Legal
Privacy Policy
Last updated 10 October 2026
CREO is a product of SiferTech. This policy explains what we collect when you use CREO, why, and the choices you have. We keep it short and specific on purpose.
What we collect
- Account: your name, email, and a securely hashed password. We never store your password in plain text.
- Business & brand information you give us or that we read from a website you ask us to import — used to ground your designs.
- Content you create in CREO: designs, captions, campaigns, and brand assets.
- Connected Meta data (only if you connect it): your Facebook Pages, linked Instagram professional accounts, and metrics for posts you have published. Meta handles that sign-in — CREO never receives your Facebook password.
- Technical logs needed to run the service reliably and to record the cost of each AI generation.
How we use it
- To run CREO: generate on-brand directions, render designs, and write captions.
- To show you your own real analytics from connected accounts — we do not invent sample numbers.
- To keep the service secure, reliable, and within cost limits.
AI processing
To generate designs and copy, the brief and business context you provide are sent to third-party AI providers that process them on our behalf (listed below). Each generation is logged with its cost. We do not sell your content. We do not use your content to train our own models for other customers; providers handle data under their own terms.
What we store
- Your account: Name, email, a scrambled (hashed) password, your settings, and sign-in sessions. The network address and browser of a sign-in are stored only as one-way scrambled values.
- Your businesses: Brand kits (logo, colours, fonts, voice, business description, products and offers), what CREO has learned about each brand, and any website you asked CREO to read.
- Your files: Logos, product photos and other files you upload, and every design image CREO renders. The original upload is always kept unchanged.
- Your posts: The brief you wrote, captions, hashtags, the layered design, every saved version, approvals, and your schedule and publishing history. A history of the changes made to each post is also kept so CREO can learn what good looks like for your brand. It is not shared outside CREO.
- AI activity: A log of each AI request: which service and model ran, a short summary of what was asked and returned, how long it took, what it cost and whether it failed. This is how we keep costs honest and diagnose problems.
- Chats and credits: Your conversations with CREO, your credit balance and its history.
- Connected accounts (only if you connect): Your Facebook Pages and linked Instagram accounts, post results and audience numbers. The sign-in token is stored encrypted; CREO never sees your Facebook password.
- Feedback and problem reports: Anything you send us from the app, with the post it was about and a snapshot of what went wrong.
Who receives your information
CREO uses outside AI services to do the creative work. Only the parts needed for a task are sent. Cutting out products, reading text in images and laying out designs run on our own servers. We do not sell your information.
| Service | Used for | What it receives |
|---|---|---|
| Anthropic (Claude) | Writing captions, planning designs, reading your brand, and checking finished designs | Your brief, business and brand details, and the finished design image (shrunk) for the quality check |
| OpenAI | Backup for writing and planning; drawing images; editing part of an image | Your brief and brand details; the image and the area you select when you use AI region edit; product photos you add to a design, so the designer can build the design around them |
| Google (Gemini) | Backup for writing and planning; drawing images | Your brief and brand details; product photos you add to a design, so the designer can build the design around them |
| fal.ai (Flux) | Backup image drawing | The picture description only. No photos. |
| Razorpay | Only if you buy a plan or credits: taking the payment | The amount and an order number from us. Card, UPI or bank details, email and phone you type into Razorpay's checkout go to Razorpay, not to CREO. |
| Meta (Facebook / Instagram) | Only if you connect: publishing what you approve and reading your results | The post you approve, and your account details |
| Our hosting provider | Running CREO: database and file storage | Everything stored above |
These services keep and use data under their own terms, which we do not control. Which ones run for a given task can change when one is busy, so the list above is every service that may receive that kind of information.
How long we keep it
We keep your data while your account is open. You can delete a post or brand at any time. We do not yet delete old content automatically. Deleting your account removes it all.
Download your data
In Settings → Profile → Export my data you can download a zip with everything above (as a readable file) plus your uploaded and generated images. It leaves out passwords and connection tokens.
Delete your account
In Settings → Profile → Delete account, after you type DELETE, this is removed straight away and cannot be undone:
- Your login, name and email
- Every business and brand kit, with its colours, fonts, voice and memory
- All posts, captions, designs, schedules and editor versions
- All photos, logos and files you uploaded and every image CREO made for you
- Your chats with CREO, credit history, feedback and problem reports
- The history of AI requests made for your brands
- Your saved Facebook / Instagram connections (CREO can no longer reach them)
Copies inside our database backups are overwritten as those backups expire. AI services we used may keep their own copies under their own terms. CREO stays listed in your Facebook settings until you remove it there. If your workspace is shared with other people we ask you to leave it first, so nobody loses their work. Can't use the app? Email support@sifertech.com.
What we never do
- We do not sell your personal data.
- We do not publish anything to your connected accounts without your explicit approval.
- We do not store your Facebook or Instagram password.
Sharing
We share data only with the infrastructure and AI providers that operate the service, and with Meta for the accounts you choose to connect. We may disclose information if required by law, for example to a court or a government agency acting under Indian law.
Your consent and your rights
We process your personal data on the basis of the consent you give when you create an account, for the purposes listed above and nothing else. Under the Digital Personal Data Protection Act, 2023 you can:
- Access a summary of your data and who received it — download it from Settings, and see the table above.
- Correct or update it — edit your profile and brand kit, or email us.
- Erase it — delete posts, brands or your whole account from Settings.
- Withdraw consent at any time — deleting your account withdraws it and stops all processing; disconnecting Meta stops all collection from that account. Withdrawal does not undo processing that already happened.
- Nominate someone to exercise these rights if you die or become unable to — email us with their details.
- Complain to our grievance contact (below), and then to the Data Protection Board of India.
Children
CREO is for people aged 18 and over who run or work for a business. We do not knowingly collect data from children and we do not track or target advertising at anyone. If you believe a child has created an account, tell us and we will delete it.
Cookies
CREO uses only the cookies needed to keep you signed in and to protect your session from forgery. We use no advertising, tracking or third-party analytics cookies, so there is nothing to opt out of.
Where data is processed
Some of the AI services listed above process data outside India. We use them only to deliver the task you asked for, and only for countries the Government of India has not restricted.
Data breaches
If a breach affects your data we will tell you and the Data Protection Board of India, as the law requires, and say what happened and what you can do.
Security
Data is encrypted in transit, passwords are hashed, and access is restricted. No system is perfectly secure, but we treat your brand and business data as confidential.
Who we are and how to reach us
- Company: [to be added before launch]
- Address: [to be added before launch]
- Grievance contact: [to be added before launch]
- Email: support@sifertech.com
Complaints about your data or about content made with CREO go to the grievance contact above (Information Technology Rules, 2021 and the Digital Personal Data Protection Act, 2023). We acknowledge every complaint within 24 hours and resolve it within 15 days. Reports of intimate or sexual images of a person shared without consent, or impersonation, are acted on within 24 hours. If you are not satisfied with our answer you may complain to the Data Protection Board of India.
Changes
We will update this page when our practices change and revise the date above.