Privacy Policy

Introduction

Welcome to Creatour ("Creatour", or the "Platform"), which includes our website, and any other features, functionalities, or services we offer now or in the future (collectively the "Services"). The Services are offered by Creatour Inc ("we", "us", or "our"). We value your privacy and are committed to protecting your personal data. This Privacy Policy ("Policy") explains how we collect, use, share, and safeguard your personal information when you access or use the Services, including any site or platform that links to this Policy.

1. What Information We Collect

We may collect the following information from and about you, including information that you provide, information collected automatically, and information from other sources.

Information You Provide

When you interact with our Services, you may provide certain personal information voluntarily, including:

• Registration Information: When you create an account, we may collect your email address, name, and profile image. We currently support email one-time passcode sign-in and Google sign-in. We do not require a password for email sign-in.
• User Content: We collect the content you create, upload, generate, or otherwise make available through the Services. This may include photos, text prompts, chat messages, design edits, generated images, product customizations, and other materials you share while using our AI design tools.
• Payment Information: When you purchase products, credits, or a subscription, we use a third-party payment processor (Stripe) to handle the transaction. Stripe may collect your card details or other financial information. We do not store your full payment card numbers, but we may retain transaction records needed for billing, accounting, and compliance.
• Order and Shipping Information: If you place an order for a physical product, we collect the details needed to fulfill and deliver it, such as your full name, shipping address, phone number, and any gift or delivery notes you choose to provide.
• Correspondence Information: When you contact us for support, feedback, or inquiries—whether by email, chat, or another channel—we collect the information you choose to share, including the content of your messages.
• Surveys and Promotions: With your consent, we may collect information when you join surveys, research studies, promotions, marketing campaigns, or events that we organize or sponsor.

Information We Collect Automatically

When you use the Services, including when you browse without creating an account, we automatically collect certain information about your device and activity. This may include:

• Technical and device information: IP address, browser type, user agent, time zone, device identifiers, operating system, network type, and screen resolution.
• Usage information: Pages or content you view, feature interactions, search queries, clicks, navigation paths, access times, and referring URLs.
• Location Information: We may infer a general geographic area (such as country, region, or city) from your IP address or similar network signals. We use this to help protect your account, apply regional settings, meet geo-based legal requirements, and improve the Services. We do not collect precise GPS location.
• Cookies and Similar Technologies: We use cookies, session tokens, and similar technologies to keep you signed in, remember preferences, operate the Services, understand how the site is used, measure advertising, and help prevent abuse. We also use Cloudflare Turnstile to distinguish people from automated traffic. Essential cookies needed for sign-in and basic functionality cannot be disabled. The categories we use, and how to control them, are described in our Cookie Policy.

Information From Other Sources

If you sign in with a third-party account such as Google, we may receive information from that provider, including your name, email address, profile image, and any other details you authorize it to share with us. We may also share limited information with that provider as needed to complete authentication.

2. How We Use Your Information

We use your information to operate, provide, support, and administer the Platform and Services, enable their features, secure your account, and fulfill our agreements with you. In particular, we use personal information to:

• Create and manage your account, and verify that you may use the Services.
• Provide AI design tools, generate or refine product designs from your photos and prompts, and show you the results you request.
• Process product orders, subscriptions, credits, refunds, and related billing.
• Manufacture and ship custom products, and communicate order or delivery updates.
• Send service notices, respond to support requests, and provide customer care.
• Analyze usage, troubleshoot issues, test features, and improve the Platform.
• Detect, investigate, and help prevent fraud, abuse, and unauthorized access.
• Enforce our policies, protect our rights and users, and meet legal obligations.
• Use your information for additional purposes disclosed at the time of collection, with your consent, or as otherwise permitted by law.

Where the GDPR or other data protection laws apply, we rely on one or more of the following legal bases:

• (a) Contract. We process personal information as needed to provide the Services you request—such as creating your account, running AI generation, processing payments, and fulfilling orders.
• (b) Consent. We rely on consent where required or for optional features, such as marketing emails or surveys. You may withdraw consent at any time. Withdrawal does not affect processing that already occurred.
• (c) Legal Obligations. We process personal information to comply with tax, accounting, fraud-prevention, and other legal requirements, and to respond to lawful requests.
• (d) Legitimate Interests. We process personal information to secure the Platform, prevent abuse, improve the Services, understand usage, and support internal analytics, provided those interests are not overridden by your rights.
• (e) Vital Interests (infrequent). In rare cases, we may process personal information to protect someone from serious harm.
• (f) Legal Claims. We may process relevant information to establish, exercise, or defend legal claims.

We may also aggregate or de-identify personal information so that it can no longer reasonably identify you, and use that information to analyze trends, improve features, and conduct research.

3. How We Share Your Information

We do not sell your personal information. We may share it with third parties for the purposes described in this Policy and as permitted by law.

