This Privacy Policy describes how Creativox collects, uses, stores, and shares information when you use our website and application. Creativox is operated from Colombia, and the processing of personal data is subject to Colombian data protection law (Law 1581 of 2012 and its regulations) in addition to the protections described below.
1. Information we collect
- Account data: name, email, authentication identifiers, workspace membership, and profile settings managed through our identity provider.
- Billing data: subscription status, plan tier, credit balance, and payment-related metadata processed by our billing provider (we do not store full payment card numbers on Creativox servers).
- Generation data: prompts, model selections, generation parameters, outputs, and related metadata needed to run and display AI workflows.
- Storage data: uploaded product images, generated assets, and library metadata stored in object storage.
- Email data: transactional messages such as account notices, billing events, and product communications sent through our email provider.
- Telemetry data: error reports, performance signals, and diagnostic events collected to maintain reliability and security.
2. How we use information
We use personal data to provide and improve the service, authenticate users, process billing and credits, deliver transactional email, store and retrieve user content, monitor errors, prevent abuse, and comply with legal obligations.
3. Subprocessors
We use third-party providers to operate Creativox. See our Subprocessors page for vendor names, purposes, and links to their privacy policies.
4. Retention
We retain account, billing, generation, storage, email, and telemetry data for as long as needed to provide the service, meet legal obligations, resolve disputes, and enforce our agreements. When you delete your account, personal data is deleted or anonymized in our active systems and stored assets are queued for purge from object storage; residual copies in encrypted backups and operational logs are removed on a rolling basis as those backups and logs expire.
5. Security
We apply administrative, technical, and organizational measures appropriate to the nature of the data we process, including access controls, encryption in transit, and monitoring.
6. Your choices and rights
Depending on your location, you may have rights to access, correct, delete, or export personal data under the GDPR, Colombian habeas data law (Law 1581 of 2012), or similar laws. You can exercise the core rights directly in the product: you can export a copy of your personal data (via your account settings, backed by the GET /api/v1/me/export endpoint) and permanently delete your account and associated data (via your account settings, backed by the DELETE /api/v1/me endpoint). For any other request — correction, restriction, objection, or complaints — contact us at support@creativox.jnegrete.dev. Colombian users may also file complaints with the Superintendencia de Industria y Comercio (SIC).
7. International transfers
Data may be processed in countries where we or our subprocessors operate, primarily the United States, the European Union, and Colombia (see the Subprocessors page for per-vendor regions). Where required, we rely on the safeguards offered by our subprocessors — such as data processing agreements and standard contractual clauses — and on the transfer rules of Colombian Law 1581 of 2012 for data originating in Colombia.
8. Contact
Privacy inquiries may be sent to support@creativox.jnegrete.dev.