Creagency Gizlilik Politikası

Creagency.ai is operated by KOENZIM LLC, a company organized in South Dakota, USA.

If you have privacy-related questions or requests, you can contact us at:

Email: [email protected]

This Privacy Policy applies to personal information we collect when you:

• visit our website;
• create an account or sign in to Creagency;
• start a free trial or purchase a subscription;
• connect third-party social media or authentication providers;
• upload, create, schedule, publish, or store content in the Service;
• invite or collaborate with team members in a workspace;
• contact us for support; or
• otherwise interact with Creagency or our communications.

This Privacy Policy does not govern the privacy practices of third-party platforms, social networks, payment processors, AI providers, authentication providers, analytics providers, or other third-party services except to the extent we act as the party collecting and using the data through our Service. Those third parties have their own terms and privacy policies.

We collect information directly from you, automatically from your use of the Service, and from third parties you choose to connect.

3.1 Account and Profile Information

When you create or access an account, we may collect information such as:

• your name;
• email address;
• profile photo or avatar;
• authentication method;
• account identifiers; and
• related login or session information.

Creagency currently supports sign-in through Google Login, X Login, TikTok Login, and magic link login.

3.2 Workspace and Team Information

If you create or use workspaces, we may collect and store:

• workspace names and descriptions;
• workspace settings, including timezone and configuration choices;
• membership records and roles (such as owner, admin, editor, or viewer);
• invitations, invitee email addresses, role assignments, and invitation status;
• team activity records; and
• workspace-level billing or usage information.

3.3 Social Media Connection Information

If you connect social media accounts or channels, we may collect information needed to operate those integrations, such as:

• platform name and connected account type;
• usernames, handles, display names, channel names, page names, profile images, and account IDs;
• OAuth or API tokens, refresh tokens, token expiry dates, scopes, and connection status;
• managed page, organization, or channel identifiers;
• metadata returned by the relevant platform; and
• publish, refresh, validation, and connection audit events.

Depending on the feature set in use, this can include integrations with platforms such as X, YouTube, TikTok, Instagram, and LinkedIn through their official APIs.

3.4 Content and Asset Data

We collect the content and files you choose to submit to the Service, including:

• captions, drafts, prompts, post text, and editing instructions;
• scheduled and published content;
• uploaded images, videos, thumbnails, filenames, and file metadata;
• asset library organization data, such as folders, tags, descriptions, alt text, and usage history;
• brand kits, templates, meme drafts, meme templates, and caption templates; and
• AI-generated outputs returned to you through the Service.

3.5 Analytics and Performance Data

If you connect social platforms or use analytics features, we may collect or derive:

• post performance metrics;
• impressions, views, reach, clicks, likes, comments, shares, saves, watch time, and similar engagement data;
• workspace-level usage and reporting data;
• feature usage trends; and
• export activity or scheduled report settings.

3.6 Billing and Subscription Information

If you start a paid subscription, manage billing, or otherwise interact with paid features, we may collect or receive:

• subscription plan information;
• trial status and billing state;
• billing contact details;
• customer and subscription identifiers;
• invoice, payment, refund, and transaction records;
• country, region, or billing address information needed for tax or invoicing; and
• limited payment method details from our payment processor (for example, card brand and last four digits), but not full payment card numbers stored by us.

Creagency currently offers a 7-day free trial. Trial and subscription operations may require us to keep limited account, plan, billing, and invoice records.

3.7 Support and Communications

When you contact us or interact with our notices, we may collect:

• support requests and messages;
• attached files or screenshots you send us;
• communications preferences;
• records of privacy, export, or deletion requests; and
• other information you choose to provide.

3.8 Technical, Device, and Usage Information

We automatically collect certain technical and usage data such as:

• IP address;
• browser type and version;
• device type, operating system, and language;
• pages, routes, or features accessed;
• timestamps, referring URLs, and session events;
• error logs, diagnostic data, and performance information; and
• security, audit, and abuse-prevention logs.

3.9 Cookies and Similar Technologies

We and our service providers may use cookies, pixels, local storage, SDKs, and similar technologies to:

• keep you signed in;
• remember preferences;
• maintain security;
• measure performance and usage; and
• support analytics and consent management.

See Section 7 below for more detail.

We may receive information from third parties when you choose to interact with them through Creagency, including:

• authentication providers such as Google, X, and TikTok;
• social media platforms you connect to the Service;
• payment processors such as Stripe;
• email delivery providers;
• analytics providers;
• AI and content-processing providers used to deliver features you request; and
• workspace teammates or owners who invite you into a workspace.