Service Providers and Business Partners

We work with trusted vendors who help us operate, improve, and support the Services. These may include:

• Payment processors that handle transactions securely;
• Hosting, database, storage, and cloud providers that run our infrastructure;
• AI model and generation providers that process prompts, images, and related inputs you submit in order to create designs;
• Manufacturing and shipping partners that fulfill physical product orders;
• Security, authentication, and bot-protection providers; and
• Analytics or measurement providers that help us understand how the Services perform.

These parties may process data only as needed to provide their services to us, and we require them to protect the information they receive.

Our Corporate Group

We may share information with subsidiaries, parent entities, or affiliates under common control so we can operate the Services, improve products, and support internal reporting. If those entities are outside your country, we apply the safeguards described under International Data Transfers.

Legal and Compliance Obligations

We may disclose your information to law enforcement, regulators, courts, or other third parties when we believe in good faith that disclosure is necessary to:

• Comply with applicable law, legal process, or a lawful request;
• Enforce our terms and investigate potential violations;
• Detect, prevent, or address fraud, security, or technical issues;
• Protect the rights, property, or safety of Creatour, our users, or the public;
• Establish, exercise, or defend legal claims.

Sale or Merger

Your information may be shared or transferred in connection with a merger, acquisition, financing, reorganization, or sale of assets. If that happens, we will require the recipient to honor this Policy or provide equivalent protection.

With Your Consent

We may share your information for other purposes if you consent or ask us to do so. Where required by law, we will obtain your explicit consent first.

International Data Transfers

The personal information we collect may be stored and processed on servers outside the country where you live. We currently store data on secure servers in the United States and may also work with service providers in other countries. When we transfer personal information across borders, we do so in line with applicable data protection laws and put appropriate safeguards in place.

If you access the Services from the EEA, United Kingdom, or Switzerland and your information is transferred to a country that has not been recognized as providing an adequate level of protection, we use approved transfer tools where required, such as the European Commission's Standard Contractual Clauses (and the UK Addendum or other approved mechanisms, as applicable), together with technical and organizational measures designed to protect your data.

4. Your Rights and Choices

You can view and update much of your account information by signing in. Depending on your location and applicable law, you may also have the following rights:

• Access and Confirmation. Request confirmation of whether we process your personal information and obtain a copy of the data we hold about you.
• Rectification. Ask us to correct inaccurate or incomplete personal information.
• Erasure ("Right to be Forgotten"). Request deletion of your personal information, subject to legal or contractual obligations such as completed orders or tax records.
• Restriction of Processing. Ask us to limit how we process your personal information in certain situations.
• Data Portability. Where technically feasible, request a copy of your personal information in a structured, commonly used, machine-readable format.
• Withdrawal of Consent. Where processing is based on consent, withdraw it at any time. This will not affect processing that occurred before withdrawal.
• Opt-Out of Sales and Targeted Advertising (U.S. Residents). If U.S. state privacy laws such as the CCPA/CPRA apply to you, you may have the right to opt out of the sale or sharing of personal information, or its use for cross-context behavioral advertising. We do not sell personal information.
• Objection to Processing. In some cases, you may object to our processing, including for direct marketing.
• Complaints. You may lodge a complaint with your local data protection authority if you believe your privacy rights have been violated.

To exercise these rights, contact us at support@creatour.ai. We will respond in accordance with applicable laws after verifying your identity.

5. Data Security

We take reasonable technical and organizational measures to help protect personal data from unauthorized access, use, disclosure, alteration, and destruction. These measures include encryption in transit, access controls, and regular reviews of our systems. Transmission of information over the internet is not completely secure, and we cannot guarantee the security of information sent through the Services.

Please keep your account credentials and email access secure, and do not share one-time passcodes or sign-in links with anyone.

6. Data Retention

We retain personal information only as long as needed for the purposes described in this Policy, including providing the Services, fulfilling orders, maintaining your account, and meeting legal, tax, and accounting obligations. After you delete your account, we generally delete or anonymize account information within 30 days, unless a longer period is required to complete an order, resolve a dispute, or comply with law.

After you stop using the Services, we may keep information in an aggregated or anonymized form. We may also retain information as reasonably necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

7. Information Relating to Minors

The Services are not directed at children under the age of 13 (or the equivalent minimum age in the relevant jurisdiction). We do not knowingly collect personal information from children under that age. If you believe we have collected information from a child, please contact us at support@creatour.ai and we will take appropriate steps to delete it.

8. Privacy Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you through the Services or by other reasonable means. The "Last Updated" date at the top of this Policy shows when the changes take effect.

We encourage you to review this Policy periodically. By continuing to access or use the Services after an updated Policy takes effect, you agree to the revised terms. If you do not agree, you should stop using the Services.

9. Contact Us

If you have questions or concerns about this Policy or our privacy practices, please contact us at support@creatour.ai. We aim to respond to privacy requests within 15 days after verifying your identity. Complex requests may take longer or require additional information.

Please contact us first if you believe we have processed your personal information in a way that is inconsistent with this Policy or applicable law. This does not affect your right to lodge a complaint with your local data protection authority, or to pursue other remedies available under applicable law.