Scope and who we are
This Privacy Policy explains how CREVOZA collects, uses, shares, and protects information when you use our websites, mobile applications, APIs, and creative tools (together, the “Services”).
CREVOZA is the controller of personal information covered by this policy unless a different notice is provided. Questions and privacy requests can be submitted through our Support page.
Information we collect
We may collect the following categories of information:
- Account information: name, email address, profile image, authentication identifiers, preferences, and account status.
- Content and files: prompts, text, images, documents, audio, instructions, generated results, and associated metadata that you submit to or create with the Services.
- Transaction information: plan, credit purchases, currency, payment status, provider references, and receipts. Our payment providers process full card or store-payment credentials; CREVOZA does not store full card numbers.
- Usage and device information: feature activity, job status, approximate location derived from IP address, browser, device, diagnostic, security, and performance data.
- Communications: messages and support requests you send to us and your email notification preferences.
How we use information
We use information to:
- create and secure your account and authenticate sessions;
- process creative jobs and deliver, store, and organize results;
- operate trials, credits, subscriptions, purchases, and receipts;
- provide support and send service or transactional messages;
- detect abuse, fraud, security incidents, and policy violations;
- monitor reliability and improve the Services; and
- comply with legal, tax, accounting, and regulatory obligations.
Depending on where you live, we rely on performance of our contract, legitimate interests, consent, and compliance with legal obligations as the applicable legal bases for processing.
AI and content processing
When you use an AI, OCR, image, document, or audio feature, the content needed to complete that request may be sent to the provider that performs the selected operation. Do not submit confidential, regulated, or personal information that you are not authorized to process.
For supported source-image edits, face detection may be used to prepare a temporary edit mask. When AWS Rekognition is configured, CREVOZA sends a normalized image to AWS for face-location detection. CREVOZA does not save that detector copy, the mask, or face embeddings in its database or file storage.
We use provider settings intended to limit retention or model training where they are available and appropriate, but provider handling is also governed by the applicable provider terms and privacy commitments. Automated outputs may be inaccurate and should be reviewed before use.
Service providers and transfers
We use specialist providers to operate CREVOZA. Depending on the feature and platform, these may include Clerk for authentication; AWS and Neon for infrastructure and databases; Cloudflare R2 and Cloudinary for file processing or delivery; OpenAI, Google, and other model providers for creative processing; Paystack and RevenueCat for payments; Resend for email; Vercel for website visits and performance measurements; and Sentry or PostHog for optional diagnostics and analytics.
These providers process information for the services they supply and may operate in countries outside yours. Where required, we use contracts and lawful transfer safeguards. We may also disclose information when required by law, to protect users or the Services, or as part of a merger, financing, acquisition, or sale of assets. We do not sell your personal information.
Cookies and analytics
Vercel Web Analytics counts visits and page views. Speed Insights measures page performance. We remove query strings, URL fragments, and private result and file identifiers from page measurement URLs. When your browser provides a referrer from a supported AI answer service, we also record that service category and the sanitized landing path to understand how people discover CREVOZA. We do not send the full referrer URL or its query string for this event.
We use necessary cookies and similar technologies for sign-in, security, preferences, and core functionality. If optional analytics or session tools are enabled, they help us understand performance and product usage. Where required, optional technologies are used only after consent.
You can control cookies through your browser and any consent controls we provide. Blocking necessary cookies may prevent authentication or other parts of the Services from working.
Retention and deletion
We retain account and transaction records for as long as needed to provide the Services and meet security, accounting, tax, dispute, and legal obligations. Creative files and generated assets are retained according to the applicable plan, storage quota, and deletion or expiry settings shown in the product.
If you choose Remember settings, CREVOZA saves selected tool controls across devices. Saved preferences exclude briefs, printable text, uploaded files, and payment details. You can view, disable, remove, or clear preferences in Account. Clearing also hides older reuse suggestions; your Library, History, Brand Kit, and current drafts remain available.
When information is deleted, it may remain temporarily in protected backups or logs until those systems rotate. We may retain de-identified or aggregated information that cannot reasonably identify you.
Security
We use administrative, technical, and organizational safeguards designed to protect information, including access controls, encrypted transport, restricted production permissions, monitoring, and credential-management practices. No online service can guarantee absolute security, so keep your account credentials confidential and contact us promptly if you suspect unauthorized access.
Your rights and choices
Depending on your location, including under Nigerian and other applicable data-protection laws, you may have rights to access, correct, delete, restrict, or object to processing; withdraw consent; request portability; or complain to a data-protection authority.
You may update available account details in the product or submit a request through our Support page. We may verify your identity before completing a request. You can unsubscribe from marketing messages without disabling essential account or transaction messages.
Changes and contact
We may update this policy as the Services or legal requirements change. We will post the revised version here, update its effective date, and provide additional notice when required.
For questions, complaints, or privacy requests, use our Support page.