Privacy Policy

1. SCOPE

This Privacy Policy applies to personal information we process in connection with the Service, including information provided directly by users, information generated through use of the Service, information received through connected social-media accounts and authorized integrations, public or authorized social-media information used for analytics, and information collected through cookies and similar technologies.

This Privacy Policy does not govern the independent privacy practices of third-party websites, services, social-media platforms, payment processors, or AI providers when they act independently from Rekreate AI. Their own privacy policies may apply to information they process independently.

2. WHO WE ARE AND OUR ROLE

For purposes of applicable data-protection law, ReCreate AI, LLC is generally the controller or business responsible for personal information processed for our own purposes through Rekreate AI.

In some business or enterprise arrangements, we may process personal information on behalf of a customer under a separate agreement, in which case that customer may be the controller or business and Rekreate AI may act as a processor or service provider for the relevant data.

Contact:

ReCreate AI, LLC

doing business as Rekreate AI

131 Continental Dr, Suite 305

Newark, DE 19713

United States

Email: [email protected]

Phone: +1 (845) 610-0388

3. INFORMATION WE COLLECT

The categories of information we collect depend on how you use the Service.

3.1 Account and Profile Information

When you create or manage an account, we may collect information such as:

name;
email address;
telephone number;
username or account identifiers;
company or organization information;
profile information;
authentication information and login metadata; and
preferences and settings.

If you sign in through a third-party identity provider, we may receive information that provider makes available to us in accordance with your permissions.

3.2 Payment and Subscription Information

If you purchase a paid subscription or other paid feature, our payment processor, currently Stripe or another provider identified at checkout, processes payment information.

We may receive billing-related information such as:

customer and transaction identifiers;
billing status;
subscription status and billing period;
payment method type;
card brand and limited card details such as the last four digits;
billing country or address where applicable;
transaction amount, currency, tax information, and payment history; and
fraud, dispute, refund, and chargeback information.

We generally do not receive or store full payment card numbers or card security codes when payment details are entered directly into the payment processor’s systems.

3.3 User Content and AI Inputs

The Service may allow you to upload, submit, connect, create, or process content, including:

prompts and text;
images and photographs;
video;
audio and voice recordings;
names, images, voices, likenesses, and other media relating to identifiable people;
logos, trademarks, documents, and files;
links and URLs;
scripts, captions, instructions, and creative materials;
generated content and outputs; and
metadata associated with these materials.

We refer to these materials collectively as “User Content.” User Content may contain personal information about you or other people. You are responsible for having any rights and permissions required to provide that information to us and to request the processing you initiate.

We do not use User Content to train our own general-purpose AI models unless we separately disclose that practice and obtain any consent required by applicable law.

If you connect an Instagram account or another social-media account to the Service, we may receive and process information made available through the connection according to your permissions, the platform’s API and authorization rules, and applicable law.

Depending on the connection and feature, this may include:

account and profile identifiers;
username, profile information, and account metadata;
content and media you authorize the Service to access;
comments, engagement information, and other interaction data;
content performance and audience metrics;
permissions or authorization tokens; and
information necessary to provide automation, analytics, publishing, or other requested features.

We do not obtain access to information merely because it exists on a social network; access depends on the permissions, integrations, APIs, and features you choose to use.

Certain Rekreate AI features provide content intelligence, influencer analytics, or social-media analytics. For those features, we may process information that social-media platforms make public or otherwise make available through authorized integrations, official APIs, or applicable platform permissions.

This may include public profile information, public content, engagement counts, content performance metrics, audience or account indicators, and related analytics data.

We use this information to provide analytics, measurement, discovery, reporting, tracking, content-intelligence, and related functionality. We do not represent that third-party social-media data is complete or error-free, and platform availability or permissions may change.

3.6 Community and Public Content

If you choose to publish content to the Rekreate AI community or use another feature that makes content public, we may process and display:

the Public Content you publish;
your visible profile or username;
generated media;
reactions, engagement, or other community interactions; and
information you choose to associate with the public content.

