PrivacyPolicy

Last updated: July 2026

1. Introduction & Data Controller

At Creatzi, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

Responsible Entity: Zenen Technologies Pvt Ltd, a company incorporated under the Companies Act, 2013 of India, is responsible for your Personal Data as described in this policy.

2. Scope

This Privacy Policy applies to all information collected through creatzi.ai and all services, features, and tools offered on or through the Platform. This policy does NOT apply to information collected by third-party websites or services linked to or from the Platform. We encourage you to review the privacy policies of any third-party services you interact with.

3. Information We Collect

(a) Account Data

Collected at signup: email address, password (stored in hashed form only), full name, and user type (student or professional).

(b) Profile Data

Optional: avatar/profile image.

(c) User-Generated Content

Content you voluntarily enter for your documents (this is not account data, it is content you create for your own use):

  • • Resume personal information: name, phone, location, job title, LinkedIn URL, website, GitHub URL
  • • Work experience, education history, skills, and certifications
  • • Cover letter content
  • • Presentation and pitch deck content
  • • Project descriptions and data

(d) AI Interaction Data

Prompts sent to AI features are processed transiently to generate responses. They are not permanently stored by the Company.

(e) Automatically Collected Data

IP address, device type, browser type and version, pages visited, session duration, timestamps, and referral source.

(f) Communication Data

Contact form submissions are processed via mailto and are NOT stored in our database.

(g) Usage Data

Credit transactions and rate limit counters.

(h) Cookies

See our Cookie Policy for details.

What We Do NOT Collect

We do not collect: phone numbers at signup, mailing or billing addresses, payment or credit card information (no payment system currently exists), usernames, Social Security numbers or government-issued IDs, or demographic information.

4. Legal Basis for Processing (GDPR Article 6)

  • Contract Performance: Processing necessary to provide the Services you have requested (account data, user-generated content, credits)
  • Consent: Where you have given explicit consent (AI feature usage, optional profile data, marketing communications)
  • Legitimate Interest: Processing necessary for our legitimate business interests (analytics, security, fraud prevention, service improvement)
  • Legal Obligation: Processing necessary to comply with legal requirements (tax records, law enforcement requests)

5. Purpose of Processing

  • • To provide, maintain, and improve our Services
  • • To process transactions and manage your credit balance
  • • To power AI features and generate content based on your inputs
  • • To personalize your experience on the Platform
  • • To communicate with you about updates, support, and service-related notices
  • • To detect, prevent, and address security threats, fraud, and abuse
  • • To analyze usage patterns and improve Platform performance
  • • To comply with legal obligations and enforce our Terms of Service

6. AI Features & Data Processing

When you use AI-powered features:

  • • Your inputs are sent to third-party AI service providers for processing
  • • We use API-tier access to AI providers, which typically does not use your inputs for model training. Please refer to each provider's data usage policies for details
  • • AI features are user-initiated only, and are never triggered automatically
  • • We maintain contractual commitments with our AI service providers regarding data handling
  • • We do not store AI-generated responses beyond immediate display to you

7. Data Sharing

(a) Service Providers

We share data with third-party service providers in the following categories (no specific vendors are named):

  • • Cloud infrastructure and hosting providers
  • • AI service providers
  • • Content delivery networks and security services
  • • Customer support tools

(b) Legal Requirements

We may disclose your data if required by law, regulation, legal process, or governmental request.

(c) Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will provide at least 30 days' notice before any such transfer.

(d) With Your Consent

We may share data for purposes not described here only with your explicit consent.

We do not sell, rent, or trade your personal data.

