Who We Are
Kreato ("we," "our," or "us") is an AI-powered creative commerce platform designed for independent sellers, print-on-demand creators, and Etsy shop owners in India and beyond.
This Privacy Policy explains how Kreato collects, uses, stores, and protects your personal information when you use our website and services. By using Kreato, you agree to the practices described in this policy.
Kreato operates under the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
Information We Collect
We collect only the information necessary to provide and improve our services:
Account Data
- Name and email address
- One-way hashed passwords
- Plan type and billing details
Usage Data
- Product images uploaded
- AI outputs (titles, tags, etc)
- Shop profiles and preferences
How We Use Your Data
We use your information strictly to operate and improve Kreato:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| AI Content Generation | Images, Profile | Contract |
| Authentication | Email, Password | Contract |
| Platform Security | IP, Usage Logs | Legitimate Interest |
API Keys & Third-Party AI
Kreato integrates with third-party AI services. Here is exactly how API keys are handled:
If you provide your own API key, it is encrypted at rest using AES-256-GCM. It is used only to make API calls on your behalf and is never used to train models. Note: Daily usage is still counted against the Beta quota for analytics and anti-abuse purposes.
We recommend reviewing the privacy policies of our AI providers:
Data Sharing
We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:
- AI Providers: Anthropic and Google to process your AI requests.
- Infrastructure: We use Vercel for hosting and Clerk for authentication.
- Legal: To comply with law or protect rights and safety.
Data Retention
| Data Type | Retention Period |
|---|---|
| Account Data | Duration of account + 30 days |
| Project History | 24 hours (Free Beta) / Until user deletion (Pro) |
| Payment Records | 7 years (Indian Law) |
Security
We take industry-standard measures to protect your information:
- All data is encrypted via TLS/HTTPS during transmission.
- Passwords are hashed — we cannot retrieve your original password.
- API keys are handled in memory and never stored in plain text.
No system is 100% secure. If you suspect a breach, please contact us immediately.
Your Rights
Request a copy of the data we hold.
Ask us to correct inaccurate data.
Request your account and data deletion.
Request your data in machine-readable format.
Cookies
Essential Cookies Only
Kreato uses minimal cookies for authentication and session management. We do not use advertising or tracking cookies.
Children's Privacy
Kreato is not intended for children under 13. We do not knowingly collect personal data from children under 13. Users between 13 and 18 should use the platform only with parent/guardian supervision.
Policy Updates
Staying Informed
We update this policy as our practices or legal requirements change. Material changes will be notified via email or a prominent notice on the dashboard. Your continued use after updates constitutes acceptance.