Privacy policy

This translation is provided for convenience. The French version is the only legally binding one.

Template to be reviewed before launch.

Data controller

[Name or company name], [address]. Contact: contact@creationflex.fr.

Data processed

• Account: email, display name, password (encrypted) or Google ID.
• Uploaded photos: used only to generate your images.
• Generated images and chosen settings (text of your request, place, format).
• Payment: handled by Whop; we never receive your card number.
• Site language: inferred from the country you connect from or from your choice, without storing your IP address.

Retention periods

• Uploaded photos: automatically deleted within 48 hours.
• Generated images: until you delete them or close your account.
• Billing data: 10 years (accounting obligation).

Processors

• Supabase (database, authentication, storage): London region (United Kingdom).
• Google Cloud, Vertex AI (image generation): Google does not reuse this content to train its models.
• Vercel (site hosting, functions run in London).
• Whop (payment and conversion measurement).

Some processors are based in the United States; these transfers are covered by the European Commission's standard contractual clauses or the Data Privacy Framework. Your photos are never used to train a model and are never shared.

Biometric data

CreationFlex does not extract or store any facial template. Your photo is sent to the image model only to produce the requested image.

Your rights

Access, rectification, erasure, portability, objection: write to contact@creationflex.fr. You can also delete your account and all your photos from Settings. You can lodge a complaint with the CNIL (cnil.fr).

Cookies and trackers

• Login session (necessary).
• Chosen language, cf_locale cookie (1 year).
• Referral link (30 days).
• Whop pixel: measures sign-ups and payments coming from our campaigns.