Privacy Policy

We collect and process personal data in accordance with the Lei Geral de Proteção de Dados (LGPD) — Lei nº 13.709/2018.

Data Controller: Z&E Consultoria em Estratégia e Design Ltda., São Paulo, Brazil. Contact: dpo@creative-os.ai

Data we collect: account information (name, email), usage data, AI-generated content you create, access logs (retained ≥6 months per Marco Civil da Internet art.15), and billing information (processed by Stripe — we do not store card data).

How we use your data: to provide and improve the platform's user-facing features — generating your strategy, briefs, campaigns, and images, authenticating your account, processing billing, and sending service communications. We do not sell your data, and we do not use it for advertising, profiling, or to train third-party AI models.

Subprocessors we share data with: Anthropic (AI text), Replicate / Black Forest Labs (AI images), Supabase (database + auth), Vercel (hosting), Stripe (payments), Resend (email), Google Analytics (web analytics — gated by cookie consent). Data is shared with these processors only to operate the service, never for their independent use.

Google user data: if you sign in with Google, we receive your name, email address, and profile photo to create and authenticate your account. We use this solely to operate your Creative OS account. We do not share Google user data with third parties except the subprocessors above, and we do not use it for advertising or to train AI models.

Data retention & deletion: Account data is retained while your account is active. After account deletion, personal data is permanently deleted within 30 days. Access logs are retained for 6 months as required by law. You may request deletion at any time via your account settings or by emailing dpo@creative-os.ai.

Data protection: data is encrypted in transit and at rest; access is restricted and authenticated. Security procedures are in place to protect the confidentiality of your data.

Your rights under LGPD: access, correction, deletion, portability, and objection to processing. To exercise your rights, email dpo@creative-os.ai.

[Full Privacy Policy — pending lawyer finalisation of v5-RESP]