Information you intentionally make public may be viewed, copied, shared, captured, or redistributed by other users or third parties. Please do not publish information you do not want to become public.

3.7 Communications, Support, and Feedback

When you contact us, request support, provide feedback, participate in a call, submit a form, or communicate with us by email, telephone, social media, chat, or another method, we may collect:

your contact information;
the content of the communication;
attachments and screenshots;
support and troubleshooting information;
feedback and survey responses; and
records of our interactions with you.

3.8 Device, Usage, and Technical Information

When you use the Service, we and our service providers may automatically collect information such as:

IP address;
browser type and version;
device type, identifiers, and operating system;
language and approximate location derived from IP address;
pages, screens, and features viewed or used;
clicks, navigation, session activity, and referring URLs;
timestamps, session duration, and interaction events;
crash reports, error logs, diagnostics, and performance data;
account and authentication events; and
security, fraud-prevention, and abuse-detection information.

3.9 Cookies, Pixels, and Similar Technologies

We and our service providers may use cookies, pixels, local storage, SDKs, tags, and similar technologies to operate and secure the Service, remember preferences, understand usage, measure performance, improve features, provide support, and measure or personalize marketing where permitted by law.

These technologies may fall into categories such as:

strictly necessary and security technologies;
functional technologies;
analytics and performance technologies; and
advertising, attribution, and measurement technologies.

Our Service may use analytics providers and advertising technologies, including technologies such as Meta Pixel, depending on the page, feature, campaign, and your jurisdiction.

Browser settings may allow you to block or delete cookies, although doing so may affect functionality. Where applicable law requires consent or an opt-out for non-essential technologies, we will apply the legally required choice mechanism.

At this time, the Service does not treat a standard browser “Do Not Track” setting as a universal privacy request because there is no single consistently applied industry standard for DNT. Where applicable law requires us to recognize a legally valid opt-out preference signal, we will process qualifying signals as required by that law.

3.10 Information We Derive

We may derive, infer, aggregate, or generate information from the data described above, including analytics, usage trends, content-performance indicators, fraud or security risk signals, feature recommendations, and service-improvement insights.

Where information has been de-identified or aggregated so that it is no longer reasonably linked to an identified or identifiable individual, we may use it for lawful business purposes and will not attempt to re-identify it except as permitted by law.

4. HOW WE USE PERSONAL INFORMATION

We may use personal information to:

provide, operate, maintain, and deliver the Service;
create and manage accounts;
process subscriptions, billing, refunds, and payment-related matters;
authenticate users and protect accounts;
provide AI generation, editing, voice, video, content-intelligence, analytics, and other requested functionality;
process User Content according to your instructions;
connect and operate social-media integrations you authorize;
provide public or authorized social-media analytics and tracking;
operate the Rekreate AI community and display Public Content;
personalize features and remember settings;
communicate with you about your account, security, billing, support, product operations, and legal matters;
provide customer support and troubleshoot problems;
understand how the Service is used and improve usability, reliability, and performance;
measure and improve features, workflows, and product experience;
detect, investigate, prevent, and respond to fraud, abuse, security incidents, unlawful conduct, and violations of our Terms of Service;
protect our users, Company, Service, and third parties;
comply with legal obligations, lawful requests, and enforceable legal process;
establish, exercise, or defend legal claims;
enforce our agreements and policies;
conduct corporate transactions such as financing, merger, acquisition, reorganization, or sale of assets; and
send marketing or promotional communications where permitted by law and subject to applicable consent and opt-out requirements.

5. LEGAL BASES FOR PROCESSING

Where laws such as the GDPR or UK GDPR require us to identify a legal basis, we process personal information under one or more of the following bases, depending on the circumstances:

5.1 Performance of a Contract

We process information when necessary to provide the Service you request, administer your account, process subscriptions, deliver AI and other features, provide support, and perform our obligations under our Terms of Service or another agreement with you.

