Privacy policyPrivacy policy

• We collect only what we need to run the waitlist, answer your messages and, in the app, make deals work.
• We never sell your data or share it with advertisers.
• The AI portfolio reads only posts you have made public, and you review it before anything is published.
• You can ask us to access, correct or delete your data at any time.

CreOn is operated by [Codefluxz registered name], [registered address], India ("Codefluxz", "we", "us"). For this policy, Codefluxz is the Data Fiduciary: we decide why and how your personal data is processed.

This policy covers the CreOn website and, once you are invited, the CreOn app during the pilot.

Payment card or bank details are handled by our payment provider, not stored by us. During the pilot, payments run in test mode.

If you are a creator and connect a social account, CreOn reads your public posts to draft a portfolio: your niche, style, best formats and best work. It does not read private messages or private posts.

The draft stays private until you review, edit and publish it. Post content is sent to an AI provider only to produce the draft, under terms that do not allow it to be used to train their models. [Confirm with the AI provider's terms.]

We process your personal data with your consent, which you give when you join the waitlist, send a message or create an account, and for the purposes listed above. You can withdraw consent at any time; this does not affect processing that already happened.

• Waitlist emails: use the unsubscribe link in any email, or write to us.
• Your account: delete it from the app settings, or write to us.
• Your AI portfolio: unpublish or delete it at any time.

We do not sell your personal data, and we do not share it with advertisers. We share it only with service providers that process it on our behalf, under contracts that limit them to that purpose:

• Hosting and storage: [hosting provider]
• Website analytics: Vercel (anonymous page views, no cookies)
• Email delivery: [email provider]
• Payments: [payment provider]
• AI processing for portfolios: [AI provider]

Inside CreOn, a creator's published profile is visible to brands, and the people in a deal see each other's details for that deal. We may also disclose data where Indian law requires it.

• Waitlist entries: until early access opens and you join, or until you unsubscribe.
• Messages to us: up to [12] months after we reply.
• Account data: while your account is open, then deleted within [30] days of closing it.
• Deal and payment records: as long as Indian tax and accounting law requires, then deleted.

Data is encrypted in transit, passwords are stored as one-way hashes, and access to personal data inside Codefluxz is limited to people who need it. No system is perfectly secure; if a breach affects your data, we will notify you and the Data Protection Board of India as the law requires.

Under the DPDP Act you can:

• ask what personal data we hold about you and how we use it;
• ask us to correct, complete, update or erase it;
• withdraw your consent;
• nominate someone to exercise these rights if you die or become unable to;
• raise a grievance with us, and then with the Data Protection Board of India.

Write to [privacy@your-domain]. We reply within [30] days.

CreOn is for people aged 18 and over and for businesses. We do not knowingly collect data from anyone under 18; if we learn we have, we delete it.

[Grievance Officer name], [Codefluxz registered name], [registered address]. Email: [grievance@your-domain]. We acknowledge grievances within 24 hours and resolve them within 15 days.

If we change this policy, we update the date at the top. For significant changes, we email waitlist members and account holders before they take effect.