CREOPROMPT

Privacy policy

Version dated 19 October 2026. Data controller: Nikita Vyacheslavovich Khrapkov, Russian tax ID 270326173520. Self-employed under the Russian professional income tax regime, without individual entrepreneur registration. Region: Krasnodar Krai, Russia. Contact for privacy requests: creoprompt@yandex.ru. This policy covers creoprompt.com; external websites also apply their own policies.

Data and purposes

Accounts use your email, protected one-time codes and session identifiers for authentication, security and providing the requested service. Purchases use email, product, amount, order identifier and status, balance and generation usage for contract performance, support, refunds and legal accounting. Existing Prodamus purchases may also send the purchaser’s name and email to our Yandex mailbox. We do not send marketing emails to buyers.

Generation processes your prompt, prepared source image, output, parameters, time and request status to fulfil your request and show private history. Generation requests use a technical account identifier, not your email. Contract-related data is processed to enter into or perform the requested contract; legally required payment records are processed to meet legal obligations. Technical request information protects the site; browser storage remembers language. Support processes the contact and message you provide. Do not upload sensitive, confidential or unnecessary personal data. We do not use photos to identify people through biometric recognition.

Service providers

Beget hosts the site and private account data. Beget mail services and Yandex Mail deliver or receive operational messages. Robokassa processes generator payments; Payform / Prodamus may process existing library and designer-pack purchases. Necessary order details and email are shared for payment and receipts. CreoPrompt forms do not collect card security codes, banking passwords or full card details.

Generation sends the prompt and source image to the API provider Polza and its model supplier. Model processing may occur outside Russia. Merely visiting this site does not constitute consent to unrestricted international transfers of personal data. Such transfers require an appropriate legal basis and applicable safeguards and procedures. Do not submit personal or confidential information before those requirements are satisfied. External messaging and cloud-storage services also process data when you choose to use them. We do not publish your email, support messages or generated images without a separate lawful basis. Legally required payment data may be provided to tax authorities and other competent authorities.

Retention and security

Email codes last 10 minutes, account sessions up to 30 days, library sessions up to 7 days and separate owner sessions up to 8 hours unless ended earlier. Language preferences remain until changed or cleared. These functional identifiers are not used for advertising.

Generated files are available in CreoPrompt for 24 hours. Expired local files are cleaned during subsequent request processing; this does not promise immediate deletion from every backup. Source photos are not retained as separate permanent files on the CreoPrompt server. Providers have their own retention: Polza states up to 7 days for files in its storage; the model supplier applies its own rules. Expiry of your site history does not establish deletion by every recipient.

Account information is retained to service your account and purchased balance. On account closure it is deleted or anonymised except where payment records, legal obligations or a specific dispute require retention. We can explain which records remain and why. We restrict access, use HTTPS and keep server keys and account data outside public files.

Analytics and your rights

The site may use Google Analytics and Yandex Metrica for page visits, interactions, browser details and technical identifiers. Analytics is not a purchase requirement. Where consent is required it must be obtained separately before the relevant counter starts; accepting purchase terms is not that consent. Ask the controller about active counters or disabling analytics.

Contact creoprompt@yandex.ru to request access, correction, account closure, erasure where no lawful retention basis remains, or withdrawal of consent-based processing. Withdrawal does not remove processing needed for an existing contract or legal duty. Do not email identity documents unsolicited; if identity verification is needed, we will arrange a proportionate method. You may complain to Roskomnadzor or another competent data protection authority. Mandatory rights applicable in your country are not limited by this policy.