Privacy Policy

1. Data Controller

The data controller for CreativeNode is Node Nest Digital Limited, a company registered and operating in Kenya.

For any privacy-related enquiries, please contact us at support@creativenode.app.

2. Information We Collect

We collect the following information when you use CreativeNode:

• Email address (required) — used for account creation and authentication
• Business name (optional) — used to personalise your generated designs
• Industry (optional) — used to tailor AI-generated content to your sector
• Business contact phone (optional) — business phone number displayed on your generated marketing materials
• Business contact website (optional) — business website displayed on your generated marketing materials
• Product images (optional) — product or item photos you upload for use in generated designs. Only product images should be uploaded; personal photos are not accepted.
• Photo Studio reference images (optional) — reference images you upload for AI Photo Studio sessions, including product photography, headshot references, and scene compositions
• Usage data — token usage, generation history, and service interactions

All contact information collected is business data voluntarily provided by you for display on your own marketing materials. We do not collect personal contact information for any other purpose.

3. What We Do NOT Collect

We want to be transparent about what data we do not collect or store:

• Passwords — We use passwordless authentication (email OTP via Supabase). There is no password to store.
• Payment card details — Card payments are processed entirely by Paystack. We never see or store your card number, CVV, or expiry date.
• M-Pesa PINs — M-Pesa payments are processed via STK Push. We never have access to your M-Pesa PIN.
• Personal photographs or biometric data — We do not collect or process personal photographs or images of individuals. Only product/item images and Photo Studio reference images may be uploaded for design and photo generation.

4. How We Use Your Data

Your information is used for the following purposes:

• Account management — Creating and maintaining your account, authenticating your sessions
• Service delivery — Generating personalised designs and AI photos based on your business information and reference images
• Email communications — Sending authentication codes, support ticket updates, and important service notices
• Service improvement — Analysing usage patterns to improve design quality and user experience
• Billing — Managing your token balance and processing purchase records

5. Content Safety Screening

Content safety screening: We screen prompts for potential misuse including deepfake attempts and impersonation. This screening is automated and does not involve human review of your content.

Our platform includes built-in safety guardrails to prevent the generation of deepfakes, impersonation of real individuals, and other harmful content. If a generation request is flagged by our safety systems, it may be rejected automatically. These measures are part of our commitment to responsible AI use.

6. AI and Your Data

CreativeNode uses third-party AI services to generate designs and photos. Here is exactly what data is shared with AI providers:

We use trusted AI processing partners for design generation and photo generation. These partners process data per their enterprise API terms and do not use your data for model training. Data is processed transiently and not retained beyond the generation request.

7. Data Storage

Your data is stored using the following infrastructure:

• Database: Cloud database provider with encryption at rest and in transit
• Authentication: Secure cloud authentication with session management (Supabase)
• Application hosting: Cloud hosting provider
• Generated content: Stored temporarily for access and download

All data is transmitted over HTTPS with TLS encryption. Database access is restricted through security policies, ensuring users can only access their own data.

8. Third-Party Services

CreativeNode integrates with trusted third-party services in the following categories:

• AI processing partners — for design and photo generation
• Cloud infrastructure — for hosting, database, and authentication
• Payment processors — Paystack (card payments in KES/USD) and M-Pesa (mobile money across East Africa)
• Email delivery — for transactional communications only

Each service processes data in accordance with their own privacy policies. We only share the minimum data necessary for each service to function.

9. Data Retention

• Account data — Retained for as long as your account is active. Upon account deletion, your data will be permanently removed within 30 days.
• Generated content — Design and photo outputs are automatically deleted after 14 days unless pinned by the user. Pinned content is retained for as long as your account is active.
• Transaction records — Payment records are retained for 7 years as required by Kenyan tax regulations.
• Support tickets — Retained for 2 years after the last interaction for quality assurance purposes.

10. Your Rights

You have the following rights regarding your personal data:

• Access — Request a copy of all personal data we hold about you
• Correction — Request correction of inaccurate or incomplete data
• Deletion — Request permanent deletion of your account and all associated data
• Data export — Request a machine-readable export of your data
• Restriction — Request that we limit processing of your data in certain circumstances

To exercise any of these rights, please contact us at support@creativenode.app. We will respond to your request within 30 days.

11. Cookies

CreativeNode uses minimal cookies. We do not use advertising cookies, tracking cookies, or third-party analytics cookies.

• Authentication session token — Essential cookie required for maintaining your login session. This is strictly necessary for the service to function and cannot be disabled.

No cookie consent banner is required as we only use strictly necessary cookies for authentication.

12. Children

CreativeNode is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child under 18 has provided us with personal data, we will take steps to delete that information promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

• Update the “Last updated” date at the top of this page
• Notify registered users via email for significant changes
• Post a notice on the website

Your continued use of CreativeNode after changes are posted constitutes your acceptance of the updated Privacy Policy.

14. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of the Republic of Kenya. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts of Kenya.

15. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

• Email: support@creativenode.app
• Company: Node Nest Digital Limited
• Country: Kenya