PRIVACY POLICY

This Privacy Policy explains how Creeto AI ("we", "us", or "our") handles the personal information you provide when you sign up for the Creeto AI waitlist at creeto.ai/waitlist. It applies only to the waitlist — not to the Creeto AI product or any other services.

By submitting the waitlist form you agree to the practices described here. If you do not agree, please do not submit the form.

When you submit the waitlist form we collect the following:

• Identity: Full name and email address.
• Location: Country of residence (selected from a list).
• Use case: Whether you intend to use Creeto AI personally or for a business. Business users also provide team size and annual revenue range.
• Professional context: Your role, the types of content you create, how often you publish videos, and the platforms you publish on.
• Marketing consent: Whether you opt in to receive product updates and announcements from us.
• IP address: Recorded automatically at the time of submission for anti-fraud and duplicate-submission prevention. It is not displayed to you or shared externally.

We do not collect payment information, government-issued identifiers, health data, or any data from children under 13. If you are under 13, do not submit this form.

We use the information you provide to:

• Determine your place on the waitlist and notify you when early access opens.
• Personalise your onboarding experience when you are granted access — for example, to default settings that match your role or use case.
• Send you a confirmation email at the address you provided immediately after you join.
• Send product updates, early access announcements, and occasional tips, if you gave marketing consent when you signed up.
• Detect and prevent duplicate or fraudulent submissions using your IP address.
• Understand the aggregate profile of our waitlist (e.g. which industries or roles are most represented) to inform our product roadmap. This analysis uses aggregated, non-identifiable data only.

We do not use your information for automated decision-making or profiling.

We do not sell, rent, or trade your personal information. We share it only with the following service providers, strictly to operate the waitlist:

• Supabase — our database provider. Your waitlist entry is stored securely on Supabase infrastructure. Supabase processes data in accordance with its own privacy policy and GDPR Data Processing Agreement.
• Resend — our transactional email provider. Your name and email address are passed to Resend solely to deliver the confirmation email. Resend does not use this information for its own marketing purposes.

We may disclose your information if required by law, a court order, or a government authority, or where necessary to protect our legal rights.

We retain your waitlist entry for as long as is necessary to manage early access invitations. Once early access for your cohort is complete, or if you request deletion, we will remove your personal data within 30 days.

IP addresses collected for anti-fraud purposes are retained for the same period as your waitlist entry and deleted alongside it.

If you are granted access to Creeto AI, your data transitions to the main product privacy policy, which will be made available at that time.

We will only send you marketing emails if you checked the opt-in box when submitting the form. The confirmation email is sent regardless of your marketing preference — it is a transactional message confirming your waitlist spot.

You can withdraw your marketing consent at any time by emailing us at support@creetoai.com with the subject line "Unsubscribe". We will process your request within 5 business days.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the information we hold about you.
• Correction: Ask us to correct inaccurate or incomplete information.
• Deletion: Ask us to delete your waitlist entry and all associated personal data.
• Restriction: Ask us to stop processing your data while a correction or objection is pending.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interest.

To exercise any of these rights, email support@creetoai.com. We will respond within 30 days. We may ask you to verify your identity before processing a request.

[⚠ Legal review recommended: If you serve EU/EEA users, GDPR applies and you may need a Data Protection Officer and formal data subject request process. For California residents, CCPA rights apply.]

We take reasonable technical and organisational measures to protect your information against unauthorised access, loss, or misuse. These include encrypted data transmission (HTTPS), access controls, and using reputable third-party infrastructure providers.

No system is completely secure. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

We may update this policy as our practices change or as required by law. When we make material changes, we will update the "Last updated" date at the top of this page. If you are on the waitlist at the time of a material change, we will notify you by email.

For any questions, requests, or concerns about this policy or how we handle your data, contact us at:

Creeto AI
support@creetoai.com