In compliance with the California Consumer Privacy Act (CCPA), California Civil Code sections 1798.100 et seq., and other applicable state and international data protection laws, this Privacy Policy regulates the processing of your personal data collected through your use of the services offered on our platform.
This Privacy Policy ("Policy") applies to all information collected through our website located at https://www.icreat.ai/ (including any subdomains and sections, collectively the "Website") and any related services, sales, marketing, API channels, or events (collectively, "Services"). At iCreat.ai ("Company", "we", "us", or "our"), we are committed to protecting your personal information and your right to privacy. We want you to be fully informed about the information we collect, how it is used, shared, and protected, and the choices you have with it.
If there are any terms in this Policy that you do not agree with, you should immediately discontinue the use of our Services. If you have any questions or concerns about our practices with regard to your personal information, please contact us via our official email at [email protected].
1. Data Controller and Management
The legal entity responsible for the processing of Users' personal information on the Website is the iCreat.ai team. To ensure absolute conformity with global privacy standards, we have appointed a dedicated Data Protection Officer:
- Data Protection Officer: Mason Zhang
- Privacy Desk Email:[email protected]
2. When We Collect Personal Information
We systematically collect personal data under the following interactive conditions:
- When you sign up for our Services, establish a registered profile, or activate subscription tiers.
- When you visit or interact with our Services, including configuring settings, uploading reference data, submitting Inputs, or processing generations.
- When you engage with our support team, report interface issues, or communicate with us through electronic forms.
- When you view, open, or interact with our transactional emails, surveys, or marketing communications.
3. Types of Personal Information We Collect
3.1 Information You Provide Directly to Us
- Registered Free Users: Username and email address are strictly required. Optional attributes include full name, postal address, and professional classification.
- Premium Users: Full name, country, city of residence, identity validation codes, corporate tax residency tracking metrics, and encrypted payment channel instruments.
- External Creators & Collaborators: Email address, full name, detailed physical address, tax residency classification forms, national identity documentation, and designated transactional payout methods.
- Support & Communications: Any specific contact parameters, names, phone numbers, website links, or text logs you submit via support channels.
- AI Product Inputs & Training Profiles: Textual prompts, parameters, or configurations, and custom reference files uploaded to build custom models. Any personal portraits or images uploaded are processed with specific protections (see Section 4).
3.2 Information Automatically Collected
When browsing the Website, our network tracking architecture captures device metadata including unique IP addresses, hardware identifiers, HTTP/HTTPS browser header values, cookie parameters, navigation timestamps, search query metrics, and detailed asset download volumes.
3.3 Information From Third-Party Integrations
If you choose to authenticate your account utilizing federated identity systems (such as Google or GitHub), we retrieve your public username, avatar illustration, language preference, and unique federated ID numbers in strict compliance with third-party developer guidelines.
4. Lawful Basis and Purposes of Data Processing
We ground our data engineering workflows on distinct legal bases, executing processing for the following operational reasons:
- Execution of Contract: Managing your user account, facilitating subscriptions, keeping tracks of active API balances, delivering functional generations, and processing payment transactions.
- Legitimate Interests: Optimizing system resilience, detecting bot infrastructure or scraping patterns, validating download allowances under our Terms of Use, conducting satisfaction surveys, and improving our artificial intelligence models using general text prompts and text-based outputs.
- Explicit Consent: Creating automated avatars, face reconstructions, or graphic variations using custom uploaded images or camera captures. Crucial Protection: Uploaded face assets or personal images are completely discarded immediately following generation and are never utilized for base model training or shared externally.
- Legal Obligation: Transferring financial reporting records to tax authorities or collaborating with law enforcement entities when required by binding statutory rules.
5. How We Share and Disclose Personal Information
The Company does not sell or lease your personal identification data to external third parties. We disclose specific metrics to trusted service providers under strict data handling boundaries for the following clear mandates:
- To secure credit card processing portals and clear recurrent subscription actions.
- To manage cloud-based communications, notification deliveries, and operational update streams.
- To map platform analytics, tracking system errors, and maintain regular system availability.
- To protect the legal rights of our organization, safeguard customer security, or mitigate malicious security attacks.
- In the event of structural corporate transitions, asset transfers, or merger investigations, data fields may be reviewed by prospective buyers under absolute confidentiality bounds.
6. Data Retention Schedule
We retain personal profiles and system operational data strictly for the timeline required to fulfill our active business agreements or legal mandates. Review our formal schedule below:
| Data Category / Processing Purpose | Retention Timeline Boundaries |
|---|---|
| Website Security Logs, Attack Mitigation (IP, Device ID) | Thirteen (13) Months |
| Registered User, Subscription Profiles, Account Credentials | Active Contract Duration + Five (5) Years blocked status |
| Financial Transactions, Corporate Tax & Accounting Audits | Six (6) Years from date of transaction |
| External Designer & Creator License Documentation | Intellectual Property License Duration + Five (5) Years |
| Electronic Marketing & Consumer Email Communications | Three (3) Years from last active interaction or until opt-out |
| AI Products User Personal Uploaded Images (Avatar Builds) | Discarded Immediately after functional rendering is completed |
| AI Products Core Prompts (Inputs) & System Generated Data | Retained for the ongoing duration of the user contract |
| Non-Commercial Support Inquiries, Email Question Logs | Deleted immediately upon final resolution of request |
Users are requested to ensure their account data parameters remain completely updated. You can adjust details directly inside your profile console.
7. Your Legal Privacy Rights and How to Exercise Them
Under applicable regulations (such as the CCPA or European frameworks), you possess distinct individual liberties regarding your personal datasets:
- Right to Access: You can request a clear overview of the categories and specific pieces of personal information we maintain.
- Right to Deletion: You can demand the eradication of your personal files, subject to statutory tax or fraud retention limitations.
- Right to Rectification: You have the absolute right to correct inaccurate or incomplete data parameters.
- Right to Opt-Out & Revoke Consent: You can unsubscribe from electronic commercial marketing streams using the "Unsubscribe" action located at the bottom of our emails, or toggle your notification sliders within your user dashboard.
To formally process any privacy request, please submit your specific application directly to our Data Protection team at [email protected].
8. Cookies and Tracking Technologies
We deploy a minimal configuration of analytics tracking pixels and standard cookie records to map user navigation metrics and combat fraud. Your browser applications enable you to modify your cookie acceptance criteria or block tracing variables at your discretion. For an extensive configuration breakdown, you may reference public information repositories like www.allaboutcookies.org.
9. Children's Privacy
Our platform structures and generative solutions are aimed exclusively at business professionals and individuals of legal adult age. We do not knowingly compile tracking metrics or retain files from minor children under the age of 13. If you have reason to suspect a minor has created an account, please reach out to us at [email protected] so we can purge the relevant files immediately.
10. Policy Evolution and Amendments
The Company preserves the autonomous authority to modify this Privacy Policy to mirror functional service updates or compliance amendments. We recommend reviewing this page periodically. The active effective timeline date will always be visible at the top of the text block.