Privacy Policy

Effective Date: January 1, 2026

Last Updated: May 6, 2026

1. Introduction

Welcome to Creattur, operated by Creattur LLC ("Creattur," "we," "us," or "our"). This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

This policy should be read alongside our Terms of Service.

2. Information We Collect

a. Information You Provide

Account information: name, email address, username, and password
Profile content: bio text, avatar image, links, social handles, and any other content you add to your page
Payment information: billing details collected and processed by Stripe, Inc. We do not store your full card number or CVV
Bookings and communications: appointment details, messages, and related records
Digital products: files and metadata you upload for sale through the Service
Support correspondence: emails or messages you send to us

b. Information Collected Automatically

IP address and approximate geographic location
Device type, operating system, and browser type and version
Pages viewed, links clicked, and time spent on the Service
Referring URLs and exit pages
Session identifiers and cookie data

c. Information from Third Parties

If you connect a third-party account (e.g., Google, GitHub) to sign in, we receive basic profile information such as your name and email address as permitted by that service. We do not receive your third-party account password.

3. How We Use Your Information

We use the information we collect solely to provide and improve your experience on the Service. Specifically, we use your information to:

Create and manage your account
Provide, operate, and maintain the Service
Personalize your dashboard and public bio page
Process transactions and send related notices (receipts, invoices, renewal reminders)
Enable bookings, digital product sales, and email list features
Send transactional emails necessary for the Service (e.g., password resets, booking confirmations)
Send marketing and promotional communications, where you have opted in (see Section 10)
Analyze usage trends and improve the performance, features, and reliability of the Service
Detect, investigate, and prevent fraud, abuse, and security incidents
Comply with applicable legal obligations and enforce our Terms of Service

We will not use your personal information for any purpose beyond what is described in this policy without first notifying you and, where required by law, obtaining your consent. If we intend to use your data in a materially new way, we will update this policy and notify you by email or in-app notice before the change takes effect. You will have the opportunity to opt out before any such change applies to you.

3a. Creator Responsibility for Your Audience's Data

Creattur provides tools that allow you, as a creator, to collect information from your own audience — including email subscribers, booking customers, and digital product purchasers. When you use these features, you become the data controller for the personal information your audience provides to you, and Creattur acts only as a data processor on your behalf.

As the data controller, you are solely responsible for:

Complying with all applicable privacy and data protection laws in your jurisdiction and the jurisdictions of your audience, including but not limited to GDPR, CCPA, and CAN-SPAM
Having a lawful basis for collecting and using your audience's personal information
Providing your audience with adequate notice about how their data will be used
Honoring any opt-out, deletion, or access requests from your audience members
Ensuring that any use of your audience's data complies with your own privacy policy

Creattur does not access, use, or share the personal information your audience provides to you except as necessary to deliver the features you have enabled (e.g., storing email subscribers in your list, processing a booking). You agree to indemnify Creattur for any claims arising from your failure to comply with applicable data protection obligations as described in our Terms of Service.

4. Sharing Your Information

We do not sell your personal information to third parties.

We may share your information with:

Payment processors: Stripe, Inc. processes all payment transactions. Stripe's use of your payment data is governed by the Stripe Privacy Policy.
Analytics providers: We may use tools such as Google Analytics to understand how the Service is used. These providers may set their own cookies.
Email delivery services: We use providers such as SendGrid and Mailgun to deliver transactional and marketing emails on our behalf.
Cloud infrastructure: We use Amazon Web Services (AWS) for storage and hosting of user-uploaded content.
Legal and safety: We may disclose information to law enforcement, regulators, or other authorities where required by applicable law, court order, or to protect the rights, property, or safety of Creattur, our users, or others.
Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

All third-party service providers are contractually required to use your information only as necessary to provide services to us and in accordance with applicable law.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

Active accounts: We retain account data for the duration of your account
Closed accounts: We delete or anonymize personal data within 90 days of account closure, except where we are required to retain it for legal, tax, or audit purposes (typically up to 7 years for financial records)
Uploaded content: Files and digital products are deleted within 30 days of account closure unless subject to a pending dispute or legal hold
Analytics data: Aggregated, non-identifiable analytics data may be retained indefinitely

You may request deletion of your data at any time as described in Section 7.

6. Data Storage and Security

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit (TLS) and at rest
Access controls limiting data access to authorized personnel
Regular security assessments and monitoring
Secure third-party infrastructure (AWS, Neon PostgreSQL) with compliance certifications

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. If you believe your account has been compromised, please contact us immediately at support@creattur.com.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

Access: Request a copy of the personal information we hold about you
Correction: Request correction of inaccurate or incomplete information
Deletion: Request deletion of your personal information, subject to legal retention obligations
Portability: Request your data in a structured, commonly used, machine-readable format (where applicable)
Restriction: Request that we restrict processing of your data in certain circumstances
Objection: Object to our processing of your personal information where we rely on legitimate interests as our legal basis
Withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, email us at support@creattur.com. We will respond within 30 days. We may need to verify your identity before processing your request.

8. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you specific rights regarding your personal information:

Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collecting it, and the categories of third parties with whom we share it.
Right to Delete: You may request deletion of personal information we have collected, subject to certain exceptions.
Right to Opt Out of Sale: We do not sell your personal information. If this practice changes, we will update this policy and provide an opt-out mechanism.
Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a California privacy request, email us at support@creattur.com with the subject line "California Privacy Request." We will verify your identity and respond within 45 days as required by law.

9. Cookies and Tracking

We use the following categories of cookies:

Strictly necessary: Required for the Service to function (e.g., session authentication, CSRF protection). These cannot be disabled without breaking the Service.
Functional: Remember your preferences such as theme and language settings.
Analytics: Help us understand how users interact with the Service. We use tools such as Google Analytics, which may set their own cookies.

You can manage or disable non-essential cookies through your browser settings. Note that disabling cookies may affect the functionality of the Service. We do not currently respond to browser "Do Not Track" signals, as there is no industry-wide standard for interpreting them.

10. Marketing Communications

We may send you promotional emails about new features, offers, or updates if you have opted in or where permitted by applicable law. You can unsubscribe from marketing emails at any time by clicking the "Unsubscribe" link in any marketing email or by emailing us at support@creattur.com.

Opting out of marketing emails does not affect delivery of transactional emails (e.g., receipts, booking confirmations, password resets), which we send as necessary to operate the Service.

11. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete it promptly. If you believe a child under 13 has provided information to us, please contact us at support@creattur.com.

12. International Users

Creattur is a global service. Your information may be transferred to, stored, and processed in the United States or in other countries where our infrastructure and service providers operate (including AWS and Neon). Data protection laws in those countries may differ from the laws in your country of residence.

Regardless of where your data is processed, we apply the same privacy protections described in this policy. We process your personal information on the following legal bases, as applicable to your jurisdiction:

Contract performance: To provide the Service you signed up for
Legitimate interests: To operate, secure, and improve the Service
Legal obligation: To comply with applicable law
Consent: Where we rely on consent (e.g., marketing emails), you may withdraw it at any time without affecting prior processing

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland and have concerns about cross-border data transfers, please contact us at support@creattur.com.

By using the Service, you acknowledge that your information may be transferred internationally as described in this policy.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on the Service at least 14 days before the changes take effect. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Company: Creattur LLC
Email: support@creattur.com
Website: https://www.creattur.com

We aim to respond to all privacy inquiries within 30 days.