Privacy Policy

Last updated: 2025-09-18

This Privacy Policy explains how Creapic ("we", "our"), a company based in France, processes your personal data when you use our AI‑powered food image generation services for designers to integrate into visual assets (e.g., menu boards). Contact: admin@creapic.click.

1. Controller

Creapic (France) is the data controller under the GDPR. For any request or to exercise your rights: admin@creapic.click.

2. Data we process

  • Account data: name, email, hashed password, organization identifiers, preferences.
  • Billing data: information necessary for invoicing/VAT (processed by payment providers).
  • User‑provided content: prompts, settings, generated images, usage history.
  • Technical logs: IP addresses, device identifiers, events, diagnostics, anti‑fraud signals.
  • Cookies/trackers: strictly necessary cookies and, subject to consent, analytics.

We do not request special categories of data. Please avoid including personal data in prompts or images (e.g., identifiable faces) unless you have a proper legal basis.

3. Purposes and legal bases (GDPR)

  • Service provision (accounts, image generation, support): performance of a contract (Art. 6(1)(b)).
  • Billing, legal compliance (accounting, VAT): legal obligation (Art. 6(1)(c)).
  • Security, fraud prevention, service improvement, aggregated statistics: legitimate interests (Art. 6(1)(f)).
  • Non‑essential cookies/analytics: consent (Art. 6(1)(a)).

4. Recipients and processors

We use service providers acting on our instructions, including cloud hosting, analytics, email delivery, payments/billing, customer support, and logging. Categories of providers may change over time. We do not sell your data.

5. International transfers

When data is transferred outside the EU/EEA, we implement appropriate safeguards (EU Standard Contractual Clauses, and supplementary measures where required). You can contact us for more information.

6. Retention

  • Account and content: for the duration of the contract, then deletion or anonymization within a reasonable period.
  • Billing: retained to meet legal obligations (typically up to 10 years in France for accounting records).
  • Security logs: proportionate duration (often 6–24 months) depending on purpose.
  • Cookies: according to their purpose and your browser settings.

7. Your rights

You have rights of access, rectification, erasure, restriction, objection, portability, and the right to withdraw consent at any time (where processing is based on consent). You may lodge a complaint with the CNIL (www.cnil.fr). To exercise your rights: admin@creapic.click.

8. Cookies

We use:

  • Strictly necessary cookies (authentication, security, preferences);
  • Analytics/performance cookies subject to your consent where applicable. You can manage preferences via your browser and, if available, our consent banner.

9. Security

We apply appropriate technical and organizational measures to protect data (encryption in transit, access controls, logging). No system is perfectly secure: you are responsible for keeping your credentials confidential.

10. Children

The service targets professional users. We do not knowingly target minors.

11. Automated decisions / AI

We use AI models to generate images from prompts. We do not take decisions producing legal or similarly significant effects about you solely by automated means.

12. Third‑party data and IP

You remain responsible for prompts and usage of generated images (e.g., copyright, likeness rights, food labeling/allergen regulations). We disclaim liability for your use of outputs.

13. Contact

Creapic – France Email: admin@creapic.click

14. Changes

We may update this Policy. The current version is posted with its effective date. If we make material changes, we will notify you by reasonable means.