Privacy Policy

Scope

This Privacy Policy explains how the independently operated Krea2 service at krea2.online handles personal data. Krea2 is not affiliated with or endorsed by Krea AI, Inc.

Information we process

Depending on how you use the service, we process:

• Account data: name, email address, authentication identifiers, and account settings
• Creative inputs: prompts, uploaded reference images, model settings, and support messages
• Generation records: provider request identifiers, outputs, status, credit debits or restorations, timestamps, and saved history
• Payment records: purchase, subscription, amount, currency, status, and Stripe customer or transaction identifiers; Krea2 does not receive or store your full card number
• Technical data: IP address, browser and device information, security signals, logs, language, pages visited, and feature events

Please do not upload highly sensitive personal information unless it is necessary and you have the right to process it.

How we use information

We use data to provide generation and storage, authenticate accounts, process payments and credits, deliver support and transactional email, prevent fraud and abuse, diagnose failures, comply with law, and understand aggregate product performance. We do not sell personal information.

Providers and disclosures

Operating Krea2 requires limited disclosures to service providers acting for their respective functions:

• Cloudflare for hosting, security, database, object storage, workflows, caching, and email routing
• Fal and the selected model endpoint for processing prompts, settings, and reference images and returning generated outputs
• Google when you choose Google authentication
• Stripe for checkout, billing, fraud prevention, and payment records
• Email and analytics providers only when enabled for transactional delivery or product measurement

These providers may process data in other countries under their own terms and privacy commitments. We may also disclose information when required by law, to address abuse or security incidents, or in connection with a legitimate business transfer.

Retention

We retain account, payment, credit, generation, and security records for as long as needed to provide the service, resolve disputes, prevent fraud, meet legal obligations, and maintain reliable billing. Uploaded references and outputs may remain in private account history until you delete them or close your account, subject to backups, fraud records, and legal retention. Provider-side copies may follow the provider's retention terms.

Security

We use access controls, encrypted transport, provider-managed encryption, scoped secrets, and isolated Krea2 storage. No online system can guarantee absolute security, so you should use a secure account and avoid unnecessary sensitive uploads.

Your choices and rights

You may review or update account information in Settings and request access, correction, deletion, or other rights available under applicable law. Some payment, fraud, tax, or security records may need to be retained. You can control optional analytics cookies as described in our Cookie Policy.

Children

Krea2 is not directed to children. Do not use the service or submit a child's personal data if you are not legally authorized to do so.

Changes and contact

We may update this policy when the product, providers, or legal requirements change. Questions and privacy requests may be sent to support@krea2.online.