Privacy Policy

1. Who We Are

Krezo.ai ("Krezo", "we", "our", or "us") operates the AI marketing platform at krezoai.com. We are the data controller for personal information collected through our service. For privacy-related enquiries, contact us at privacy@krezoai.com.

2. Information We Collect

2.1 Information You Provide

• Account information: Your name, email address, and password when you create an account
• Brand Pulse data: Your business name, industry, brand colors, target audience, and brand voice preferences that you choose to add
• Campaign briefs: The prompts and descriptions you submit to generate content
• Payment information: Billing details processed by Stripe (we do not store card numbers)
• Communications: Messages you send to our support team

2.2 Information Collected Automatically

• Usage data: Which features you use, content types you generate, and how you interact with the platform
• Device information: Browser type, operating system, and device type
• Log data: IP address, access times, pages viewed, and error logs
• Cookies: Session cookies and preference cookies as described in our Cookie Policy

2.3 Information We Do Not Collect

We do not collect sensitive personal information such as government IDs, financial account numbers, health information, or biometric data. We do not collect information from children under 18.

3. How We Use Your Information

We use your information for the following purposes:

• Providing and operating the Krezo.ai service
• Processing your AI content generation requests
• Managing your account and subscription
• Processing payments through Stripe
• Sending transactional emails (receipts, confirmations, password resets)
• Sending product updates and feature announcements (you can unsubscribe at any time)
• Improving and optimising the platform based on aggregated, anonymised usage patterns
• Providing customer support
• Detecting and preventing fraud, abuse, and security incidents
• Complying with legal obligations

4. How We Share Your Information

We do not sell your personal information. We share your information only in the following limited circumstances:

4.1 Service Providers

We share data with trusted third-party service providers who help us operate Krezo.ai:

• Anthropic: Processes your campaign briefs to generate AI content. Data is processed under Anthropic's API terms, which prohibit using API data for training.
• Supabase: Hosts our database and handles authentication. Your account and generated content are stored on Supabase's secure infrastructure.
• Stripe: Processes payments. We share only what is necessary for billing (email, subscription details). Stripe handles all payment card data.
• Stability AI: Processes your brief to generate images (paid plans only).
• Resend: Delivers transactional emails on our behalf.
• Vercel: Hosts our application infrastructure.

4.2 Legal Requirements

We may disclose your information if required by law, court order, or other legal process, or if we believe disclosure is necessary to protect the rights, property, or safety of Krezo.ai, our users, or the public.

4.3 Business Transfers

If Krezo.ai is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. Specifically:

• Account data is retained while your account is active
• Generated content history is retained for 12 months and then automatically deleted
• Payment records are retained for 7 years for tax and legal compliance
• Support communications are retained for 2 years
• After account deletion, we delete your personal data within 30 days, except where required by law

6. Your Rights

Depending on where you live, you may have the following rights regarding your personal information:

6.1 Rights for All Users

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your account and personal data
• Opt-out: Unsubscribe from marketing emails at any time
• Portability: Request your data in a machine-readable format

6.2 GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), UK, or Switzerland, you have additional rights under GDPR, including the right to object to processing, the right to restrict processing, and the right to lodge a complaint with your local data protection authority.

Our legal basis for processing your data is: performance of contract (providing the service you subscribed to), legitimate interests (improving the service, security), and consent (marketing communications).

6.3 CCPA Rights (California Users)

California residents have the right to know what personal information we collect and how it is used, the right to delete personal information, the right to opt-out of the sale of personal information (we do not sell personal information), and the right to non-discrimination for exercising these rights.

To exercise any of these rights, contact us at privacy@krezoai.com. We will respond within 30 days.

7. Security

We implement industry-standard security measures to protect your data, including encryption of data in transit (TLS/HTTPS), encryption of data at rest, access controls limiting who can access personal data, and regular security reviews. However, no method of transmission or storage is 100% secure. We encourage you to use a strong, unique password for your account.

8. International Data Transfers

Krezo.ai is based in the United States. If you are located outside the US, your data may be transferred to and processed in the US, where data protection laws may differ from those in your country. By using Krezo.ai, you consent to this transfer. Where required by law, we implement appropriate safeguards such as Standard Contractual Clauses for transfers from the EEA.

9. Cookies

We use cookies and similar technologies to operate our service. For detailed information about the cookies we use and how to control them, please see our Cookie Policy.

10. Children's Privacy

Krezo.ai is not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at privacy@krezoai.com.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by email or in-app notification at least 14 days before they take effect. Your continued use of Krezo.ai after changes take effect constitutes your acceptance of the updated policy.

12. Contact Us

For privacy-related questions, requests, or complaints:

• Email: privacy@krezoai.com
• Response time: Within 30 days for all requests