5.2 Legitimate Interests

We may process information where necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and interests. These interests may include securing the Service, preventing fraud and abuse, improving products, understanding usage, supporting users, protecting legal rights, and operating our business.

We rely on consent where required, including for certain cookies, marketing practices, connected-account permissions, or other processing for which consent is the appropriate legal basis. You may withdraw consent at any time, subject to applicable law and without affecting processing already lawfully carried out.

5.4 Legal Obligations

We process information when necessary to comply with applicable laws, regulations, lawful requests, tax or accounting obligations, sanctions requirements, legal process, or other legal duties.

5.5 Other Lawful Bases

Where applicable law recognizes additional lawful bases, we may rely on those bases as appropriate and will provide any disclosure required by law.

6. AI AND THIRD-PARTY MODEL PROCESSING

Rekreate AI may use third-party AI, cloud, speech, media-processing, and infrastructure providers to perform functionality you request. Depending on the feature, User Content may be transmitted to and processed by such providers for the purpose of generating, transforming, analyzing, storing, or delivering the requested result.

Examples of providers or provider categories we may use include OpenAI, Google Cloud and Google Vertex AI, ElevenLabs, and other AI, model, media-processing, or infrastructure providers made available through the Service.

We do not use private User Content to train our own general-purpose AI models unless we separately disclose that practice and obtain any consent required by law.

Third-party providers may process information under contracts with us and, in some circumstances, under their own terms or privacy obligations. We do not control a third party’s independent processing, policies, security practices, or changes to its systems. Where a third party acts as an independent controller or where you directly authorize a third-party service, that provider’s privacy policy may separately apply.

7. HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information to the following categories of recipients for the purposes described in this Privacy Policy.

7.1 Service Providers and Processors

We may share information with vendors that provide services on our behalf, including:

cloud hosting, storage, databases, networking, and infrastructure, including providers such as Google Cloud and Cloudflare;
AI and machine-learning services, including providers such as OpenAI and Google Vertex AI;
speech, voice, audio, and media-processing services, including providers such as ElevenLabs;
payment processing, including Stripe;
analytics and product-measurement services;
advertising, attribution, and campaign-measurement providers, including pixel-based technologies where used;
customer-support and communications services, including providers such as Intercom;
security, fraud-prevention, monitoring, and error-reporting providers;
email, messaging, and notification providers; and
professional advisers and operational vendors.

These providers receive information as reasonably necessary to perform services for us or to provide functionality you request.

7.2 Connected Services and Platforms

When you connect an account, publish content, initiate an integration, or instruct us to send information to a third-party service, we disclose information as necessary to carry out your request.

7.3 Public and Community Disclosures

If you intentionally publish content to the Rekreate AI community or otherwise make it public through the Service, that content and associated public profile information may be visible to other users and the public.

We do not make private User Content public merely because you uploaded it for processing.

7.4 Legal, Safety, and Rights Protection

We may disclose information when we reasonably believe disclosure is necessary to:

comply with applicable law, regulation, court order, subpoena, or other lawful process;
respond to valid requests from government or law-enforcement authorities;
protect the rights, property, safety, or security of Rekreate AI, users, or third parties;
detect, prevent, investigate, or address fraud, abuse, security incidents, unlawful conduct, or violations of our Terms of Service;
enforce agreements; or
establish, exercise, or defend legal claims.

7.5 Business Transactions

We may disclose or transfer information in connection with an actual or proposed merger, acquisition, financing, reorganization, bankruptcy, sale of assets, change of control, or similar corporate transaction, subject to applicable legal requirements.

We may disclose information when you direct us to do so or provide consent.

9. COMMUNICATIONS AND MARKETING

We may use the contact information you provide to send account, authentication, security, billing, support, product-operational, service, and legal communications. These communications are part of providing the Service and may continue even if you opt out of marketing.

