Privacy Policy

The information we collect depends on how you use Crevator.

1.1 Account and Profile Information

When you create and use a Crevator account, we may collect:

• Email address
• Password or authentication credentials
• Profile photo
• Country
• Preferred currency
• Creator or social media handles
• VAT or tax identification information when voluntarily provided for invoicing features

Passwords are handled through our authentication infrastructure and are not intended to be available to Crevator personnel in readable form.

1.2 Creator Business and CRM Information

Crevator allows creators to manage their UGC business. You may therefore choose to enter information including:

• Brand or client names
• Brand contact names and email addresses
• Deal information
• Deal values
• Payment amounts
• Payment dates
• Campaign information
• Notes
• Contracts
• Invoice information
• VAT and tax information
• Payment-related information
• Other information relating to your creator business

Some of this information may relate to third parties, such as a brand representative with whom you are working.

You are responsible for ensuring that you have an appropriate basis to provide personal information about other individuals to Crevator.

1.3 Files and User Content

Crevator allows users to upload and store content associated with their creator business.

This may include:

• Contracts
• PDF files
• Documents
• Images
• Videos
• Creative assets
• Campaign materials
• Other files uploaded by the user

Files are currently stored using Cloudflare R2.

Users control the content they choose to upload and should avoid uploading personal or confidential information that is unnecessary for their use of Crevator.

1.4 Invoice and Tax Information

If you use Crevator's invoicing features, you may provide information necessary to prepare and manage invoices, such as:

• Seller information
• Client or buyer information
• VAT numbers
• Tax information
• Payment information
• Invoice amounts and dates
• Currency information

Crevator provides tools for organizing this information but does not provide legal, accounting, or tax advice.

1.5 Subscription and Billing Information

Paid Crevator subscriptions are processed through Paddle.

When you purchase a paid subscription, Paddle may process information such as your:

• Name
• Email address
• Billing information
• Payment method
• Transaction information
• Subscription status
• Country and tax-related information

Crevator does not store your full payment card details for Crevator subscription purchases.

We may receive limited billing and subscription information from Paddle necessary to determine your subscription status, provide Pro features, manage billing-related functionality, and maintain appropriate business and accounting records.

1.6 Creator Payments Through Stripe

Crevator may provide payment functionality using Stripe Connect/Express, allowing creators to receive payments associated with their work.

Stripe processes payment and financial information necessary to provide these services.

Crevator does not itself store full payment card information or full banking credentials used by Stripe.

We may receive limited transaction, payment status, account, or related information from Stripe where necessary to provide payment functionality within Crevator.

Your use of Stripe-related payment functionality may also be subject to Stripe's own terms and privacy practices.

Crevator provides AI-powered features including:

• AI Coach
• AI Script Generator
• Contract Analyzer

These features currently use technology provided by OpenAI.

When you choose to use an AI feature, information necessary to process your request may be transmitted to OpenAI.

Depending on the feature, this can include:

• Your prompt or question
• Deal information
• Campaign information
• Notes
• Contract text
• Uploaded content relevant to the request
• Other context you choose to provide

For example, when you submit a contract for analysis, relevant contract content may be processed by OpenAI so that Crevator can provide the requested analysis.

You should not submit unnecessary sensitive personal information to AI features.

Crevator may use information about how users interact with its AI functionality to operate, personalize, evaluate, secure, and improve the experience. We will not describe user information as being used to train AI models unless such training actually occurs.

AI-generated responses may contain mistakes and should not be treated as professional legal, financial, tax, medical, or other professional advice.

Crevator's AI features do not make automated decisions that produce legal or similarly significant effects on users.

Crevator allows users to create and publish creator portfolios.

When you choose to publish a portfolio, information you place on that portfolio may become publicly accessible on the internet without requiring a Crevator account.

Depending on what you choose to publish, this may include:

• Your name
• Biography
• Social media links
• Videos and creative work
• Previous clients or brands
• Testimonials
• Contact email address
• Other portfolio information you choose to display

You should only publish information you are comfortable making publicly available.

Public information may potentially be viewed, copied, indexed by search engines, shared, or otherwise accessed by third parties outside Crevator's control.

Unpublishing or deleting information from Crevator does not necessarily remove copies previously made or indexed by independent third parties.

Crevator functions partly as a creator CRM.

This means users may enter personal information relating to people who do not themselves have Crevator accounts, such as:

• Brand representatives
• Client contacts
• Names
• Business email addresses
• Communications or notes relating to a business relationship

In these circumstances, Crevator processes that information in order to provide the service requested by the Crevator user.

Users are responsible for ensuring that information they enter about third parties is collected and used lawfully and appropriately.

We may use personal information to:

• Create and maintain user accounts
• Authenticate users
• Provide Crevator's features and services
• Manage creator deals and campaigns
• Provide CRM functionality
• Store user files
• Generate and manage invoices
• Provide creator payment functionality
• Process Crevator Pro subscriptions
• Determine Free and Pro access
• Provide AI-powered functionality
• Generate scripts and contract analyses
• Personalize and improve the service
• Publish portfolios at a user's request
• Send transactional and service communications
• Prevent fraud, abuse, and security incidents
• Diagnose technical problems
• Maintain and improve Crevator
• Comply with legal, accounting, tax, and regulatory obligations
• Establish, exercise, or defend legal claims

Where the GDPR or similar European data protection laws apply, we process personal data under one or more appropriate legal bases.

Performance of a Contract

We process information necessary to provide Crevator when you create an account and use our services.

This includes providing account functionality, CRM tools, storage, subscriptions, portfolios, AI tools, invoicing features, and other requested functionality.