The information we receive depends on the provider, your permissions, and the features you choose to use.

We use personal information for the following purposes:

5.1 To Provide and Operate the Service

We use your information to:

• create and manage your account;
• authenticate you and maintain sessions;
• create and manage workspaces;
• connect and maintain third-party integrations;
• upload, store, organize, and deliver assets and content;
• schedule, queue, publish, and retry posts;
• generate memes, templates, and other requested outputs; and
• provide analytics, exports, reports, and dashboards.

5.2 To Process AI-Assisted Features

If you use AI-assisted features, we may process your prompts, content, images, videos, and related instructions to generate or edit outputs you request.

We use AI-related providers only to provide the features you invoke through the Service. We do not use your personal data or your content to train our own AI models.

5.3 To Manage Trials, Subscriptions, and Payments

We use information to:

• start and administer free trials;
• process upgrades, downgrades, renewals, invoices, refunds, credits, and cancellations;
• enforce plan limits or usage rules; and
• detect payment failures, fraud, abuse, or charge disputes.

5.4 To Communicate With You

We use your information to send:

• login or verification emails;
• transactional and service emails;
• workspace invitations;
• account, security, or billing notices;
• support responses;
• product notices or changes to legal terms; and
• marketing communications where permitted by law or where you have consented, subject to your opt-out rights.

5.5 To Improve, Monitor, and Secure the Service

We use information to:

• understand feature usage and performance;
• troubleshoot errors and outages;
• monitor service health;
• prevent abuse, spam, fraud, unauthorized access, or misuse;
• enforce our terms, policies, and platform rules;
• perform internal reporting and operational planning; and
• maintain audit logs and administrative records.

5.6 To Comply With Law and Protect Rights

We may use your information to:

• comply with legal, regulatory, tax, accounting, and compliance obligations;
• respond to lawful requests by authorities;
• investigate complaints, disputes, or suspected violations;
• protect the rights, safety, and security of users, KOENZIM, and the public; and
• establish, exercise, or defend legal claims.

If and to the extent applicable under laws such as the GDPR, UK GDPR, Swiss data protection laws, or similar regimes, we rely on one or more of the following legal bases:

• Performance of a contract: when processing is necessary to provide the Service you requested.
• Legitimate interests: when processing is reasonably necessary to operate, secure, improve, and support the Service, provided our interests are not overridden by your rights.
• Consent: where required, such as for non-essential cookies or certain marketing communications.
• Legal obligation: when we must process information to comply with law, regulation, or valid legal process.

We use certain cookies and similar technologies that are necessary for the Service to function, such as security, session, login, load-balancing, and preference cookies.

We may also use Google Analytics and similar measurement technologies to understand how visitors and users interact with Creagency. These tools may collect information such as device identifiers, IP-derived location, browser information, pages visited, approximate usage patterns, and events within the Service.

Where required by applicable law, we will use a cookie banner or consent manager to obtain consent before placing or activating non-essential cookies or similar technologies. You can manage your preferences through the consent tool we make available, as well as through your browser or device settings. Disabling some cookies may affect functionality.

We do not sell your personal information. We also do not share your personal information for third-party advertising or cross-context behavioral advertising.

We may share information only as described below.

8.1 Service Providers and Processors

We may share information with trusted vendors and processors that help us operate the Service, such as providers for:

• cloud hosting, storage, content delivery, and backups;
• transactional email delivery;
• authentication;
• analytics and consent management;
• payment processing and billing;
• customer support and operational tooling;
• AI processing and generation features; and
• security, logging, and fraud prevention.

Based on the current product setup, this may include providers such as Cloudflare R2 (asset storage), Resend (transactional email), Stripe (payment processing), Google Analytics, Eachlabs (AI image generation workflows), OpenRouter (text-generation routing), and official social media platform APIs.

8.2 Connected Platforms and Third-Party Integrations

When you connect a third-party platform or request a third-party action through Creagency, we may send the information necessary to perform that action, such as:

• authentication data needed to establish or maintain the connection;
• content you choose to publish;
• media files you attach to posts;
• analytics or reporting requests;
• refresh or validation events; and
• related metadata needed for the requested feature.

8.3 Within Your Workspace

Content and account information may be visible to other authorized members of your workspace based on your team settings, role permissions, and collaboration choices. For example, other workspace members may be able to see shared assets, posts, scheduled content, templates, analytics, team membership, or activity relevant to the workspace.

