8ivLabs (“we,” “our,” or “us”) operates the kre8ivlabs.ai website and platform. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our services.

1. Information we collect

We collect information you provide directly:

• Account registration details (name, email, company)
• Brand assets you upload (logos, color values, font selections)
• Project data (sitemaps, page content, design configurations)
• Payment information processed through Stripe

We collect information automatically:

• Usage analytics (pages visited, features used, session duration)
• Device and browser information
• IP addresses and approximate location
• AI generation logs (input/output token counts, latency, cost per request)

2. How we use your information

We use your information to:

• Provide, maintain, and improve our services
• Generate AI-powered website content tailored to your brand
• Process payments and manage subscriptions
• Send transactional communications about your account and projects
• Analyze usage patterns to improve the platform
• Protect against fraud, abuse, and security threats

3. AI-generated content

When you use our AI content generation features, your brand tokens (colors, fonts, tone, industry) and edit instructions are sent to third-party AI providers (Anthropic) to generate website content. We do not use your brand data or generated content to train AI models. Your content remains your intellectual property.

4. Data storage and security

Your data is stored in Supabase (PostgreSQL) with Row Level Security ensuring users can only access their own organization's data. Sensitive credentials are managed through Google Cloud Secret Manager and are never stored in source code or environment variables. All data is encrypted in transit (TLS) and at rest.

5. Information sharing

We do not sell your personal information. We share data only with:

• Stripe for payment processing
• Anthropic for AI content generation
• Google Cloud for infrastructure hosting
• Analytics providers for usage insights

All third-party providers are bound by data processing agreements.

6. Your rights

You have the right to:

• Access, correct, or delete your personal data
• Export your project data and generated content
• Opt out of non-essential communications
• Request information about how your data is processed
• Close your account at any time

7. Data retention

We retain your account and project data for as long as your account is active. If you cancel your account, we retain data for 30 days to allow for reactivation, then permanently delete it. AI generation logs are retained for 90 days for billing and quality analysis, then anonymized.

8. Cookies

We use essential cookies for authentication and session management. We use analytics cookies (which you can opt out of) to understand how the platform is used. We do not use advertising or tracking cookies.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on our website. Continued use of our services after changes constitutes acceptance of the updated policy.

10. Contact us

For privacy-related questions or requests, contact us at hello@kre8ivlabs.ai.