Legitimate Interests

We may process information where necessary for legitimate business interests, such as:

• Maintaining and improving Crevator
• Securing our services
• Preventing fraud and abuse
• Understanding service performance
• Providing customer support
• Protecting our rights and users

We consider these interests against the rights and interests of affected individuals.

Legal Obligations

We may process and retain information when necessary to comply with applicable laws, including accounting, tax, regulatory, and legal obligations.

Consent

Where required, we may rely on your consent for specific processing activities.

When processing is based on consent, you may withdraw your consent, subject to applicable law.

We do not sell personal information to advertisers.

We use third-party service providers to operate Crevator. These providers may process information on our behalf or, depending on the service, act under their own privacy responsibilities.

Current providers include:

• Lovable — application development and infrastructure-related services.
• Supabase — database, authentication, and related backend services.
• Cloudflare — file storage and infrastructure, including Cloudflare R2.
• OpenAI — AI processing for features including AI Coach, Script Generator, and Contract Analyzer.
• Paddle — Crevator Pro subscription billing, payments, and related tax/payment services.
• Stripe — creator payment functionality through Stripe Connect/Express.

Each provider processes information according to its role and applicable terms and privacy practices.

We may also disclose information where reasonably necessary to:

• Comply with applicable law or legal process
• Respond to lawful government requests
• Investigate fraud or security incidents
• Enforce our agreements
• Protect Crevator, our users, or others
• Establish or defend legal claims

If Crevator is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, information may be transferred as part of that transaction subject to applicable law.

Crevator is based in Sweden but operates internationally and uses service providers that may process information in countries outside Sweden or the European Economic Area.

Where required by applicable law, we take appropriate measures intended to protect personal data transferred internationally.

These measures may include adequacy decisions, Standard Contractual Clauses approved by the European Commission, or other legally recognized safeguards.

The specific location of processing may depend on the service provider and infrastructure used.

Crevator may use cookies or similar technologies that are necessary for functions such as:

• Authentication
• Maintaining sessions
• Security
• Remembering essential settings
• Providing requested functionality

At present, Crevator does not intentionally use advertising or retargeting cookies as part of its current service.

If we introduce analytics, advertising, retargeting, or other non-essential tracking technologies in the future, we will update our practices and, where required, obtain appropriate consent before using them.

Crevator currently uses email primarily for transactional and account-related communications, including:

• Account verification
• Password resets
• Subscription payment and renewal information
• Failed payment notifications
• Important service or account communications

These communications may be necessary for providing the service and may not always be optional.

Crevator does not currently send promotional email marketing.

If we introduce marketing communications in the future, we will provide appropriate choices and opt-out mechanisms and obtain consent where required by applicable law.

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the service and meeting legal, security, accounting, tax, dispute-resolution, and regulatory requirements.

Different categories of information may have different retention periods.

When a user deletes their Crevator account, we aim to delete or anonymize personal information associated with the account, including user files and account content, except where information must be retained for legitimate legal reasons.

For example, limited transaction, billing, tax, or accounting records may need to be retained after account deletion where required by applicable law.

Information may also remain temporarily in backups or security systems until those systems are overwritten according to normal retention schedules.

Users may request or initiate deletion of their Crevator account through available account functionality.

Account deletion may result in deletion of:

• Login credentials
• Profile information
• Creator CRM data
• Deals and campaigns
• Files
• Portfolio content
• AI-related account data
• Other account content

Certain limited records may be retained where required for legal, accounting, tax, fraud-prevention, dispute-resolution, or regulatory purposes.

Deleting a Crevator account does not necessarily cause independent third-party providers such as Paddle or Stripe to erase records they are independently required or permitted to retain.

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

These measures may include authentication controls, access restrictions, encrypted connections, managed cloud infrastructure, and other security practices appropriate to the service.

However, no online service or storage system can guarantee absolute security.

Users are responsible for protecting their account credentials and should notify us if they believe their account has been compromised.

Depending on where you live, you may have legal rights regarding your personal information.

Under the GDPR, these may include the right to:

• Request access to personal data we hold about you
• Request correction of inaccurate information
• Request deletion of personal information
• Request restriction of processing
• Receive certain personal information in a portable format
• Object to certain processing based on legitimate interests
• Withdraw consent where processing relies on consent
• Lodge a complaint with a competent data protection authority

These rights are subject to conditions and exceptions under applicable law.

To exercise a privacy right, contact:

support@crevator.com

We may need to verify your identity before fulfilling certain requests.

Because Crevator is based in Sweden, users may have the right to lodge a complaint with the Swedish data protection supervisory authority:

Integritetsskyddsmyndigheten (IMY)

You may also have the right to contact the relevant supervisory authority in the country where you live or work, where applicable.

Crevator is not intended for children under the age of 16.

Users must be at least 16 years old to create an account.

Users under 18 should only use Crevator where they are legally permitted to do so and, where required under applicable law, with authorization from a parent or legal guardian.

If we learn that personal information has been collected from a person below the applicable minimum age without an appropriate legal basis, we may take steps to delete the information and close the account.

Crevator uses artificial intelligence to provide assistance, analysis, suggestions, scripts, and other user-requested outputs.

These AI features are intended to assist users.

Crevator does not currently use automated decision-making or profiling to make decisions that produce legal or similarly significant effects concerning users.

We may update this Privacy Policy as Crevator develops, our service providers change, new functionality is introduced, or legal requirements change.

When we make material changes, we may notify users through Crevator, by email, or through another appropriate method.

The "Last Updated" date at the top of this policy indicates when it was most recently revised.

Continued use of Crevator after an updated policy becomes effective may be subject to the updated policy as permitted by applicable law.

For questions, concerns, or requests relating to privacy or this Privacy Policy, contact:

Crevator
Stockholm, Sweden
Email: support@crevator.com
Website: www.crevator.com