Creartful AIPrivacy policy
Privacy policy.
What we collect when you use this site or work with us, why we collect it, who it goes to and the choices you have. Written in plain words.
The short version
- We collect what you send us through forms and email, plus the basic technical details every website receives.
- We use it to reply to you and to do work you ask for. We do not sell it, and we do not use it for targeted advertising.
- If you sign up for emails, we send only what you asked for, and every email has an unsubscribe link.
- There are no advertising trackers on this site. When you buy a plan, our store keeps a note of how you arrived, such as the site or campaign link that sent you, with your order.
- AI tools help with our work on business terms that keep your information out of model training by default, and a person at the studio reviews what they produce.
- Email info@creartful.com at any time to see, correct or delete your information.
Who we are
This site is run by Creartful LLC ("Creartful", "we", "us"), a creative and technology studio in Dana Point, California. Creartful AI is the name of our AI marketing service. Our studio site, creartful.com, follows the same practices. This policy covers the site, the enquiries you send us and how we stay in touch.
We play two roles. For visitors and people who contact us, we decide how information is used, and this policy applies. For client work, we handle information inside your accounts and tools on your instructions, as your service provider, and your written plan sets the rules. If you are a customer of one of our clients and have a question about your data, please contact that business first. We will help them answer you.
What we collect
We collect only what we need to reply to you, do the work and run the site. This table is our notice at collection: what we collect, where it comes from and why.
| What | Examples | Where it comes from | Why we use it |
|---|---|---|---|
| Contact details | Name, email address, phone number, company | You, through a form or email | To reply, arrange a call and send what you asked for |
| Your enquiry | Website address, platform, goals, what you like, timeline, how you heard about us, your message | You, through the contact, call request, free mockup or support forms | To understand what you need and prepare a mockup, report, plan or answer |
| Email preferences | Your email address and the topics you chose | You, through an email sign-up | To send the emails you asked for |
| Client portal account | Name, email address, sign-in details (passwords are stored only in scrambled, hashed form) and two-step sign-in settings if you turn them on | You, when you buy a plan or we set up your account | To let you sign in and see your billing, support requests, briefs, changelog and reports |
| Orders and billing | Name, company, billing address, plan, order and renewal history, the card type, last four digits and expiry date, and the IP address and browser used to place the order | You at checkout, and Stripe, our payment processor | To take payment, renew or cancel your plan, send receipts, prevent fraud and keep tax records |
| How you arrived | Referring site, campaign tags in the link, entry page, device type and pages viewed in the visit | Cookies set by our store (see the cookie policy) | Saved with an order only if you buy, so we can see which pages and campaigns lead to sales |
| Support requests | Your questions, replies and any files you attach | You, through the help desk or support form | To answer you and fix problems |
| Assistant chats | What you type into the site assistant or the brief coach, the page you were on and, if you are signed in, which account you used | You, through the chat window or the brief coach | To answer your question, draft a support ticket or brief for you to check and send, and so a person at the studio can review the answers |
| AI briefs | The briefs you send from your portal and anything you attach | You, as a client | To pass the brief to your own Claude project and prepare the work, which a person reviews |
| Technical details | IP address, browser and device type, pages requested, date and time | Your browser, recorded by our host in server logs | Security, preventing abuse and keeping the site running |
| Preference data | Your cookie choices and whether you closed the sign-up box | Your browser | To remember your choices (see the cookie policy) |
| Client account information | Data in the tools you connect | You, as a client | To do the work in your written plan |
We do not ask for sensitive information, such as health details, government ID numbers or bank and card numbers, through this site’s forms. Please do not send it. Card details you enter at checkout go straight to Stripe and never reach our servers. We do not buy personal information from data brokers, and we do not build profiles about visitors.
How we use it
- To reply to your enquiry and arrange a call.
- To prepare a free mockup, report or plan you asked for.
- To send the emails you signed up for, and to run the client portal.
- To provide our services if you become a client.
- To keep the site secure, block spam and fix problems.
- To meet legal, tax and accounting obligations, and to protect our rights.
We do not sell your personal information. We do not share it for cross-context behavioral advertising, and we do not use it to make automated decisions that have legal or similarly significant effects on you.
AI tools
We use AI tools in our work, including Anthropic’s Claude on its commercial terms. Under those terms, what goes in and what comes out is not used to train models by default. AI providers act as our service providers. They may keep data for a limited time under their own terms, for example to check for misuse.
- We use information from an enquiry with AI tools only to reply to you or to prepare work you asked for.
- A person at the studio reviews AI-assisted work before it is sent to you or published.
- We do not use AI to make decisions about you that have legal or similarly significant effects, such as decisions about credit, employment or housing.
- Client data goes into AI tools only as far as your written plan allows.
