Privacy policy

Effective October 4, 2026

This policy explains what Creyaa collects when you use creyaa.com and the Creyaa app, what we do with it, and the choices you have.

What we collect

  • Your account: your email, your password (stored only in hashed form), your first name, whether you make ads for your own company or for clients, and a profile photo or logo if you add one. If you sign in with Google, we receive your name and email from Google.
  • Your brands: the name and website of each brand you add, its brief, the files you upload, the questions you test, your feedback on ads, and any ad results you import.
  • The waitlist: if you join it, your email, your IP address, your browser type, and the page you joined from.
  • How you use Creyaa: the pages you visit and the actions you take in the app.
  • Billing: on a paid plan, Stripe handles your payment. We keep your Stripe customer and subscription details, never your card number.

How we use it

  • To run Creyaa: researching each brand, writing and producing its ads, and checking them against its brief.
  • To learn from your feedback and results. What Creyaa learns about a brand shapes that brand’s future ads only.
  • To run your account, take payment, and support you.
  • To email you about your account, such as when research is ready or your early access opens.
  • To keep Creyaa secure and stop abuse.
  • To understand how Creyaa is used and make it better.

Research on the web

To learn a brand, Creyaa visits its public website, takes screenshots of it, and searches the web for things like its competitors and reviews. This research uses public information only.

AI models

Creyaa makes ads with AI models from Anthropic (Claude) and OpenAI (images). We send them what they need to do that, such as a brand’s brief, its files, and its website’s text and screenshots. We don’t use your content to train AI models.

Who we share it with

We never sell your information. We share it only:

  • With the providers that run Creyaa: Vercel, Supabase and Fly.io (hosting and storage), Anthropic and OpenAI (AI models), Serper (web search), PostHog and Vercel Analytics (product analytics), Stripe (payments), and Resend (email).
  • With Meta, if you connect a Meta ad account. Creyaa only reads your ad results; it never changes your ads.
  • With people you share a batch with. Anyone with the link can view that batch and comment under their name until the link expires.
  • When the law requires it, or to protect Creyaa and the people who use it.
  • With a new owner, if Creyaa is sold or merges with another company, under this policy.

Cookies and analytics

We use cookies to keep you signed in and to remember small choices, like the brand you last opened. PostHog and Vercel Analytics record how the app is used; PostHog knows you by an account ID, not your email. We don’t use advertising cookies or tracking pixels.

Where and how long we keep it

Your data is stored and processed in the United States. We keep it while your account is open. Deleting a brand in the app removes its brief, research and batches from your workspace.

To delete your account and everything in it, including the files you uploaded, email us and we’ll do it. We keep billing records for as long as the law requires.

Security

Creyaa runs over encrypted connections, keeps each workspace’s data separate, and encrypts the access to any ad account you connect. A small number of Creyaa staff can access workspaces to run and support the service. No system is perfectly secure; if a breach affects your data, we’ll tell you as the law requires.

Your choices

You can download your ads at any time. Email us to get a copy of your data, to correct it, or to delete it, and to leave the waitlist or stop our emails.

Children

Creyaa is for businesses and isn’t meant for anyone under 18.

Changes

If we change this policy in a meaningful way, we’ll update the date above and tell you by email or in the app.