Privacy Policy

Last Updated: April 2026

1. Data Controller Information

Kreator Flow is the data controller for the personal information we process. Our data protection team can be reached at privacy@kreatorflow.app.

2. Digital Identity Protection

We implement strict access control to protect your "Identity Locks" (face references). These assets are processed exclusively via secure encrypted pipelines to our inference nodes and are never utilized for model training without explicit opt-in.

3. Your GDPR & Global Privacy Rights

Under global data protection laws, you have specific rights regarding your personal information:

  • Right to Access: You can request a copy of all personal data we hold about you.
  • Right to Portability: You can export your metadata, generations, and credit history via your account settings at any time.
  • Right to Erasure ("Right to be Forgotten"): You may permanently delete your account. This action triggers a system-wide purge of your identity assets, thumbnails, and branding presets.
  • Right to Rectification: You can update your profile and branding DNA via the Settings dashboard.

4. Sub-processors

We utilize trusted third-party infrastructure to deliver our services. Each provider is bound by Data Processing Agreements (DPA):

Supabase

Database & Auth

Stripe

Payment Processing

Replicate

AI Inference

Vercel

Hosting & Global Edge

Google Cloud

LLM & Vision Systems

5. Cookie Policy

We do not use tracking or advertising cookies. Our platform strictly utilizes Essential Cookies for authentication session management and secure payment verification.

Contact

For formal GDPR requests, please use our self-service "Privacy & Data" dashboard in Settings or contact compliance@kreatorflow.app.