Privacy Policy

CreativeIntel at creative.xark.io is operated by Cell Digital Technology Inc. (“we”, “us”). This policy explains what personal data we collect when you use the Service, how we use and share it, and the choices and rights you have. It forms part of our Terms of Service. For content you upload about your own customers or other people, you are the controller and we process it on your behalf to provide the Service.

• Account data — your email address, optional name, verification status, and the date you accepted our Terms and this policy. Passwords are handled by our authentication provider (Clerk) and are never visible to us.
• Workspace content — briefs, product and brand information, URLs, uploaded files and assets, prompts, and everything generated for you (plans, scripts, storyboards, images, videos, reports) plus their version history.
• Usage and billing data — actions you take, AI models used, tokens, images and video seconds consumed, and estimated cost, used to meter your allowance.
• Technical data — IP address, browser and device information, timestamps and logs generated when you use the Service, for security, debugging and abuse prevention.
• Connected accounts — if you connect a third-party platform (for example an ad account), the data you authorize us to read from it.
• Communications — messages you send us.

• to create and secure your account and keep your workspace private to you;
• to provide the features you request, including sending your content to AI providers to analyze it and generate outputs;
• to meter usage, enforce allowances and limits, and prevent fraud, abuse and violations of our Terms;
• to maintain, debug and improve the reliability and quality of the Service;
• to communicate with you about your account, security and changes to our terms;
• to comply with law and enforce our rights.

We do not sell your personal data, we do not share it for cross-context behavioural advertising, and we do not use your workspace content to train our own or third-party foundation models.

We process personal data to perform our contract with you (providing the Service), for our legitimate interests (security, abuse prevention, improving the Service, business communications), to comply with legal obligations, and with your consent where required. You may withdraw consent at any time without affecting earlier processing.

We share personal data only with:

• Service providers (subprocessors) who process it for us under contractual obligations — listed below;
• Platforms you connect, as needed to perform the actions you request;
• Authorities or other parties when required by law, or to protect the rights, safety and security of our users, the public or Cell Digital Technology Inc.;
• A successor in a merger, acquisition or sale of assets, subject to this policy.

AI providers receive only the content needed for the request you make. Their handling of that content is also governed by their own terms and policies.

We are based in the United States and our providers operate in several countries, including the United States and, for certain optional AI models, China. Where we transfer personal data from the EEA, UK or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or the provider’s equivalent commitments. Avoid uploading sensitive personal data you do not want processed outside your country.

• Account data and workspace content are kept while your account is active so you can access your history.
• When you ask us to delete your account, we delete or anonymize your workspace content within 30 days, except where we must keep it to meet legal obligations, resolve disputes or enforce our agreements.
• Backups are overwritten on a rolling basis, and security and usage logs are kept for up to 12 months.
• Usage and cost records may be kept in aggregated or de-identified form.

We protect data with encryption in transit (HTTPS), access controls that keep each account’s workspace separate, encrypted storage of provider credentials, and least-privilege access for our staff. No system is perfectly secure; please use a strong, unique password and tell us immediately at [email protected] if you suspect unauthorized access.

Depending on where you live (including the EEA, UK and US states such as California), you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict certain processing, and to not be discriminated against for exercising these rights. You can:

• update your email, name and password from the account menu;
• download your project history from each project’s History page;
• request access, deletion or other rights by emailing [email protected] from the address on your account.

We will verify your request and respond within the time required by law (generally 30 days in the EEA/UK and 45 days in California). You may also complain to your local data-protection authority.

We use only cookies and similar storage that are necessary to run the Service — to keep you signed in, protect against attacks, and remember preferences such as your active workspace and theme. We do not use advertising or cross-site tracking cookies.

The Service is not directed to anyone under 18, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will delete it.

We may update this policy. The version and effective date are shown at the top, and we will notify you of material changes by email or in the app before they take effect.

Cell Digital Technology Inc. · [email protected]. For privacy requests, include the email address on your account so we can verify you.