Privacy Policy
Last updated: 10 August 2026
This policy explains what personal information CreaCio PH collects, why we collect it, who we share it with, and what control you have over it. It is written to be read, not skimmed past — if anything here is unclear, please ask us.
1. Who we are
CreaCio PH ("CreaCio", "we", "us") operates the website at creacio.co, a tool that helps Filipino affiliate marketers create content for their product promotions.
We are the data controller for the personal information described in this policy. We process personal information in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.
2. What we collect
Information you give us
- Account details — your first name, last name and email address.
- Password — stored only as a one-way hash (bcrypt). We never store, see or have any way to recover your actual password.
- Product images — the photos and screenshots you upload to generate content.
- Proof of payment — the screenshot or photo of your GCash or bank transfer receipt when you pay for a plan or credit top-up. These images usually contain your name, a reference number and a transaction amount.
- Bio page content — if you create a bio page: your chosen username, display name, short bio, profile photo, links and social profile URLs.
- Payout details — if you take part in our affiliate programme, the account information you give us so we can pay your commission.
- Support messages — anything you send us by email.
Information we generate about your use of the service
- Content you create — the prompts, scene breakdowns and storyboard images produced when you use the generators, saved to your Projects.
- Account activity — your plan, credit balance, credit transactions, and payment and payout history.
- Session data — a login token, so you stay signed in. Deleted when you log out or when it expires.
- Bio page statistics — total page views and per-link click counts. These are simple counters. We do not record who clicked, or their IP address or location.
We do not use advertising trackers, and we do not sell your personal information to anyone.
3. Images you upload and AI processing
This is the most important section to understand. When you upload a product image to generate content, that image is sent to OpenAI, a third-party AI provider based in the United States. It has to be — that is how the analysis and image generation work.
What this means in practice:
- Your uploaded image leaves our servers and is processed by OpenAI in order to identify the product and generate content from it.
- This involves a transfer of data outside the Philippines.
- OpenAI's handling of that data is governed by their own policies and their agreement with us.
- The original uploaded file is deleted from our server immediately after processing. The generated results are saved to your Projects.
Please only upload photos of products. The generators are built for product marketing and are not intended for photos of people. We apply automated checks to reject uploads that do not appear to contain a product, but those checks are not perfect — the responsibility for what you upload is yours. Never upload a photo of another person without their clear permission, and never upload photos of children.
4. Why we use your information
| What we use | Why |
|---|---|
| Name, email, password hash | To create and secure your account, and to sign you in |
| Email address | To verify your address, reset your password, send receipts, and notify you about your account |
| Uploaded product images | To generate the content you asked for |
| Proof of payment | To verify your payment and activate your plan or credits |
| Credit and payment history | To operate your balance, provide receipts, and keep required financial records |
| Payout details | To pay affiliate commissions you have earned |
| Bio page content | To publish the page you asked us to publish |
| Session token | To keep you logged in |
We rely on the performance of our contract with you for most of the above, on your consent for publishing a bio page, and on our legitimate interests and legal obligations for record-keeping, fraud prevention and security.
6. Information you choose to make public
A bio page is public by design. If you create one, anything you put on it — your display name, bio, profile photo, links and social profiles — can be seen by anyone with the link, and you are choosing to publish it.
Your email address, account details, payment information and generated projects are never shown on your bio page.
You can edit or empty your bio page at any time from your account. If you want it taken down entirely, contact us.
7. How long we keep it
- Account information — for as long as your account is open.
- Uploaded source images — deleted from our server immediately after the content is generated.
- Generated content in your Projects — until you delete it, or your account is closed.
- Proof of payment images — retained while needed to verify the payment and to meet record-keeping obligations.
- Payment and credit records — retained as required for financial and tax record-keeping, even after an account is closed.
- Session tokens — deleted on logout or expiry.
If you ask us to close your account, we will delete your personal information except where we are required to keep certain records, in which case we keep only the minimum needed.
8. How we protect it
- All traffic to creacio.co is encrypted with HTTPS.
- Passwords are stored only as bcrypt hashes and are never recoverable.
- Proof-of-payment images and profile photos are stored outside the public web directory and are served only through authenticated routes that check you are entitled to see them.
- Uploaded files are validated by inspecting the file contents, not just the filename.
- Rate limiting and security headers are applied to reduce abuse.
- Administrative functions require a separate administrator permission.
No service can promise perfect security. If we become aware of a breach affecting your personal information, we will notify you and the National Privacy Commission as required by the Data Privacy Act.
9. Your rights
Under the Data Privacy Act you have the right to:
- Be informed about how your personal information is processed.
- Access the personal information we hold about you.
- Correct information that is inaccurate or incomplete.
- Object to processing, or withdraw consent where we relied on it.
- Have your information erased or blocked in the circumstances the law allows.
- Receive a copy of your data in a portable format.
- Be indemnified for damages caused by inaccurate or unlawfully obtained information.
- Complain to the National Privacy Commission.
To exercise any of these, email us at support@creacio.co. We will respond within a reasonable time and may need to verify your identity first.
10. Children
CreaCio is not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a child has created an account, contact us and we will remove it.
11. Changes to this policy
We may update this policy as the service changes. The "last updated" date at the top will always reflect the current version. If a change materially affects how we handle your personal information, we will tell you by email or through the service before it takes effect.
12. Contact us
For any question about this policy, your personal information, or to exercise your rights: support@creacio.co
You also have the right to lodge a complaint with the National Privacy Commission of the Philippines.