Privacy Policy
Last updated: September 11, 2026
1. What this policy covers
This policy explains what personal information Creavya collects when you use the website and dashboard, why we collect it, and how it's stored and shared.
2. Information we collect
Account information
- Name and email address (provided directly, or via Google when you sign up with Google)
- Password: if you sign up with email/password, it is hashed by Supabase Auth; we never see or store your raw password
- Billing details: handled directly by Stripe; we store your Stripe customer ID and subscription status, not your card number
Content you provide
- Prompts you submit for video generation
- Your ElevenLabs API key, if you choose to add one, stored encrypted at rest and only decrypted server-side at the moment a video is generated
- Generated videos, titles, and captions produced from your prompts
Usage information
- Credit balance and transaction history (purchases, plan renewals, video generations, refunds)
- Basic technical logs (timestamps, request metadata) used for rate limiting and abuse prevention
3. How we use this information
| Purpose | Data used |
|---|---|
| Provide and operate the Service | Account info, prompts, ElevenLabs key |
| Process payments and manage subscriptions | Billing details via Stripe |
| Generate your videos | Prompts, sent to Google's AI models; narration text, sent to ElevenLabs with your key |
| Prevent abuse and enforce rate limits | Usage logs, account ID |
| Respond to support requests | Email address, account info |
4. Third parties we share data with
We rely on the following processors to operate the Service. Each has its own privacy policy governing how they handle data on our behalf:
- Supabase: authentication, database, and file storage
- Google (AI Studio / Gemini / Veo): receives your prompts and script text to generate video scenes and story content
- ElevenLabs: receives narration text, using the API key you provide, to generate voice audio
- Stripe: processes payments and manages subscriptions; receives billing information directly from you
We do not sell your personal information to third parties.
5. Data security
Passwords are hashed, never stored in plain text. Sensitive fields you provide, such as your ElevenLabs API key, are encrypted at rest and only decrypted momentarily, server-side, when needed to generate a video. No method of storage or transmission is perfectly secure, and we cannot guarantee absolute security.
6. Data retention
We retain account information and generated content for as long as your account is active. You can delete your account at any time; we will delete or anonymize your personal information within a reasonable period afterward, except where we're required to retain records (for example, transaction records for tax or accounting purposes).
7. Your rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at support@creavya.com.
8. Cookies
We use cookies and similar technologies necessary to keep you signed in and to operate the dashboard securely. We do not currently use third-party advertising cookies.
9. Children's privacy
The Service is not directed at children, and we do not knowingly collect personal information from children under the age required by applicable law to consent to data processing.
10. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
11. Contact
Questions about this Privacy Policy can be sent to support@creavya.com.