Privacy Policy

Introduction

At Creaxe (Pvt) Ltd ("Creaxe", "we", "us", or "our"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile applications, and services (collectively, the "Platform"). By accessing or using Creaxe, you agree to the terms of this Privacy Policy.

This Privacy Policy applies to the Creaxe website and to all of our mobile apps, including Creaxe, Urdu Designer, Arabic Designer, DesignX, Logo Designer and Resume & CV Maker. Our Android apps are published on Google Play under the developer name fida.pk.

Information We Collect

Account Information

When you create a Creaxe account, we collect information you provide directly, including:

• Your name and email address
• Profile picture (if provided)
• Authentication credentials via third-party providers (Google, Apple, or Facebook sign-in)
• Subscription and payment details (processed securely through our payment providers)

Usage Data

We automatically collect certain information when you interact with the Platform:

• Device information (device type, operating system, browser type)
• IP address and approximate geographic location
• Pages visited, features used, and time spent on the Platform
• Designs created, templates used, and AI features accessed
• Crash reports and performance diagnostics

Content Data

When you use our design tools and AI features, we may process:

• Images, text, and other content you upload or create
• AI-generated content and prompts you submit
• Designs saved to your account or exported from the Platform

Some images you upload may include photographs of people. Creaxe does not perform facial recognition and does not collect, store, or derive face or biometric data. Uploaded images are processed only to produce the design output you request.

Cookies and Similar Technologies

We use cookies, local storage, and similar tracking technologies to maintain your session, remember your preferences, and analyze Platform usage. See our Cookie Policy for more details.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Platform and its features
• Process your transactions and manage your account
• Generate AI content based on your prompts and inputs
• Personalize your experience and recommend relevant templates
• Send service-related communications, updates, and promotional materials (with your consent)
• Monitor and analyze usage patterns to improve performance
• Detect, prevent, and address technical issues, fraud, and security threats
• Comply with legal obligations and enforce our terms

Data Sharing and Third Parties

We do not sell your personal information. We may share your data with:

• Payment Processor: All payments are processed by Gumroad, Inc. ("Gumroad"), who handles payment processing on our behalf. When you make a purchase, Gumroad collects and processes your payment information, billing address, and transaction details in accordance with their Privacy Policy. We do not store your credit card or payment details directly
• App Store Payments: Purchases and subscriptions made in our mobile apps are processed by Google Play (Android) or Apple (iOS). They handle your payment details under their own privacy policies; we receive only the purchase status needed to activate your purchase.
• Service Providers: Cloud hosting (Cloudflare), analytics services (Google Firebase Analytics), push notifications (Firebase Cloud Messaging), and AI model providers that help us operate the Platform
• Third-Party AI Providers: Creaxe's AI features are powered by third-party AI providers. When you use an AI feature, the text prompts and any images you choose to provide are transmitted to these providers solely to generate the result you requested. The providers we use include Runware (which brokers AI models such as Black Forest Labs / FLUX, Google, Ideogram, Alibaba Qwen and Bria), OpenAI, Google, fal.ai and Replicate. Images you upload may contain people; they are used only to perform the specific operation you requested (for example background removal, upscaling, expansion, or generation) and are not used to identify individuals, to derive facial or biometric data, or to build user profiles. We do not share your account identity with these providers, and we require them to provide a comparable level of data protection and not to use your content beyond fulfilling your request. In our iOS app, we ask for your consent before sending your content to these providers. Each provider processes data under its own privacy terms.
• Legal Requirements: When required by law, regulation, legal process, or governmental request
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected users
• With Your Consent: When you explicitly authorize us to share information with a third party

Advertising

The free versions of our mobile apps show ads provided by Google AdMob. To show and measure ads, the Google Mobile Ads SDK may collect and share with Google your device's advertising ID, approximate location (based on IP address), ad interactions and diagnostic information. Google may use this information to show personalised ads, as described in How Google uses information from sites or apps that use its services. Where required, we ask for your consent before personalised ads are shown.

You can reset your advertising ID or opt out of personalised ads at any time in your device settings (on Android: Settings > Google > Ads). Premium users and users who remove ads do not see ads.

AI Assistants Connected to Your Account

You can connect your Creaxe account to an AI assistant that supports the Model Context Protocol (MCP), such as Claude (by Anthropic), ChatGPT (by OpenAI) or Cursor, using the connector address https://creaxe.com/mcp. This section explains what happens when you do.

How you connect

• You sign in on creaxe.com, never inside the assistant. The assistant never receives your password.
• Before anything is shared, you see which permissions the assistant is asking for, and you choose Allow or Cancel.
• The assistant receives an access token that expires after 1 hour and a refresh token that expires after 30 days without use. We store these tokens only as one-way hashes.

What the assistant can access

• The public Creaxe template library and the list of available fonts.
• Your own designs: the assistant can list and read them, create new ones, change their text, and render preview and export images. It cannot see other people's designs.
• It cannot see your password, payment details, subscription receipts, or anything in your other apps or accounts.

What we store

• The name of the assistant app and the address it returns to after sign-in, so we can recognise the connection.
• Your account email, linked to the connection, so the assistant acts only on your account.
• Designs created or changed through the assistant, which are saved in your account like any other design until you delete them.
• Preview and export images, stored at private, unguessable addresses on our content delivery network so the assistant can show them. They are deleted automatically after 7 days.
• Photos you add through a photo link from your assistant. You choose the photo on creaxe.com; the assistant never receives it. We save it to your account as part of that design, turned upright and without its hidden details such as location. Each link works once, for 15 minutes, and its record is deleted after 24 hours.
• A record of each preview or export job (your account email, the design and the job's result), deleted automatically after 24 hours.
• Short error codes when a request fails, used for security and troubleshooting. These never include your design content.

We do not receive or store your conversations with the assistant. We only receive the requests the assistant sends to Creaxe, such as search words or the text to place in a design.

Sharing with the assistant's provider

The information Creaxe returns to the assistant (for example template details, the text of your design, or a preview image) is processed by the company that runs the assistant, under that company's own privacy policy. We do not sell this information, and we do not share it with anyone else.

Disconnecting

You can disconnect at any time by removing the Creaxe connector in your assistant's settings. Access ends when the assistant's current access token expires, within 1 hour at most. Deleting your Creaxe account also ends every connection immediately. For questions, contact us at support@creaxe.com.

Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Regular security audits and vulnerability assessments
• Access controls limiting employee access to personal data
• Secure authentication via Firebase Authentication

While we strive to protect your data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data, subject to legal retention requirements
• Portability: Request your data in a structured, machine-readable format
• Opt-Out: Unsubscribe from marketing communications at any time
• Restriction: Request that we limit the processing of your data under certain circumstances

To exercise any of these rights, contact us at support@creaxe.com. We will respond to your request within 30 days.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. If you delete your account, we will remove your personal data within 90 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention).

Children's Privacy

Creaxe is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal data, we will promptly delete that information.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in compliance with applicable data protection laws.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us:

• Company: Creaxe (Pvt) Ltd
• Address: Office #5, 1st Floor, Gulshan Plaza, 6th Road Stop, Murree Road, Rawalpindi, Pakistan
• Email: support@creaxe.com
• Website: https://creaxe.com