Last updated: October 19, 2026
Creatzi is run by Zenen Technologies Pvt Ltd, a company incorporated under the Companies Act, 2013 of India. We decide how your personal data is used, so we are its controller (the "Data Fiduciary" under India's DPDP Act). This policy explains what we collect when you use creatzi.ai and the Creatzi apps, why, who else processes it, how long we keep it and how you control it.
Links to other websites, and services you sign in to separately (such as Razorpay checkout or Crisp chat), also have their own privacy policies.
Your email address; a password if you set one (stored only as a hash; you can also sign in with an email link instead); your name and whether you are a student or professional; your plan and credit balance.
Which version of the Terms of Service and this policy you accepted, when, the browser you used, and your confirmation that you are 18 or older. We keep this as a record you cannot edit, because the law asks us to be able to show it.
Everything you make or upload is saved to your account so you can come back to it:
Prompts you type, chats with Creatzi and the results the AI produces are saved with the document, chat or project they belong to, so your history is there when you return. They stay until you delete them or your account. See section 5.
When you upload a résumé to import it, the file is sent to our résumé-parsing provider (Affinda) to read its fields. We keep the fields, not the file.
Your plan, subscription status and dates, and a record of each payment (amount, currency, status and the payment provider's reference numbers, plus the provider's own record of the payment, which can include your email and phone number). You enter card or UPI details directly with Razorpay; they never reach our servers.
Our hosting and security providers also see the normal technical details of each request (IP address, browser, time). We do not use analytics or advertising tools, and we do not track you across other websites.
If you write to us by email, we receive it in our inbox. If you open support chat or send feedback from the prompt bar, the conversation goes to Crisp, our support-chat provider.
The microphone button uses your browser's own speech recognition. Some browsers (Chrome, for example) send the audio to their maker's servers to turn it into text. We receive only the text.
If you allow notifications, we store your device's push token so we can tell you when your slides are ready.
Card numbers or bank details, government ID numbers, precise location, contacts, or advertising identifiers.
We do not sell or rent your personal data, share it for advertising, or use your content to train AI models.
We use these providers to run Creatzi. Each receives only what it needs for the purpose shown, and processes it on our behalf under its terms with us.
| Provider | What it receives | Why | Company based in |
|---|---|---|---|
| Supabase | Your account, everything you save, uploaded images and generated files | Database, sign-in, file storage and server functions | United States |
| Lovable (AI gateway and hosting) | The text and images an AI feature works on: résumé content, chats, notes and tasks, slide and document text, portfolio copy, image prompts. Also emails we send you | Runs most AI features on Google Gemini models; delivers sign-in and billing emails; hosts the site | Sweden |
| Google (Gemini, via Lovable) | As above, for the AI request being made | AI text and image generation | United States |
| OpenAI | For cover letters: your name, title, summary, experience, education, skills and the job description. For some slide images: the prompt and, when editing, the image | Cover letter writing and image generation. Requests are sent with storage turned off | United States |
| Anthropic | The brief, sources, content and slide images of a Starlight creative project | Reviewing and editing creative projects (beta) | United States |
| fal.ai | Image prompts and, when editing, the image to edit | Slide image generation | United States |
| Affinda | The whole résumé file you upload for parsing, and its file name | Reading the fields out of an uploaded résumé. We do not keep the file ourselves | Australia |
| Razorpay | Your email, the plan, the currency and your renewal and consent choices. You enter card or UPI details directly with Razorpay | Payments and subscriptions | India |
| Cloudflare | Normal web request data (IP address, browser) and the security-check token | Content delivery, security and the Turnstile bot check at sign-in | United States |
| Crisp | What you type into support chat, and the feedback conversation you choose to send. Crisp also receives your IP address | Support chat and product feedback. It loads only when you open it | France |
| ipapi.co | Your IP address, only when our network cannot tell your country itself. Nothing is stored | Choosing the currency shown on the pricing page | United States |
| Unsplash and Pexels | Your stock-photo search words (from our server). Your browser then loads the images from them, which shows them your IP address | Stock photos in slides and designs | Canada and Germany |
| Expo | Your device push token and the text "Your slides are ready" | Notifications in the mobile app | United States |
| Google Fonts | Your IP address and browser, when a portfolio, deck or exported page loads a font from Google | Fonts in some portfolio and deck templates and in exported HTML | United States |
Our database and most of our providers process data outside India, mainly in the United States and the European Union (see the table above). Where data about people in the EU, UK or other countries with transfer rules leaves those countries, we rely on the safeguards in our providers' data processing terms, such as the European Commission's standard contractual clauses.
No system is perfectly secure, so we cannot promise that data can never be accessed without permission.
Export or delete your data yourself: open the Data & Privacy section of your account dashboard or your profile. "Download my data" gives you a file with your account data and work. "Delete my account" deletes it straight away.
For anything else (correcting your data, restricting or objecting to processing, withdrawing consent, nominating someone to act for you, or a question about this policy), write to privacy@creatzi.ai. We may need to confirm the request comes from you. We reply within 15 days.
You can ask for a summary of your data and how it is processed, correct or complete it, have it erased, nominate someone to exercise your rights if you die or cannot act, withdraw consent, and complain to our Grievance Officer and then to the Data Protection Board of India.
You can access, correct, delete or export your data, restrict or object to how we use it, withdraw consent, and complain to your local data protection authority.
You can ask to know, correct and delete your data. We do not sell your personal data or share it for cross-context behavioural advertising. Because we do not track you across websites, "Do Not Track" and Global Privacy Control signals do not change what we do: we already treat everyone as having opted out. We will not treat you differently for using your rights.
We use your browser's storage to keep you signed in, save drafts and remember your settings. We do not use advertising or analytics cookies. Our Cookie Policy lists what is stored and for how long.
Creatzi is for people aged 18 and over, and you must confirm your age to create an account. If you believe someone under 18 has given us their data, write to privacy@creatzi.ai and we will delete it.
Under the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, our Grievance Officer is:
Grievance Officer: Pranay, Founder, Zenen Technologies Pvt Ltd
Email: privacy@creatzi.ai
When we change this policy in a way that matters, we will tell you by email or in the app at least 30 days before the change takes effect, and ask you to accept the new version the next time you sign in. The date at the top shows when it last changed.