Consent to Personal Data Processing
Last updated 2026-10-08
By signing up for Creo (https://contentfai.xyz) and ticking the consent box, I freely, of my own will and in my own interest give [ ЮРЛИЦО ] (address: [ ЮРИДИЧЕСКИЙ АДРЕС ]; [ ИНН ОГРН ]) — the “Operator” — my consent to process my personal data on the terms below.
This consent is given electronically under Article 9 of Russian Federal Law No. 152-FZ “On Personal Data”.
1. What data
- email address;
- name and profile picture — if I provided them or a sign-in service (e.g. Telegram) passed them on;
- account identifiers, interface language, records of the consents given;
- IP address, browser and device details, activity logs in the service;
- payment details (amount, plan, status) — never bank card details;
- prompts, files and other content I upload or create in the service.
2. Purposes
- sign-up, sign-in and account management;
- providing the service under the Terms, tracking credits and payments;
- service emails: email confirmation, password reset, account, billing and service notices;
- answering support requests;
- security and abuse prevention;
- compliance with the law.
News and promotional emails are not covered by this consent — I receive them only if I ticked the separate box, and I can unsubscribe via the link in any email.
3. Processing operations
Collection, recording, organisation, accumulation, storage, updating and alteration, retrieval, use, transfer (provision, access), anonymisation, blocking, erasure and destruction — with or without automated means.
4. Transfer to third parties
The Operator may entrust processing to the parties listed below, to the extent needed for a specific operation (account storage, sending emails, payments, content generation).
Some of them are located outside the Russian Federation, including countries not recognised as providing adequate protection (e.g. the US). I agree to such cross-border transfer.
| Processor | Purpose | Region |
|---|---|---|
| Supabase | authentication, database, account storage | EU / US |
| Resend | email delivery: confirmation, password reset, notices and opt-in newsletters | US |
| S3-совместимое хранилище | generated media storage | EU |
| Stripe | international payment processing (card details never reach the service) | US / EU |
| Platega | payment processing in RUB — SBP, cards, SberPay (card details never reach the service) | RU |
| OpenRouter | text generation (LLM) | US |
| HeyGen | AI avatar video generation | US |
| KIE.ai | video and image generation | US / APAC |
| ElevenLabs | speech synthesis (voiceover) | US |
| Cloudflare | bot protection on sign-in (Turnstile) | US / EU |
| Fish Audio | speech synthesis (voiceover) | US |
| ZapCap | automatic subtitles | EU |
| Apify | public data scraping for reference links | EU / US |
| OmniSocials | publishing content to social networks on your behalf | US |
| BytePlus | text generation (alternative LLM provider, when enabled) | Singapore |
5. Duration and withdrawal
This consent is valid until the account is deleted or the consent is withdrawn.
To withdraw, email [ EMAIL ] or delete the account in Settings. After withdrawal the Operator stops processing and destroys the data within 30 days, except where the law requires keeping it (e.g. payment records for accounting).