8.4 Internal Administrative and Support Access

Authorized KOENZIM personnel may access account, workspace, content, billing, or technical information when reasonably necessary to:

• provide customer support;
• troubleshoot or resolve incidents;
• respond to privacy, export, or deletion requests;
• investigate abuse, fraud, or security issues;
• moderate content or enforce platform rules; or
• comply with legal obligations.

We limit such access to what is reasonably necessary for the task.

8.5 Legal and Business Transfers

We may disclose information:

• to comply with applicable law, regulation, court order, subpoena, or lawful request;
• to protect the rights, property, or safety of KOENZIM, our users, or others;
• in connection with a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar corporate transaction; or
• with your consent or at your direction.

Creagency may offer AI-assisted features such as image generation, text editing, caption creation, or post assistance.

When you use these features:

• we may send prompts, text, files, or instructions you provide to the relevant provider needed to generate the requested result;
• we may store the resulting output in your account or workspace if you choose to save it;
• we may log usage and operational metadata needed for billing, support, and abuse prevention; and
• we do not use your content or personal data to train our own models.

Please avoid submitting highly sensitive personal information unless it is strictly necessary for your intended use case.

We use reasonable technical, administrative, and organizational safeguards designed to protect personal information, including measures such as:

• encrypted transport using HTTPS/TLS;
• access controls and role-based permissions;
• logging and audit trails for key actions;
• protection of authentication credentials and tokens;
• storage and infrastructure security controls; and
• security monitoring, backups, and incident response processes.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Creagency is operated by a U.S. company and may use providers located in the United States and other countries. As a result, your information may be transferred to, processed in, or accessed from jurisdictions that may have different data protection laws than the country where you live.

Where required by applicable law, we use appropriate safeguards for international data transfers, which may include contractual protections such as Standard Contractual Clauses or other lawful transfer mechanisms.

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Service, maintain security, comply with legal obligations, and resolve disputes.

In general:

• Active accounts: We keep account and workspace information for as long as your account remains active.
• Deleted or soft-deleted content: Deleted workspaces, posts, assets, and related content may remain in soft-deleted systems, recovery windows, or backups for up to 30 days, unless a longer period is required for security, legal, or operational reasons.
• Disconnected social accounts: When a social account is disconnected, we aim to delete or revoke stored tokens and connection data as part of our normal operational process, subject to limited backup, logging, and legal retention.
• Audit and security logs: We generally retain audit logs for up to 1 year, including where needed for security, compliance, abuse prevention, or legal obligations.
• Billing and tax records: We may keep billing, invoice, refund, and tax-related records for longer periods where required by law or accounting obligations.
• Support and legal requests: We may keep records related to support matters, disputes, investigations, or legal requests for as long as necessary to address them.

After the applicable retention period ends, we delete, anonymize, or de-identify the information where appropriate.

Depending on where you live, you may have rights regarding your personal information, including the right to:

• access the personal information we hold about you;
• correct or update inaccurate information;
• request deletion of your information;
• request export or portability of certain information;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent;
• opt out of marketing communications; and
• complain to a supervisory or data protection authority.

You may also be able to:

• manage some profile, workspace, or billing information directly in your account;
• disconnect third-party integrations;
• delete content, workspaces, or assets through the Service; and
• manage cookie choices through our consent tool, where available.

To exercise your privacy rights, contact us at [email protected]. We may ask you to verify your identity before completing certain requests. We may also decline or limit a request where allowed by law.

Creagency is not intended for users under 16 years of age. We do not knowingly allow users under 16 to use the Service.

If we learn that we have collected personal information from a person under 16 in violation of our rules or applicable law, we may suspend or terminate the account and delete the associated information, subject to legal obligations.

The Service may link to or rely on third-party services, including social networks, authentication providers, payment providers, analytics providers, AI providers, and external websites. Their privacy practices are governed by their own policies, not this Privacy Policy.

You should review the privacy notices of any third-party service you connect to Creagency.

We may update this Privacy Policy from time to time to reflect changes to the Service, our practices, our providers, or applicable law.

If we make material changes, we may provide notice by updating the effective date above, posting a notice within the Service, emailing you, or using another reasonable method. Your continued use of the Service after the updated Privacy Policy becomes effective means the updated version will apply going forward, to the extent permitted by law.

If you have questions, concerns, or requests about this Privacy Policy or our privacy practices, please contact:

• KOENZIM LLC
• Creagency.ai Privacy / Support
• Email: [email protected]