Privacy Policy

Last updated: February 2026

Creative Studio ("we", "us", "our") operates the Creative Studio Chrome Extension and associated web services. This Privacy Policy explains how we collect, use, and protect your information.

1. Information We Collect

Account Information: When you create an account, we collect your email address, name, and dealership name. If you sign in with Google OAuth, we receive your name and email from Google.

Design Data: We store the designs you create, including canvas data, images you upload, and rendered outputs. This data is stored on our servers and associated with your account.

Usage Data: We collect anonymized usage metrics such as feature usage, design creation counts, and error logs to improve the product.

Payment Information: Payment processing is handled by Stripe. We do not store your credit card details — Stripe handles all payment data securely.

2. How We Use Your Information

To provide and maintain the Creative Studio service
To authenticate your account and manage subscriptions
To store and sync your designs across sessions
To generate AI backgrounds using OpenAI (your prompts are sent to OpenAI's API)
To send transactional emails (account confirmation, billing receipts)
To improve the product based on aggregated, anonymized usage patterns

3. Chrome Extension Permissions

The Creative Studio Chrome Extension requests the following permissions:

sidePanel: To display the design editor in Chrome's side panel
contextMenus: To add "Use in Creative Studio" when right-clicking images
storage: To store your authentication tokens and preferences locally
identity: To enable Google Sign-In authentication
activeTab: To detect when you're on an ad platform (Facebook Ads, Google Ads) for one-click creative deployment
alarms: To periodically verify your license status

We do not read or collect your browsing history, and the extension only interacts with web page content on supported ad platforms when you explicitly trigger the "Deploy" action.

4. Data Storage & Security

Your data is stored on secure servers using PostgreSQL databases with encryption at rest. File assets (images, renders) are stored in S3-compatible object storage. All data transmission uses HTTPS/TLS encryption.

5. Third-Party Services

OpenAI: AI background generation prompts are sent to OpenAI. See OpenAI's Privacy Policy.
Stripe: Payment processing. See Stripe's Privacy Policy.
Sentry: Error tracking for service reliability. No personal data is included in error reports.

6. Data Retention & Deletion

Your account data and designs are retained as long as your account is active. You may request deletion of your account and all associated data by emailing [email protected]. We will process deletion requests within 30 days.

7. Your Rights

You have the right to access, correct, or delete your personal data. You may export your designs at any time. To exercise these rights, contact us at [email protected].

8. Changes to This Policy

We may update this Privac