Where permitted by law, we may also send newsletters, product updates, offers, promotions, and other marketing communications.

You may opt out of marketing emails using the unsubscribe link included in the message or by contacting [email protected]. You may opt out of marketing text messages using the opt-out method provided in the message where applicable.

We will obtain consent for marketing calls, texts, cookies, or other communications where applicable law requires consent. Withdrawal of marketing consent will not affect your ability to use the Service where marketing consent is not legally necessary to provide the Service.

10. DATA RETENTION

We retain personal information for as long as reasonably necessary to provide the Service, maintain your account, fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, enforce agreements, protect security, and support legitimate business needs.

In general:

account information may be retained while your account remains active and for a reasonable period afterward;
User Content may be retained while your account is active or until you delete it or request deletion, subject to legal, security, technical, backup, and contractual exceptions;
Public Content may remain available until removed, but copies may persist for a reasonable period in backups, caches, prior lawful distributions, or records required for legal purposes;
billing and transaction information may be retained for tax, accounting, fraud-prevention, chargeback, and legal-compliance periods;
security and technical logs may be retained for periods appropriate to security, debugging, abuse prevention, and legal obligations; and
support records may be retained as necessary to maintain account history, resolve disputes, improve support, and comply with law.

When we no longer need personal information, we may delete, anonymize, or de-identify it, subject to applicable law and technical limitations.

Backups and disaster-recovery systems may retain deleted information for a limited additional period before it is overwritten or otherwise removed from active recovery systems.

11. YOUR PRIVACY RIGHTS

Depending on where you live and subject to applicable law, you may have some or all of the following rights regarding your personal information:

access or confirmation of whether we process your information;
correction of inaccurate information;
deletion of information;
portability or a copy of information in a usable format;
restriction of certain processing;
objection to certain processing;
withdrawal of consent where processing is based on consent;
opt-out of targeted advertising;
opt-out of sale or sharing as those terms are defined by applicable law;
opt-out of certain profiling or automated decision-making where legally applicable;
limit certain uses of sensitive personal information where legally applicable;
appeal a decision we make regarding a privacy-rights request where applicable law provides an appeal right; and
lodge a complaint with an applicable data-protection authority or regulator.

To exercise a privacy right, contact [email protected] and clearly describe your request. You may use the subject line “Privacy Request.”

We may need to verify your identity before completing a request. Verification may depend on the nature of the request and the information associated with your account. We will not discriminate against you for exercising a privacy right protected by applicable law.

If an authorized agent submits a request on your behalf, we may require proof of the agent’s authority and may verify your identity directly where permitted by law.

If we deny a request and applicable law gives you a right to appeal, you may appeal by emailing [email protected] with the subject “Privacy Appeal” and explaining why you believe the decision should be reconsidered.

Certain rights are subject to exceptions. For example, we may retain information where required for legal compliance, fraud prevention, security, billing records, dispute resolution, freedom of expression, establishment or defense of legal claims, or other purposes permitted by law.

12. U.S. STATE PRIVACY DISCLOSURES

Residents of certain U.S. states may have privacy rights under state comprehensive privacy laws. Depending on the law and whether it applies to us, these rights may include access, correction, deletion, portability, and opt-out rights relating to sale, sharing, targeted advertising, or certain profiling.

For California residents, to the extent the California Consumer Privacy Act, as amended, applies to our processing, categories of personal information we may collect can include identifiers, customer records information, commercial information, internet or electronic activity, geolocation information at an approximate level, audio/visual information, professional or employment-related information if you provide it in a business context, and inferences derived from other information. We use and disclose these categories for the business and commercial purposes described in this Privacy Policy.

We do not sell personal information for money. As described in Section 8, certain advertising or analytics technologies may be treated as “sharing” or “sale” under broad state-law definitions. Applicable opt-out rights may be exercised as described in Section 8.

