Legal

Privacy Policy

Your privacy matters. This policy explains what we collect, why we collect it, and how you control your information across Creō.

Last updated: December 20, 2025

Information we collect

We collect the minimum data needed to operate the platform and provide secure, creator-first services.

  • Account data (name, email, password hash, and profile details).
  • Content you create or upload (projects, portfolios, media metadata).
  • Usage data (feature interactions, device/browser information, IP address).
  • Payments data for paid plans (handled by payment partners, not stored by us).

How we use your data

  • Provide and secure your account, sessions, and authentication.
  • Deliver collaboration features, messaging, and portfolio hosting.
  • Improve product quality, reliability, and accessibility.
  • Communicate updates, security notices, and support responses.

How we share information

We do not sell personal data. We share information only when necessary to operate Creō or comply with legal obligations.

  • Service providers for hosting, analytics, and customer support.
  • Federated ActivityPub connections when you opt into federation.
  • Legal requests when required by law or to protect our users.

Retention

We retain data as long as your account remains active or as needed to comply with legal and operational requirements. You can request deletion in Settings → Data & Privacy, and we will process it in accordance with applicable laws.

Deletion requests are processed asynchronously across services. We surface real-time status updates in your settings so you can track the request. Some records may be retained for limited periods when required for billing, security, or legal obligations, and then removed once those requirements expire.

Your choices

  • Update profile data and privacy controls in your settings.
  • Opt out of non-essential communications.
  • Request a copy or deletion of your data.
  • Track deletion status in Settings → Data & Privacy.

Security

We use industry-standard security practices, including encryption in transit, access controls, and regular monitoring. No system is 100% secure, but we work continuously to protect your data.

Contact

Questions about privacy? Email us at legal@creo.app or visit the support center for help with data requests.