8. International Data Transfers

Your data may be processed in countries other than India. When we transfer data internationally:

  • • We use service providers that maintain appropriate safeguards for international data transfers
  • • We aim to comply with applicable data protection laws, including the GDPR and the Digital Personal Data Protection Act, 2023
  • • We take reasonable steps to ensure all recipients provide adequate levels of data protection

9. Data Security

We implement industry-standard security measures to protect your personal information:

  • • Industry-standard encryption for data in transit and at rest
  • • Secure password hashing (passwords are never stored in plain text)
  • • Database-level access controls
  • • Strict access controls and authentication requirements
  • • We will notify affected users of any data breach as required by applicable law

While we implement robust security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

10. Data Retention

  • Active Accounts: Data retained while your account is active and needed to provide Services
  • Deleted Accounts: Personal data permanently purged within 30 days of account deletion
  • Exported Documents: Generated on-demand and downloaded to your device, NOT stored on our servers
  • Tax & Financial Records: Retained for 7 years as required by applicable law
  • Legal Hold: Data may be retained longer if subject to legal proceedings or investigations
  • Anonymized Data: Aggregated, anonymized data may be retained indefinitely for analytics purposes

11. Cookies

We use cookies and similar technologies to operate the Platform. Cookie categories include:

  • Strictly Necessary: Authentication sessions, security verification
  • Functional: User preferences, theme settings
  • Analytics: Usage patterns and Platform performance (no personal document content)

For full details on cookies we use and how to manage them, please see our Cookie Policy.

12. Your Rights in India (DPDP Act, 2023)

Under the Digital Personal Data Protection Act, 2023, you have the right to:

  • Right to Access: Obtain a summary of your Personal Data and processing activities
  • Right to Correction: Correct inaccurate or incomplete Personal Data
  • Right to Erasure: Request deletion of your Personal Data
  • Right to Nomination: Nominate another individual to exercise your rights in the event of your death or incapacity
  • Right to Withdraw Consent: Withdraw previously given consent at any time
  • Right to Grievance Redressal: File a complaint with our Grievance Officer (response within 15 business days) or escalate to the Data Protection Board of India

13. Your Rights in the EU/EEA (GDPR)

Under the General Data Protection Regulation, you have the right to:

  • Right to Access: Request a copy of all Personal Data we hold about you
  • Right to Rectification: Correct any inaccurate or incomplete Personal Data
  • Right to Erasure: Request deletion of your Personal Data ("Right to be Forgotten")
  • Right to Restriction: Limit how we process your Personal Data
  • Right Regarding Automated Decisions: Not be subject to decisions based solely on automated processing, including profiling
  • Right to Lodge a Complaint: File a complaint with your local supervisory authority

14. Your Rights in California (CCPA/CPRA)

California residents have the following rights under the California Consumer Privacy Act and the California Privacy Rights Act:

  • Right to Know: Request information about the categories and specific pieces of Personal Data we have collected
  • Right to Delete: Request deletion of your Personal Data
  • Right to Opt-Out of Sale: We do not sell your Personal Data. If this changes, we will provide an opt-out mechanism
  • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

Categories of Personal Data Disclosed: In the preceding 12 months, we have collected the categories of information described in Section 3 above, disclosed to the service provider categories described in Section 7.

15. How to Exercise Your Rights

To access, export, delete your data, or withdraw consent, use the Data & Privacy section of your account dashboard, or email our Grievance Officer directly at privacy@creatzi.ai. Each request is verified against your account and actioned by a member of our team.

We will respond to verifiable requests within 15 business days (or as required by applicable law).

16. Children's Privacy

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect Personal Data from children under 18. If we become aware that we have inadvertently collected data from a child under 18, we will take steps to delete it promptly. If you are a parent or guardian and believe your child has provided us with Personal Data, please contact us at privacy@creatzi.ai.

17. Grievance Officer

In accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, the designated Grievance Officer is:

Grievance Officer: Pranay, Founder, Zenen Technologies Pvt Ltd

Email: privacy@creatzi.ai

Responds within 15 business days as required under the DPDP Act, 2023.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. For material changes, we will provide at least 30 days' notice via email or through the Platform. The "Last updated" date at the top of this page indicates when this policy was last revised. Your continued use of the Platform after such changes constitutes acceptance of the updated policy.

19. Contact Us

Zenen Technologies Pvt Ltd

Privacy inquiries: privacy@creatzi.ai

General support: support@creatzi.ai