Privacy Policy

1. Data Controller

The data controller for CreativeNode is Node Nest Digital Limited, a company registered and operating in Kenya.

For any privacy-related enquiries, please contact us at support@creativenode.app.

2. Information We Collect

We collect the following information when you use CreativeNode:

• Email address (required) — used for account creation and authentication
• Business name (optional) — used to personalise your generated designs
• Industry (optional) — used to tailor AI-generated content to your sector
• Business contact phone (optional) — business phone number displayed on your generated marketing materials
• Business contact website (optional) — business website displayed on your generated marketing materials
• Product images (optional) — product or item photos you upload for use in generated designs. Only product images should be uploaded; personal photos are not accepted.
• Usage data — token usage, generation history, and service interactions

All contact information collected is business data voluntarily provided by you for display on your own marketing materials. We do not collect personal contact information for any other purpose.

3. What We Do NOT Collect

We want to be transparent about what data we do not collect or store:

• Passwords — We use passwordless authentication (email OTP). There is no password to store.
• Payment card details — Card payments are processed entirely by Paystack. We never see or store your card number, CVV, or expiry date.
• M-Pesa PINs — M-Pesa payments are processed via STK Push by Safaricom. We never have access to your M-Pesa PIN.
• Personal photographs or biometric data — We do not collect or process personal photographs or images of individuals. Only product/item images may be uploaded for design generation.

4. How We Use Your Data

Your information is used for the following purposes:

• Account management — Creating and maintaining your account, authenticating your sessions
• Service delivery — Generating personalised designs based on your business information
• Email communications — Sending authentication codes, support ticket updates, and important service notices
• Service improvement — Analysing usage patterns to improve design quality and user experience
• Billing — Managing your token balance and processing purchase records

5. AI and Your Data

CreativeNode uses third-party AI services to generate designs. Here is exactly what data is shared with AI providers:

We use trusted AI processing partners for text-based design generation and image generation. These partners process data per their enterprise API terms and do not use your data for model training. Data is processed transiently and not retained beyond the generation request.

6. Data Storage

Your data is stored using the following infrastructure:

• Database: Cloud database provider with encryption at rest and in transit
• Authentication: Secure cloud authentication with session management
• Application hosting: Cloud hosting provider
• Generated content: Stored temporarily for access and download

All data is transmitted over HTTPS with TLS encryption. Database access is restricted through security policies, ensuring users can only access their own data.

7. Third-Party Services

CreativeNode integrates with trusted third-party services in the following categories:

• AI processing partners — for design and image generation
• Cloud infrastructure — for hosting, database, and authentication
• Payment processors — Paystack (card payments) and M-Pesa (mobile money)
• Email delivery — for transactional communications only

Each service processes data in accordance with their own privacy policies. We only share the minimum data necessary for each service to function.

8. Data Retention

• Account data — Retained for as long as your account is active. Upon account deletion, your data will be permanently removed within 30 days.
• Generated content — Design outputs expire and are automatically deleted after 7 days unless saved by the user.
• Transaction records — Payment records are retained for 7 years as required by Kenyan tax regulations.
• Support tickets — Retained for 2 years after the last interaction for quality assurance purposes.

9. Your Rights

You have the following rights regarding your personal data:

• Access — Request a copy of all personal data we hold about you
• Correction — Request correction of inaccurate or incomplete data
• Deletion — Request permanent deletion of your account and all associated data
• Data export — Request a machine-readable export of your data
• Restriction — Request that we limit processing of your data in certain circumstances

To exercise any of these rights, please contact us at support@creativenode.app. We will respond to your request within 30 days.

10. Cookies

CreativeNode uses minimal cookies. We do not use advertising cookies, tracking cookies, or third-party analytics cookies.

• Authentication session token — Essential cookie required for maintaining your login session. This is strictly necessary for the service to function and cannot be disabled.

No cookie consent banner is required as we only use strictly necessary cookies for authentication.

11. Children

CreativeNode is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child under 18 has provided us with personal data, we will take steps to delete that information promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

• Update the “Last updated” date at the top of this page
• Notify registered users via email for significant changes
• Post a notice on the website

Your continued use of CreativeNode after changes are posted constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

• Email: support@creativenode.app
• Company: Node Nest Digital Limited
• Country: Kenya