1. Controller
1.1. The controller is Individual Entrepreneur Andrii Pisariev, Individual Entrepreneur, Georgia, identification number 305595594, Georgia, Tbilisi, Saburtalo District, Bakhtrioni Street 22, Apartment 75.
1.2. Privacy contact: ceo@creo-market.com, +995568751435.
1.3. We handle personal data under the Law of Georgia on Personal Data Protection and, where it applies to a user, other privacy law that cannot be contracted out.
2. Data we process
2.1. Account data: name, email, password hash, account language, and the currency of the prepaid balance.
2.2. Payment references: amount, currency, payment status, and a provider reference. We do not store full card numbers.
2.2.1. If you take a monthly plan: the token of the payment method saved by the payment provider, the masked card details the provider returns (first six and last four digits, expiry, card type), the plan, period dates, charge attempts, and the credit ledger. We never receive the full card number or the security code.
2.2.2. A record of your consent to automatic renewal charges: date and time, IP address, browser data, plan, amount, and the revision of the terms you accepted.
2.3. Studio data: prompts, uploaded files, generated files, and technical logs needed to run and secure the service.
2.4. Support messages you send us.
3. Why we process it
3.1. To create and secure the account, provide the tools, debit the balance or credits, charge plan renewals you agreed to, and send service messages, including renewal reminders and receipts.
3.2. To detect abuse, debug failures, and keep the service reliable.
3.3. To meet accounting and legal duties that apply to the Operator in Georgia.
3.4. We do not sell personal data.
4. Processors
4.1. Model providers process prompts and files to return output. Payment providers process the checkout. An email provider delivers service mail.
4.2. Those providers may be outside your country. We share only what is needed for the task.
4.3. A list of the current categories is available on request at the privacy contact.
5. Retention and your rights
5.1. Account data stays while the account is open and for a limited period afterwards where accounting or disputes require it.
5.2. You can ask for access, correction, or deletion of personal data, and you can object to processing that is not required to perform the contract.
5.3. Deletion of an account removes the profile. We may keep payment records and consent records for the period required by accounting rules and for handling disputes.
5.3.1. A saved payment method token is kept while a plan renews automatically. We delete it on request; after that the plan cannot renew.
5.4. Send requests to ceo@creo-market.com. We answer within 30 days.