Privacy policy
Last updated: 4 April 2026
1. Introduction
CreazaApp (“we”, “us”, “the platform”) operates the website creazaapp.com and its related services. This policy describes how we collect, use, store and protect your personal data, in line with the General Data Protection Regulation (GDPR) and applicable Romanian law.
2. Data we collect
We collect the following categories of personal data:
- Account data — your email address, display name and avatar (given directly or through Google or GitHub sign-in).
- Usage data — the projects you create, your conversations with the AI agent, credit consumption and transaction history.
- Technical data — IP address, browser type, operating system, pages visited and session length (collected automatically through cookies and similar technologies).
- Payment data — processed exclusively by our payment provider. We do not store your card details on our servers.
3. Why we process your data
We use your data to:
- Provide and improve the CreazaApp services
- Manage your account and your credits
- Process payments and issue invoices
- Communicate with you (technical support, important notices)
- Prevent fraud and keep the platform secure
- Meet our legal obligations
4. Legal basis for processing
We process your data on the following legal grounds:
- Performance of a contract — to provide the services you asked for.
- Consent — for non-essential cookies and marketing communications.
- Legitimate interest — to improve the platform and prevent fraud.
- Legal obligation — to comply with tax law and applicable regulations.
5. Sharing your data
We do not sell your personal data. We may share data with:
- Service providers — companies that help us run the platform (hosting, authentication, payment processing, AI services). These providers process the data solely on our behalf and under data processing agreements (DPAs).
- Authorities — when we are legally required to disclose information.
6. International data transfers
Some service providers may process data outside the European Economic Area (EEA). In those cases we make sure the transfer is protected by standard contractual clauses approved by the European Commission, or by another adequate transfer mechanism.
7. Data storage and security
Your data is stored on secure servers, encrypted in transit (TLS) and at rest. We keep your account data for as long as the account is active. Data from deleted projects is permanently removed after 48 hours. You can request full deletion of your account at any time.
8. Your rights (GDPR)
Under the GDPR, you have the following rights:
- Right of access — you can request a copy of your personal data.
- Right to rectification — you can correct inaccurate or incomplete data.
- Right to erasure — you can request deletion of your data (the “right to be forgotten”).
- Right to restriction — you can limit processing of your data in certain circumstances.
- Right to portability — you can receive your data in a structured, commonly used format.
- Right to object — you can object to processing based on legitimate interest.
- Right to withdraw consent — at any time, without affecting the lawfulness of earlier processing.
To exercise these rights, write to us at contact@creazaapp.com. We reply within 30 days at the latest.
9. Cookies
We use cookies to run the platform and to analyse how it is used. For full details, see the Cookie policy.
10. Children
CreazaApp is not intended for people under 16. We do not knowingly collect personal data from children below that age. If we find out that we have, we delete it immediately.
11. Changes to this policy
We reserve the right to update this policy. Significant changes will be announced by email or by a notice on the platform. Continuing to use the Service after a change means you accept the new version.
12. Contact
For any questions about your personal data or this policy:
Email: contact@creazaapp.com
Website: creazaapp.com
If you believe we handle your data improperly, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Bucharest, Romania.