CCreative Assets Studio

Legal

Privacy Policy

Last updated: [PLACEHOLDER date]

This Privacy Policy explains how [PLACEHOLDER: legal entity name] ("we", "us") collects, uses, and protects personal information when you use Creative Assets Studio.

1. Data we collect

  • Account data: email, name, password hash.
  • Order data: email, name, phone (optional), products purchased, amount, transaction reference.
  • Payment data: handled and stored entirely by our payment processor. We never see or store full card numbers.
  • Support data: messages you send to us and any files you attach.
  • Technical data: IP address, browser/device information, and pages visited, collected via cookies and analytics.

2. Purposes & legal bases

We process your data to (a) provide the Service and deliver your purchases, (b) fulfil our contract with you, (c) comply with legal obligations (tax, accounting), (d) send you transactional emails, and (e) improve the Service based on aggregated analytics (legitimate interest).

3. Third-party processors

We share data with the following categories of processors, each bound by their own privacy commitments:

  • Payment processing: Stripe / Paddle / Paystack.
  • Email delivery: Resend or equivalent transactional email provider.
  • Backend / database / storage: Supabase (via Lovable Cloud).
  • Hosting & CDN: Vercel / Lovable hosting.
  • Analytics: Vercel Analytics or equivalent privacy-respecting analytics.

4. Data retention

Account and order records are retained for as long as your account is active and for a further period required for legal, tax, and accounting purposes (typically 5–10 years depending on jurisdiction). Support messages are retained for up to 3 years unless you request earlier deletion.

5. International transfers

Some of our processors are based outside your country, including the United States and the European Union. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.

6. Your rights

Depending on your jurisdiction (GDPR, LGPD, POPIA, CCPA, etc.), you have the right to access, rectify, delete, restrict, or port your personal data, and to object to certain processing. To exercise any right, email support@creativeassets.studio.

7. Cookies

We use strictly necessary cookies (session, authentication, cart) and, with your consent, optional analytics cookies. You can control cookies through the banner on first visit and via your browser settings.

8. Security

We use HTTPS everywhere, industry-standard password hashing, encryption at rest for user data, and access controls limited to authorised personnel. No system is 100% secure — please use a strong, unique password.

9. Children

The Service is not intended for children under 16 and we do not knowingly collect data from them.

10. Contact

Data controller: [PLACEHOLDER: legal entity], [PLACEHOLDER: address]. Email support@creativeassets.studio or visit the Contact page.