Scope and who we are
This Privacy Policy explains how CREVOZA collects, uses, shares, and protects information when you use our websites, mobile applications, APIs, and creative tools (together, the “Services”).
CREVOZA is the controller of personal information covered by this policy unless a different notice is provided. Questions and privacy requests can be sent to support@usecrevoza.com.
Information we collect
We may collect the following categories of information:
- Account information: name, email address, profile image, authentication identifiers, preferences, and account status.
- Content and files: prompts, text, images, documents, audio, instructions, generated results, and associated metadata that you submit to or create with the Services.
- Transaction information: plan, credit purchases, currency, payment status, provider references, and receipts. Our payment providers process full card or store-payment credentials; CREVOZA does not store full card numbers.
- Usage and device information: feature activity, job status, approximate location derived from IP address, browser, device, diagnostic, security, and performance data.
- Communications: messages and support requests you send to us and your email notification preferences.
How we use information
We use information to:
- create and secure your account and authenticate sessions;
- process creative jobs and deliver, store, and organize results;
- operate trials, credits, subscriptions, purchases, and receipts;
- provide support and send service or transactional messages;
- detect abuse, fraud, security incidents, and policy violations;
- monitor reliability and improve the Services; and
- comply with legal, tax, accounting, and regulatory obligations.
Depending on where you live, we rely on performance of our contract, legitimate interests, consent, and compliance with legal obligations as the applicable legal bases for processing.
AI and content processing
When you use an AI, OCR, image, document, or audio feature, the content needed to complete that request may be sent to the provider that performs the selected operation. Do not submit confidential, regulated, or personal information that you are not authorized to process.
We use provider settings intended to limit retention or model training where they are available and appropriate, but provider handling is also governed by the applicable provider terms and privacy commitments. Automated outputs may be inaccurate and should be reviewed before use.
Service providers and transfers
We use specialist providers to operate CREVOZA. Depending on the feature and platform, these may include Clerk for authentication; AWS and Neon for infrastructure and databases; Cloudflare R2 and Cloudinary for file processing or delivery; OpenAI, Google, and other model providers for creative processing; Paystack and RevenueCat for payments; Resend for email; and Sentry or PostHog for optional diagnostics and analytics.
These providers process information for the services they supply and may operate in countries outside yours. Where required, we use contracts and lawful transfer safeguards. We may also disclose information when required by law, to protect users or the Services, or as part of a merger, financing, acquisition, or sale of assets. We do not sell your personal information.
Cookies and analytics
We use necessary cookies and similar technologies for sign-in, security, preferences, and core functionality. If optional analytics or session tools are enabled, they help us understand performance and product usage. Where required, optional technologies are used only after consent.
You can control cookies through your browser and any consent controls we provide. Blocking necessary cookies may prevent authentication or other parts of the Services from working.
Retention and deletion
We retain account and transaction records for as long as needed to provide the Services and meet security, accounting, tax, dispute, and legal obligations. Creative files and generated assets are retained according to the applicable plan, storage quota, and deletion or expiry settings shown in the product.
When information is deleted, it may remain temporarily in protected backups or logs until those systems rotate. We may retain de-identified or aggregated information that cannot reasonably identify you.
Security
We use administrative, technical, and organizational safeguards designed to protect information, including access controls, encrypted transport, restricted production permissions, monitoring, and credential-management practices. No online service can guarantee absolute security, so keep your account credentials confidential and contact us promptly if you suspect unauthorized access.
Your rights and choices
Depending on your location, including under Nigerian and other applicable data-protection laws, you may have rights to access, correct, delete, restrict, or object to processing; withdraw consent; request portability; or complain to a data-protection authority.
You may update available account details in the product or email support@usecrevoza.com. We may verify your identity before completing a request. You can unsubscribe from marketing messages without disabling essential account or transaction messages.
Children
The Services are not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided information to us, contact us so we can investigate and delete it where appropriate.
Changes and contact
We may update this policy as the Services or legal requirements change. We will post the revised version here, update its effective date, and provide additional notice when required.
For questions, complaints, or privacy requests, email support@usecrevoza.com.