Privacy policy

1. Information We Collect

• Name and email address when you sign up

• Payment information - processed securely by Stripe. We never store your card details

• Content and data you create within the app

• Basic usage data to improve the service

• Analytics data via Google Analytics

2. How We Use Your data

• To provide and operate CreaFlow

• To process payments via Stripe

• To send essential emails - account confirmations, billing receipts, and service updates

• To improve the product using anonymised analytics

• We do not sell your data to third parties

3. Legal basis for processing (UK GDPR)

• Contract - to deliver the service you signed up for

• Legitimate interests - to improve and secure the platform

4. Data Security

Your data is stored securely via Supabase. We take reasonable technical measures to protect your data.

5. Cookies

We use:

• Essential cookies to keep you logged in

• Stripe cookies for payment processing

• Google Analytics cookies to understand how people use the site

6. Your Rights Under UK GDPR

You have the right to access, correct, delete, or export your personal data at any time. Email hello@creaflow.dev and we will respond within 30 days.

7. Third party services

• Stripe - stripe.com/privacy

• Supabase - supabase.com/privacy

• Google Analytics - policies.google.com/privacy

8. Data retention

We keep your data for as long as your account is active. If you delete your account, your data will be deleted within 30 days.

9. Updates to This Policy

We may update this policy. We will notify you by email of any significant changes.

10. Contact

hello@creaflow.dev