- AI briefs you send from the portal go to the Claude project set up for your business, not to a shared one.
- The site assistant and the brief coach are AI. They run on Anthropic’s Claude through our own account and answer from the pages of this site. They never send a support ticket or a brief for you: you see the draft and choose whether to send it. What you type is sent to Anthropic to produce the reply, and we keep a transcript on our host so a person can review the answers. Please do not type passwords, card numbers or other sensitive details into the chat.
For how the client workspace reaches your tools and who can see what, read Your data.
Who we share it with
We share information only with service providers that help us run the site and the business, only as much as they need, and only for them to provide their service to us. These include:
- WP Engine, our website host, which stores the site, your portal account, orders, support requests, briefs and server logs.
- Stripe, which processes card payments for plans bought on the site. Stripe handles your card details under its own privacy policy and uses them to prevent fraud.
- Our email providers, which deliver form notifications, receipts and account emails, and Klaviyo, which stores email sign-ups and sends the emails you asked for.
- Anthropic, which runs the site assistant, the brief coach and the AI tools we use for client work, on its commercial terms.
- Other software tools we use to do client work, on business terms.
- A scheduling service, if you book a call through a booking calendar on the site. It receives the details you enter there.
- Professional advisers, such as accountants and lawyers, when needed.
We may also disclose information if the law requires it, to protect our rights or someone’s safety, or as part of a sale or reorganization of the business.
We have not sold or shared personal information in the past 12 months, and we do not give it to other companies for their own marketing.
How long we keep it
- Enquiries that do not become work: as long as we need them to reply, follow up and keep reasonable business records, then we delete them.
- Email sign-ups: until you unsubscribe.
- Client portal accounts: for the term of your plan, then closed.
- Orders, invoices and payment records: as long as tax and accounting rules require.
- Assistant chats: kept on our host for as long as we need them to review and improve the answers, then deleted. Anthropic keeps chat content only for a limited time under its own terms.
- Support requests and AI briefs: for the term of your plan and a reasonable time afterward, so we can answer follow-up questions.
- Client records: for the term of the work and as long afterward as tax and legal rules require.
- Server logs: kept by our host for a limited period on its own schedule.
- Cookies: see the cookie policy for how long each one lasts.
Your choices and rights
Wherever you live, you can ask us to:
- tell you what personal information we hold about you and how we use it;
- give you a copy of it;
- correct it;
- delete it;
- stop sending you marketing email (every one has an unsubscribe link).
US state privacy laws. California and a growing number of other states, including Virginia, Colorado, Connecticut, Texas and Oregon, give their residents rights over personal information: to know, access, correct and delete it, to get a portable copy, to opt out of its sale, sharing, targeted advertising and certain profiling, to limit the use of sensitive personal information, and not to be treated differently for using these rights. We do not sell or share personal information, use it for targeted advertising or profiling, or collect sensitive personal information through this site, so some of these rights have nothing to act on. You can still ask, and we answer every request the same way, whichever state you live in.
How to ask. Email info@creartful.com and say what you would like, using the email address you used with us. We confirm we have your request within 10 business days and answer within 45 days. If we need longer, up to another 45 days, we will tell you why. We may ask for details to confirm it is you, and we use them only for that check. Someone you authorize can ask for you, with your signed permission.
Appeals. If we turn down a request, you can appeal by replying with “Appeal” in the subject line. We answer appeals within 45 days. If you are still not satisfied, you can contact your state attorney general.
Global Privacy Control and Do Not Track. We treat a Global Privacy Control signal from your browser as a valid request to opt out of the sale or sharing of personal information for that browser. Our cookie banner also treats a Do Not Track signal the same way. Because we do not sell or share personal information, there is nothing further to switch off.
Visitors outside the US
We are based in the United States, and the information we collect is handled mainly in the United States. If you contact us from another country, your information will be handled there, where privacy laws may differ from yours.
If you are in the European Economic Area, the United Kingdom or a place with similar laws, we rely on your request when we reply to you, on our legitimate interest in running and securing the site, and on our legal obligations. You have the rights described above, and you can also complain to your local data protection authority.
Security
We use reasonable technical and organizational measures to protect information, including encrypted connections, access limited to the people who need it and the least access each tool needs. No system is perfectly secure, so we cannot promise absolute security. If a security incident affects your personal information, we will tell you and the authorities as the law requires.
Children
This site is meant for businesses and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, email info@creartful.com and we will delete it.
Other sites
Our pages link to other websites and services. Their privacy practices are their own, so please read their policies.
Changes to this policy
We update this policy when our practices or the law change, and we change the date at the bottom of the page. If a change is significant, we will say what changed at the top of this page for a reasonable time.
Contact
Creartful LLC, Dana Point, California. Email info@creartful.com.
Last updated October 11, 2026.