GDPR Compliance Policy

Last Updated: May 2026

CreativeStudio AI (“CreativeStudio,” “we,” “our,” or “us”) is committed to protecting the privacy and rights of individuals located in the European Economic Area (EEA), the United Kingdom, and other jurisdictions with similar privacy laws.

This GDPR Compliance Policy explains how we process, store, and protect personal data in accordance with the General Data Protection Regulation (“GDPR”).

1. Data Controller

CreativeStudio AI
Website: https://creativestudioapp.com
Email: support@creativestudioapp.com

CreativeStudio AI acts as the data controller for personal information collected through our platform and services.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

• Name and account details
• Email address
• Billing and payment information
• IP address and device information
• Usage analytics and platform activity
• Media uploads and AI-generated content
• Support requests and communications
• Cookies and tracking data

3. Legal Basis for Processing

We process personal data under one or more of the following legal bases:

• Consent — when you voluntarily provide information or accept cookies
• Contractual necessity — to provide services you requested
• Legitimate interests — to improve, secure, and operate the platform
• Legal obligations — to comply with applicable laws and regulations

4. How We Use Personal Data

We use personal data to:

• Create and manage user accounts
• Provide AI-powered creative services
• Process subscriptions and payments
• Improve user experience and platform performance
• Prevent fraud and abuse
• Send service notifications and support communications
• Comply with legal obligations

5. AI and Automated Processing

CreativeStudio AI may use artificial intelligence systems to process uploaded media, prompts, and generated content.

Users acknowledge that:

• AI outputs may not always be accurate
• Generated content should be reviewed before commercial use
• Some processing may involve third-party AI providers

6. Data Retention

We retain personal data only as long as necessary to:

• Provide services
• Maintain user accounts
• Meet legal obligations
• Resolve disputes
• Enforce agreements

Users may request deletion of their account and associated data, subject to applicable legal requirements.

7. Your GDPR Rights

If you are located in the EEA or UK, you may have the following rights:

• Right of Access — request access to your personal data
• Right to Rectification — correct inaccurate information
• Right to Erasure — request deletion of your data
• Right to Restrict Processing — limit certain processing activities
• Right to Data Portability — receive your data in a portable format
• Right to Object — object to processing based on legitimate interests
• Right to Withdraw Consent — withdraw consent at any time
• Right to Lodge a Complaint — contact your local data protection authority

8. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain authentication sessions
• Remember user preferences
• Analyze traffic and usage
• Improve performance and security

Users may manage cookie preferences through browser settings or platform consent tools.

9. Data Sharing

We do not sell personal data.

We may share information with trusted service providers including:

• Cloud hosting providers
• Payment processors
• Analytics platforms
• AI infrastructure providers
• Customer support systems

Third-party providers are required to implement appropriate security and privacy protections.

10. International Transfers

Your information may be transferred to and processed in countries outside your jurisdiction.

Where required, we implement safeguards such as:

• Standard Contractual Clauses (SCCs)
• Data Processing Agreements (DPAs)
• Secure cloud infrastructure practices

11. Security Measures

We implement reasonable technical and organizational safeguards including:

• Encrypted authentication systems
• Access controls
• Secure payment processing
• Infrastructure monitoring
• Security auditing and logging

However, no internet-based system can guarantee absolute security.

12. Children’s Privacy

CreativeStudio AI is not intended for individuals under the age required by applicable law.

We do not knowingly collect personal data from children.

13. Data Requests

To submit a GDPR-related request, contact:

Email: support@creativestudioapp.com

We may require identity verification before processing requests.

14. Updates to This Policy

We may update this GDPR Compliance Policy periodically.

Changes become effective when published on the platform.

15. Contact Information

CreativeStudio AI
Website: https://creativestudioapp.com
Support: support@creativestudioapp.com

16. Legal Disclaimer

This GDPR Compliance Policy is provided as a general informational template and should be reviewed by a qualified legal professional before official publication or legal reliance.