Privacy Policy

Overview

CLEVER CREATOR AI INC, operating as CleverCreator AI from New York, United States ("we", "us", "our"), operates the platform available at clevercreator.ai and all associated subdomains and products. This Privacy Policy explains how we collect, use, store, and share information about you when you use our services.

This policy explains our handling of personal information; it is not a request for blanket consent. Where processing requires your consent, we request it separately. Creating an account or accepting our Terms does not, by itself, subscribe you to marketing emails. Product-specific privacy notices may provide additional information about the product you choose.

Information we collect

We collect information in three ways: information you provide directly, information collected automatically, and information from third parties.

Information you provide

• Account information: name, email address, account credentials, and optional profile photo.
• Payment information: billing address and card details — processed and stored by Stripe. We never store raw card numbers.
• Content you create: prompts, conversations, generated images, workflows, and other content produced using our tools.
• Communications: messages you send to our support team and responses we provide.
• Newsletter and marketing preferences: your email address, subscription or withdrawal date, signup source and available records of the permission you gave. Subscription forms may also record referral information and security-related device or IP information.
• Survey and feedback responses: when you voluntarily participate in research or provide feedback.

Information collected automatically

• Usage data: features used, pages visited, session duration, and interaction patterns — used to improve the product.
• Device and browser data: IP address, browser type, operating system, and language preferences.
• Cookies and similar technologies: see the Cookies section below for full details.
• Log data: server logs including request timestamps, error logs, and performance metrics.

Information from third parties

• Social login providers: if you sign in with Google, GitHub, Microsoft, or Facebook, we receive your name, email, and profile picture from that provider.
• Referral partners: if you were referred by a partner, we receive a referral identifier.

How we use your information

We use your information to operate, improve, and protect the service. Specifically:

• To create and manage your account and authenticate you.
• To provide and personalise the AI tools and features you use.
• To process payments and manage your subscription.
• To send transactional emails (receipts, password resets, security alerts).
• To send newsletters, product updates and promotional announcements when you explicitly opt in, limited to the products and purposes covered by your permission.
• To diagnose bugs, monitor performance, and improve reliability.
• To detect and prevent fraud, abuse, and security incidents.
• To comply with legal obligations.

Newsletters and marketing emails

You can choose to receive marketing by subscribing to a newsletter or explicitly opting in during signup. The notice presented with that choice defines its scope. A CleverCreator newsletter may include news about TutorMigo and ChatterMate when the subscription notice identifies those products; permission for one product is not automatically permission for unrelated campaigns.

Marketing is optional and is not a condition of creating or keeping an account. You can withdraw consent at any time using the unsubscribe link in a marketing email or by contacting us. Unsubscribing from marketing does not stop essential account, security, billing or requested service messages.

We use email delivery providers, including Amazon Web Services Simple Email Service (Amazon SES), to process recipient addresses, email content and delivery information. Delivery failures, complaints and unsubscribe requests help us prevent further unwanted marketing. We may retain minimal permission and suppression records as needed to honour your choice, prevent abuse and meet applicable legal obligations, including after account deletion.

How we share your information

We do not sell your personal data. We share it only in the following limited circumstances:

• Service providers: trusted vendors who help us operate the platform (hosting, payments, email delivery, analytics, error monitoring). Each is bound by data processing agreements requiring them to protect your data.
• AI model providers: relevant prompts, files and other request content are transmitted to selected providers, such as OpenAI, Anthropic or Google, to generate responses. Their applicable terms and privacy notices govern their processing; additional protections depend on the selected service and any agreement that applies.
• Legal requirements: if required by law, court order, or government authority — we will notify you if permitted to do so.
• Business transfers: in the event of a merger, acquisition, or asset sale, your data may transfer as part of that transaction. We will notify you with at least 30 days' notice.
• With your consent: in any other circumstance where you have explicitly agreed.

Data retention

We retain your personal data for as long as your account is active or as needed to provide the service. Specifically:

• Account data: retained until you delete your account, then purged within 30 days.
• Content and conversations: retained for the life of your account. You can delete individual conversations at any time.
• Payment records: retained for 7 years to comply with financial regulations.
• Log data: retained for 90 days for debugging and security purposes.
• Backup data: may persist in encrypted backups for up to 90 days after deletion.
• Marketing permission and suppression records: minimal records may be retained where necessary to document permission or prevent sending to unsubscribed, complained-about or undeliverable addresses. They are not permission to resume marketing.

Your rights

Depending on your location, you have the following rights regarding your personal data:

• Access: request a copy of all personal data we hold about you.
• Correction: request correction of inaccurate or incomplete data.
• Deletion: request deletion of your account and all associated data.
• Portability: receive your data in a machine-readable format.
• Objection: object to processing based on legitimate interests.
• Restriction: request that we limit how we process your data.
• Withdrawal of consent: where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us. We may need to verify your identity. We respond within the period required by applicable law, normally one month for requests under UK or EU data protection law, and explain any permitted extension.

Security

We use technical and organisational safeguards designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. These measures take account of the nature of the information and the risks involved.

• We take steps to protect information during transmission and storage, and to safeguard account access.
• Access to production data is restricted to authorised personnel on a need-to-know basis.
• We review our safeguards and investigate suspected security incidents.
• We assess security incidents and notify regulators and affected individuals when required by applicable law. Notification requirements and deadlines depend on the incident and its risks.

No method of transmission or storage is completely secure. We cannot guarantee absolute security.

To report a security vulnerability, please use our contact form.

Cookies

We use cookies and similar technologies to operate the platform, remember your preferences, and understand how the product is used. You can manage cookie preferences in your browser settings, or contact us if you'd like to opt out of non-essential cookies.

International data transfers

CleverCreator AI is operated from New York, United States. Your information may be processed in the United States and other countries where our service providers operate. Those countries may have different data protection laws from your country of residence. Our operating location does not remove any mandatory protections that apply to your information.

Where we transfer data internationally, we ensure appropriate safeguards are in place including Standard Contractual Clauses (SCCs) approved by the UK ICO and European Commission. Enterprise customers requiring a Data Processing Agreement can request one via our contact form.

Children's privacy

These general platform notices do not authorise a child to create an account or replace product-specific age and guardian requirements. The availability of educational content or a child-oriented interface is not, by itself, permission to collect a child's personal information. Any child-directed service requires appropriate product-specific notices and safeguards under applicable law. Do not subscribe a child's email address to our marketing newsletter. If you believe a child's personal information has been provided without the required authorisation, please contact us so we can investigate and take appropriate action.

Changes to this policy

We may update this Privacy Policy from time to time. These revisions and future material changes take effect no earlier than 14 days after publication and the required email and prominent platform notice. Until then, the previously effective policy applies. We will request fresh consent where required; continued use, a policy update or a change notice does not grant marketing permission or expand an existing subscription.

Contact & complaints

For privacy-related questions or to exercise your rights, use our contact form.

If you are based in the UK or EU and believe we have not handled your data correctly, you have the right to lodge a complaint with your local supervisory authority (UK: ICO at ico.org.uk; EU: your national data protection authority).