← Back to home

Consent to Personal Data Processing

Last updated 2026-10-08

By signing up for Creo (https://contentfai.xyz) and ticking the consent box, I freely, of my own will and in my own interest give [ ЮРЛИЦО ] (address: [ ЮРИДИЧЕСКИЙ АДРЕС ]; [ ИНН ОГРН ]) — the “Operator” — my consent to process my personal data on the terms below.

This consent is given electronically under Article 9 of Russian Federal Law No. 152-FZ “On Personal Data”.

1. What data

  • email address;
  • name and profile picture — if I provided them or a sign-in service (e.g. Telegram) passed them on;
  • account identifiers, interface language, records of the consents given;
  • IP address, browser and device details, activity logs in the service;
  • payment details (amount, plan, status) — never bank card details;
  • prompts, files and other content I upload or create in the service.

2. Purposes

  • sign-up, sign-in and account management;
  • providing the service under the Terms, tracking credits and payments;
  • service emails: email confirmation, password reset, account, billing and service notices;
  • answering support requests;
  • security and abuse prevention;
  • compliance with the law.

News and promotional emails are not covered by this consent — I receive them only if I ticked the separate box, and I can unsubscribe via the link in any email.

3. Processing operations

Collection, recording, organisation, accumulation, storage, updating and alteration, retrieval, use, transfer (provision, access), anonymisation, blocking, erasure and destruction — with or without automated means.

4. Transfer to third parties

The Operator may entrust processing to the parties listed below, to the extent needed for a specific operation (account storage, sending emails, payments, content generation).

Some of them are located outside the Russian Federation, including countries not recognised as providing adequate protection (e.g. the US). I agree to such cross-border transfer.

ProcessorPurposeRegion
Supabaseauthentication, database, account storageEU / US
Resendemail delivery: confirmation, password reset, notices and opt-in newslettersUS
S3-совместимое хранилищеgenerated media storageEU
Stripeinternational payment processing (card details never reach the service)US / EU
Plategapayment processing in RUB — SBP, cards, SberPay (card details never reach the service)RU
OpenRoutertext generation (LLM)US
HeyGenAI avatar video generationUS
KIE.aivideo and image generationUS / APAC
ElevenLabsspeech synthesis (voiceover)US
Cloudflarebot protection on sign-in (Turnstile)US / EU
Fish Audiospeech synthesis (voiceover)US
ZapCapautomatic subtitlesEU
Apifypublic data scraping for reference linksEU / US
OmniSocialspublishing content to social networks on your behalfUS
BytePlustext generation (alternative LLM provider, when enabled)Singapore

5. Duration and withdrawal

This consent is valid until the account is deleted or the consent is withdrawn.

To withdraw, email [ EMAIL ] or delete the account in Settings. After withdrawal the Operator stops processing and destroys the data within 30 days, except where the law requires keeping it (e.g. payment records for accounting).