Where state law grants the right to appeal a denied privacy request, you may use the appeal process described in Section 11.

13. EEA, UNITED KINGDOM, AND SWITZERLAND

If you are in the European Economic Area, United Kingdom, or Switzerland, applicable data-protection law may provide rights including access, correction, erasure, restriction, portability, objection, and withdrawal of consent.

Our legal bases for processing are described in Section 5.

You may also have the right to lodge a complaint with the data-protection authority in the country or region where you live, work, or where you believe a violation occurred.

ReCreate AI, LLC is established in the United States. If you use the Service from the EEA, UK, Switzerland, or another jurisdiction, your personal information may be transferred to and processed in the United States and other countries where we or our service providers operate.

Where applicable law requires a transfer mechanism or additional safeguards for an international transfer, we use legally recognized mechanisms or safeguards as appropriate, which may include contractual protections such as standard contractual clauses.

Nothing in this Privacy Policy limits any mandatory privacy right that applicable law provides to you.

14. INTERNATIONAL DATA TRANSFERS

Rekreate AI operates from the United States and uses service providers that may process information in the United States and other countries. As a result, your information may be transferred to jurisdictions that have data-protection rules different from those in your country.

We take steps intended to provide an appropriate level of protection for international transfers as required by applicable law, including contractual, organizational, or technical safeguards where appropriate.

15. SECURITY

We use administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure. These measures may include access controls, authentication, encryption in transit where appropriate, logging, monitoring, infrastructure protections, vendor controls, and security procedures.

No internet transmission, software system, cloud service, or storage method is completely secure. We therefore cannot guarantee absolute security.

You are responsible for protecting your credentials, using a secure device, and notifying us if you suspect unauthorized access to your account.

16. FACE, VOICE, AND OTHER MEDIA ABOUT PEOPLE

Because Rekreate AI includes AI media features, User Content may contain faces, voices, likenesses, and other information relating to identifiable individuals.

We process such media to perform the feature you request, provide the Service, maintain security, and for the other purposes described in this Privacy Policy.

Rekreate AI does not intentionally use uploaded facial or voice media to identify a person through a dedicated biometric-identification database unless a feature expressly requires such processing, we provide any disclosure required by law, and we obtain any legally required consent.

You must not upload or process another person’s image, voice, likeness, or personal information unless you have any permission, authority, or lawful basis required for that use.

17. SENSITIVE INFORMATION

Please do not submit highly sensitive personal information unless it is necessary for a feature you intentionally choose to use and you have the legal right to provide it.

Depending on your jurisdiction, certain information may be considered sensitive personal data. If we intentionally collect or use legally defined sensitive data for a purpose requiring consent or another special legal basis, we will provide any additional notice or choice required by applicable law.

18. CHILDREN AND MINORS

The Service is intended only for individuals who are at least 18 years old. We do not knowingly offer the Service to children or knowingly collect personal information through the Service from individuals we know are under 18.

If you believe a minor has provided personal information to us in violation of this policy, contact [email protected]. We will review the report and take appropriate action, including deletion where required by law.

19. THIRD-PARTY LINKS AND SERVICES

The Service may contain links to or integrations with third-party websites, applications, AI providers, social-media platforms, payment services, and other services.

When you leave Rekreate AI, connect a third-party account, or interact directly with a third party, that third party may independently collect and use information under its own privacy policy. We encourage you to review the privacy practices of services you use.

We are not responsible for a third party’s independent privacy practices, content, security, or conduct to the extent permitted by applicable law.

20. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in the Service, our practices, technology, law, or regulatory requirements.

When we make changes, we will update the “Last Updated” date. If a change is material, we will provide additional notice where required by applicable law, which may include an in-product notice, website notice, or email.

Where applicable law requires consent to a material change in processing, we will request consent before applying that change to affected information.

21. CONTACT US

If you have questions about this Privacy Policy, want to exercise a privacy right, or have a privacy concern, contact: