This Privacy Policy explains how C Studios LLC ("Creamify," "we," "us," or "our") collects, uses, discloses, stores, and protects information when you access or use creamify.ai and any related products and services that link to this policy (the "Services").

Creamify is an AI media-generation service. That means prompts, uploaded source media, generation settings, outputs, account data, payment records, and technical data may be processed to provide, secure, moderate, and improve the Services. If you do not agree with this policy, do not use the Services.

1. Information We Collect

Information You Provide

Account information. We collect information used to create, authenticate, and manage your account, such as email address, profile image, login provider identifiers, account preferences, account status, and authentication/session information.
Payment and transaction information. When you purchase Coins or other paid features, third-party payment processors collect and process payment details. We may receive transaction identifiers, order status, payment status, purchased package, amount, currency, tax information, chargeback status, and related billing records. We do not store your full payment card number.
Generation content and settings. We collect prompts, negative prompts, prompt enhancements, uploaded source images or videos, generated images or videos, model choices, style choices, LoRA references, source-media references, seeds, dimensions, duration, steps, CFG values, workflow identifiers, storage mode, and other settings or metadata needed to run, deliver, moderate, troubleshoot, and bill generation jobs.
Cloud gallery information. If you use Cloud Mode, we may store generated media, source-media copies, prompts, generation metadata, likes, deletion/archive status, and gallery activity associated with your account.
LoRA and provider information. If you submit LoRA URLs, model-version identifiers, or provider credentials/tokens for retrieval, we process that information to validate, retrieve, install, and run the requested assets. We use reasonable safeguards for provider tokens, but you should not submit credentials unless you have authority to do so.
Communications. We collect information you provide when contacting support, reporting abuse, submitting rights claims, responding to surveys, or otherwise communicating with us.

Information Collected Automatically

Usage and log data. We collect information about your use of the Services, such as IP address, browser type, device type, operating system, pages viewed, features used, request timestamps, referring URLs, error logs, generation job status, moderation events, credit transactions, and diagnostic information.
Device and approximate location data. We may infer approximate location from IP address and collect device, browser, network, and configuration information. We do not intentionally collect precise GPS location through the Services.
Cookies and local storage. We use cookies, localStorage, IndexedDB, and similar technologies for authentication, session security, account display, storage-mode preferences, local gallery behavior, checkout, analytics, debugging, and service functionality.

Sensitive or Personal Content You Choose to Provide

User-submitted prompts, uploads, and outputs may reveal sensitive information, creative preferences, biometric or likeness information, private images, or information about other people. Do not submit content unless you have the legal right and any required consent to do so. We do not knowingly collect information from anyone under 18.

2. How We Use Information

We use information for the following purposes:

provide, operate, maintain, and personalize the Services;
create and authenticate accounts and maintain secure sessions;
process prompts, uploads, settings, and outputs through AI systems;
run generation queues, moderation checks, billing, refunds, and job recovery;
store and display cloud-gallery items when you choose Cloud Mode;
deliver temporary results and support local-gallery saving in Privacy Mode;
process purchases, maintain credit balances, and prevent payment abuse;
detect, prevent, investigate, and respond to fraud, abuse, illegal content, policy violations, and security incidents;
respond to support requests, reports, rights claims, and legal process;
debug, monitor, analyze, and improve the performance and reliability of the Services;
develop and improve features, workflows, safety systems, and user experience;
send service, transactional, legal, security, and support communications; and
comply with law, enforce our Terms of Service, and protect rights, safety, and property.

We do not intentionally use your Privacy Mode prompts, uploads, or outputs to train public third-party foundation models without your consent. We may use aggregated, de-identified, or operational metadata to understand and improve service performance, safety, billing, reliability, and abuse prevention.

3. AI Processing and Service Providers

To generate and deliver media, Creamify may process your prompts, uploads, settings, and outputs through our backend, object storage, moderation systems, AI inference infrastructure, queue workers, prompt-enhancement tools, and other vendors or service providers. Some generation, moderation, hosting, storage, authentication, analytics, payment, email, support, and infrastructure functions are provided by third parties.

These providers process information for us or as needed to provide their services. Provider handling of data may also be subject to their own terms, privacy policies, data-processing agreements, retention rules, security practices, and legal obligations.

4. Privacy Mode and Cloud Mode

Privacy Mode

Privacy Mode is designed to avoid saving completed generations to your Creamify cloud gallery. It is not on-device generation, offline processing, end-to-end encryption, or a guarantee that Creamify or its service providers cannot process or temporarily access prompts, uploads, outputs, or metadata.

In Privacy Mode, prompts, uploaded source media, settings, moderation signals, temporary objects, and outputs still pass through Creamify systems and service providers so we can moderate the request, run generation, debit or refund Coins, deliver the result, prevent abuse, and operate the Services. Privacy Mode results are generally delivered through temporary private storage and then saved by your browser into local browser storage if the browser save succeeds.

The current implementation is designed to expire temporary source uploads after a short period, temporary Privacy Mode outputs after a shorter delivery period, and completed or failed generation jobs after operational cleanup. We may retain limited operational, security, billing, abuse-prevention, legal, backup, or de-identified records where necessary or permitted by law.

Local gallery data is stored in your browser, not in your Creamify cloud gallery. It may be lost if you clear browser data, use another browser or device, close the app before a result is saved, use private browsing, or if browser storage fails.

Cloud Mode

In Cloud Mode, generated media, prompts, settings, source-media copies, generation metadata, likes, and gallery records may be stored with your account so you can access them after login and across devices. Cloud Mode content remains subject to our Terms, moderation, retention, deletion, backup, legal, and enforcement practices.

When you delete a cloud item, we may hide or archive it before underlying objects, backups, logs, and related records are fully deleted. Deletion may not remove records we must or are permitted to retain for legal, tax, accounting, safety, security, fraud-prevention, dispute, or enforcement purposes.

5. How We Disclose Information

We may disclose information as follows:

Service providers. We disclose information to vendors, contractors, and processors that help provide the Services, including hosting, storage, AI inference, moderation, authentication, payment processing, analytics, email, support, security, fraud prevention, and infrastructure providers.
AI and moderation infrastructure. Prompts, source media, settings, outputs, and metadata may be transmitted to AI, moderation, queue, storage, or compute infrastructure used to generate, review, or deliver content.
Legal, safety, and enforcement. We may disclose information if required by law or if we believe disclosure is necessary or appropriate to comply with legal process, report apparent illegal content, cooperate with law enforcement or the National Center for Missing and Exploited Children, enforce our Terms, investigate fraud or abuse, respond to rights claims, protect safety, protect our rights or property, or reduce legal risk.
Payment and commerce partners. We disclose transaction, order, risk, usage, and account information to payment processors, checkout providers, fraud-prevention vendors, app stores, banks, card networks, and commerce partners as needed to process payments, refunds, taxes, disputes, chargebacks, and fraud reviews.
Affiliates and business transfers. We may disclose or transfer information to affiliates or in connection with a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or other business transaction.
At your direction. We disclose information when you choose to share, publish, download, export, connect, or otherwise direct us to make information available to another person or service.

We do not sell your personal information for money. We do not knowingly sell or share personal information of anyone under 18. As of the date above, we do not use or disclose personal information for cross-context behavioral advertising as defined by California privacy law.

6. Data Retention

We retain information for as long as reasonably necessary for the purposes described in this policy, including to provide the Services, maintain your account, process transactions, preserve security, comply with law, resolve disputes, enforce agreements, prevent fraud and abuse, and maintain business records.

Account data is generally retained while your account is active and for a reasonable period afterward as needed for legal, security, fraud-prevention, backup, and business purposes.
Cloud Mode content is generally retained until you delete it, delete your account, or we remove it under our Terms, subject to backups and legally permitted retention.
Privacy Mode content is designed for temporary server-side handling and local browser storage after delivery, but limited records may remain for operational, billing, security, abuse-prevention, legal, backup, or de-identified purposes.
Payment and transaction records may be retained for tax, accounting, chargeback, fraud-prevention, and legal compliance periods.
Abuse, moderation, and security records may be retained for longer where necessary to protect users, rights holders, service providers, Creamify, or the public.

When we no longer need personal information, we will delete, anonymize, aggregate, or isolate it, unless retention is required or permitted by law.

7. Cookies, Local Storage, and Browser Storage

We use cookies and similar technologies to keep you signed in, secure your session, remember account and storage preferences, operate checkout, detect abuse, analyze performance, and provide core product features. We also use localStorage and IndexedDB for browser-side behavior such as cached account display information, storage-mode preference, and local gallery records.

You can control cookies through your browser settings. Blocking or deleting cookies, localStorage, or IndexedDB may prevent login, erase local-gallery items, reset preferences, interrupt generation recovery, or otherwise impair the Services.

8. Security

We use reasonable technical and organizational measures designed to protect information, including encryption in transit, access controls, session security, provider-token safeguards, infrastructure controls, and operational monitoring. No method of transmission, processing, or storage is completely secure. We cannot guarantee that information will be secure, private, recoverable, or free from unauthorized access, loss, misuse, or alteration.

You are responsible for maintaining the security of your account, devices, browser storage, downloaded files, provider tokens, and any generated or uploaded content you choose to keep, publish, or share.

9. Your Privacy Rights

Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, objection, withdrawal of consent, appeal of a denied request, or opt-out of certain processing. These rights are not absolute, and we may decline or limit requests where permitted by law, including to protect security, prevent fraud, comply with legal obligations, complete transactions, maintain business records, or enforce our Terms.

To make a privacy request, contact [email protected]. We may need to verify your identity and account control before fulfilling a request. If you use an authorized agent, we may require proof of authorization and may still require you to verify your identity directly.

United States Privacy Rights

Residents of California and certain other U.S. states may have rights to know, access, correct, delete, obtain a copy of, or opt out of certain uses or disclosures of personal information, and to be free from discrimination for exercising those rights. We do not sell personal information for money and, as of the date above, do not share personal information for cross-context behavioral advertising.

California residents may also request information under California's "Shine the Light" law about certain disclosures of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.

EEA, United Kingdom, and Switzerland

If you are in the European Economic Area, United Kingdom, or Switzerland, our legal bases for processing may include performance of a contract, legitimate interests, consent, legal obligations, and vital interests. You may have the right to access, rectify, erase, restrict, object to processing, receive portability of your personal data, withdraw consent where processing is based on consent, and lodge a complaint with your local data protection authority.

10. International Transfers

We are based in the United States. Your information may be processed in the United States and other countries where we or our service providers operate. These countries may have data-protection laws different from those in your jurisdiction. Where required, we use appropriate safeguards for international transfers, such as contractual commitments or other legally recognized mechanisms.

11. Children and Minors

The Services are not intended for anyone under 18. We do not knowingly collect personal information from anyone under 18. If we learn that a person under 18 has provided personal information or used the Services, we will take reasonable steps to delete the information and terminate the account. If you believe a minor has used the Services, contact [email protected].

12. Third-Party Links and Services

The Services may link to or integrate with third-party websites, payment providers, authentication providers, model providers, storage systems, LoRA sources, and other services. We are not responsible for the privacy, security, content, or practices of third parties. Their terms and policies govern their services.

13. Do Not Track and Global Privacy Control

We honor the Global Privacy Control (GPC) signal: when your browser sends it, we do not set analytics identifiers and do not record first-party usage measurement for your visit. Some browsers also offer older "Do Not Track" signals; there is no uniform industry standard for those, and where a browser sends DNT without GPC we treat it the same way as GPC for our first-party measurement. We do not use third-party analytics or cross-site tracking regardless of either signal.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last updated" date and will be effective when posted unless a later date is stated. If we make material changes, we may provide additional notice, such as through the Services or by email.

15. Contact Us

If you have questions, requests, or complaints about this Privacy Policy or our privacy practices, contact us at:

C Studios LLC
1209 Mountain Road Pl NE, Ste N
Albuquerque, NM 87110
United States
[email protected]