Privacy Policy

Our Commitment to Privacy

At Creatiflow, we believe in transparency and respect for your personal data. This Privacy Policy outlines how we collect, use, protect, and share information about you when you use our platform.

We are committed to protecting your privacy in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, password, profile photo, and role (client, facilitator, expert, or enterprise admin)
• Profile Information: Creative interests, skills, learning goals, expertise areas, biography, and professional background
• Payment Information: Billing address and payment details (processed securely through Stripe)
• Communications: Messages, feedback, and correspondence with facilitators, experts, or our support team
• Content: Any content you create, upload, or share on the platform including session notes and reflections

1.2 Information Automatically Collected

• Usage Data: Pages visited, features used, time spent, click patterns, and interaction data
• Device Information: IP address, browser type, operating system, device identifiers
• Video Session Data: Session attendance, duration, and metadata (we do not record video content without explicit consent)
• Cookies and Tracking: We use essential cookies and analytics to improve our service

1.3 Information from Third Parties

• Authentication providers (if you sign in with third-party services)
• Payment processors (Stripe) for transaction verification
• Video conferencing providers for session facilitation

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Creatiflow platform
• Create and facilitate meaningful connections between clients, experts, and facilitators
• Process payments and manage subscriptions
• Personalize your learning experience through AI-assisted curriculum recommendations
• Send transactional emails about your account, sessions, and platform updates
• Communicate with you about features, surveys, and promotional offers (with your consent)
• Ensure security, prevent fraud, and enforce our Terms of Service
• Comply with legal obligations and resolve disputes
• Analyze usage patterns to enhance platform functionality

3. How We Share Your Information

We may share your information in the following circumstances:

3.1 Within the Platform

• With Your Facilitator: Your profile, goals, interests, and learning progress to enable personalized curation
• With Matched Experts: Basic profile information when you're paired for sessions
• Within Enterprise Accounts: Enterprise admins can view their organization's usage and participant data

3.2 Service Providers

• Payment Processing: Stripe for secure payment transactions
• Cloud Infrastructure: Vercel and database providers for hosting
• Video Services: Daily.co for video conferencing
• Email Services: Resend for transactional emails
• Analytics: Privacy-focused analytics to improve our service

3.3 Legal Requirements

We may disclose your information if required by law, to respond to legal processes, protect our rights, prevent fraud, or ensure user safety.

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity.

4. Your Rights and Choices

You have the following rights regarding your data:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Portability: Receive your data in a structured, machine-readable format
• Opt-Out: Unsubscribe from marketing communications
• Objection: Object to processing of your data for certain purposes
• Withdraw Consent: Withdraw consent for data processing where applicable

To exercise these rights, please contact us at privacy@creatiflow.space

5. Data Security

We implement industry-standard security measures to protect your data:

• Encryption of data in transit and at rest
• Secure authentication and password hashing
• Regular security audits and updates
• Access controls and role-based permissions
• Secure payment processing through PCI-compliant providers

While we strive to protect your data, no method of transmission or storage is 100% secure. We encourage you to use strong passwords and protect your account credentials.

6. Data Retention

We retain your personal data for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we will remove or anonymize your personal data within 30 days, except where retention is required by law.

7. International Data Transfers

Creatiflow is based in the United States. If you access our platform from outside the U.S., your information may be transferred to, stored, and processed in the U.S. or other countries. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

8. Children's Privacy

Creatiflow is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete such information.

9. California Privacy Rights

If you are a California resident, you have additional rights under the CCPA:

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your privacy rights

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice on the platform. Your continued use of Creatiflow after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: