Privacy Policy

This policy covers the CreateOS website and platform. Specific data-processing commitments for enterprise customers are set out in a Data Processing Agreement.

We collect account and contact details you provide, and limited usage and device data needed to operate and secure the website and platform.

We use information to provide, secure, and improve the service, to communicate with you, and to meet legal obligations.

Prompts and documents processed through the platform are handled in-session and are not retained by default. Your data is never used to train CreateOS models or any provider's models.

We do not sell your data. We share information only with subprocessors needed to run the service, under contract. A current subprocessor list is available on request.

We encrypt data in transit and at rest and apply access controls, audit logging, and the certifications described on our Security page.

Account and billing records are retained as required for operations and compliance. AI inputs and outputs are not retained by default.

Compute is region-aware. Sovereign deployments are region-locked with no cross-border data exposure. Where transfers occur, we apply appropriate safeguards.

Depending on your location, you may have rights to access, correct, or delete your personal data. Contact us to exercise them.

The website uses essential cookies and limited analytics. You can control non-essential cookies through your browser.

We may update this policy. Material changes will be communicated, and the updated date above will reflect the latest version.

Privacy questions and requests can be sent to [email protected].