Privacy

Privacy Policy

Effective Date: April 1, 2026
Last Updated: April 1, 2026

Creatiq Communications, Inc. (“Creatiq,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit creatiq.com, use our products and services, or interact with us through any channel including email, SMS, WhatsApp, and our AI-powered agents.

This policy applies to all users, including visitors, clients, subscribers, and anyone who communicates with us. Please read it carefully. By using our services, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

Information You Provide Directly

  • Contact Information: Name, email address, phone number, mailing address, company name, and job title.
  • Account Information: Username, password, and account preferences for our platforms.
  • Payment Information: Billing address and payment details, processed securely through Stripe. We do not store your full credit card number on our servers.
  • Communications: Messages, inquiries, and content you send via email, contact forms, SMS, WhatsApp, Slack, or interactions with our AI agents (including Atlas).
  • Project Materials: Files, documents, brand assets, and other materials you provide in connection with our services.
  • Survey and Feedback Data: Responses to surveys, reviews, or feedback forms.

Information Collected Automatically

  • Device and Browser Information: IP address, browser type, operating system, device identifiers, and screen resolution.
  • Usage Data: Pages visited, time spent on pages, click patterns, referral URLs, and navigation paths.
  • Cookie Data: Information collected through cookies and similar technologies (see Section 7 below).
  • Location Data: Approximate geographic location inferred from your IP address.
  • Communication Metadata: Timestamps, delivery status, and read receipts for SMS and WhatsApp messages, as provided by our messaging platforms.

Information from Third Parties

  • Payment Processors: Transaction confirmation and billing data from Stripe.
  • Messaging Platforms: Delivery reports and interaction data from Twilio (SMS) and Meta (WhatsApp).
  • Analytics Providers: Aggregated website usage data from Google Analytics and similar tools.
  • Public Sources: Publicly available business information used for lead qualification and outreach.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • Service Delivery: To provide, maintain, and improve our agency services, software products, and AI-powered tools.
  • Communications: To send transactional messages, project updates, appointment confirmations, and respond to your inquiries via email, SMS, or WhatsApp.
  • AI Agent Operations: To power Atlas and other AI agents that assist with client communications, lead qualification, scheduling, and project coordination.
  • Marketing: To send promotional materials, newsletters, and offers, only with your consent. You may opt out at any time.
  • Payment Processing: To process transactions, send invoices, and manage subscriptions.
  • Analytics and Improvement: To analyze usage patterns, improve our websites and services, and develop new features.
  • Security and Compliance: To detect and prevent fraud, enforce our Terms, and comply with legal obligations.
  • Legal Obligations: To respond to subpoenas, court orders, or other legal processes, and to exercise or defend legal claims.

3. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

  • Contract Performance: Processing necessary to fulfill our service agreements with you.
  • Legitimate Interests: Processing for our legitimate business interests, such as improving our services, marketing to existing clients, and ensuring security, where those interests are not overridden by your rights.
  • Consent: Processing based on your explicit consent, such as marketing communications, non-essential cookies, and WhatsApp messaging. You may withdraw consent at any time.
  • Legal Obligation: Processing necessary to comply with applicable laws.

4. AI and Automated Decision-Making

Creatiq uses AI-powered agents, including Atlas, in our service delivery. These agents may:

  • Respond to inquiries and qualify leads based on information you provide.
  • Generate content, recommendations, and project updates.
  • Route your communications to the appropriate team member or service.
  • Analyze project data to provide status updates and identify issues.

We do not use fully automated decision-making that produces legal effects or similarly significant effects on you without human oversight. You have the right to request human review of any AI-assisted decision that affects your engagement with us.

Interactions with our AI agents may be stored and reviewed to improve service quality. These interactions are subject to the same data protection standards as all other personal information we process.

5. How We Share Your Information

We do not sell your personal information. We may share your information with the following categories of recipients:

  • Service Providers: Third-party vendors who assist us in delivering our services, including Stripe (payment processing), Twilio (SMS), Meta (WhatsApp), Google (analytics, workspace), Slack (internal communications), Supabase (data infrastructure), and Calendly (scheduling). These providers are contractually obligated to use your data only for the purposes we specify.
  • Professional Advisors: Attorneys, accountants, and consultants who need access to provide professional services to us.
  • Legal and Regulatory: Government authorities, law enforcement, or other third parties when required by law, subpoena, or court order, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
  • Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

6. SMS and WhatsApp Communications

SMS (Text Messaging): We use Twilio to send and receive SMS messages. When you communicate with us via SMS, Twilio processes your phone number, message content, and delivery metadata in accordance with Twilio’s Privacy Policy. We retain SMS communication records for the duration of our business relationship plus any legally required retention period.

WhatsApp: We use the WhatsApp Business Cloud API via Meta to communicate with you on WhatsApp. When you message us on WhatsApp, Meta processes your phone number, profile information, message content, and metadata in accordance with WhatsApp’s Privacy Policy. Messages are end-to-end encrypted in transit. We store conversation records on our systems for service delivery and quality purposes.

Opt-Out: You may opt out of SMS by replying STOP to any message. You may opt out of WhatsApp communications by messaging “STOP” or blocking our number. Opting out of messaging does not affect your ability to use our other services.

We comply with the Telephone Consumer Protection Act (TCPA), the CAN-SPAM Act, and all applicable federal and state messaging regulations. We do not send unsolicited commercial messages without your prior express consent.

7. Cookies and Tracking Technologies

Our websites use cookies and similar technologies to provide functionality, remember your preferences, analyze usage, and deliver relevant content.

Types of Cookies We Use

  • Essential Cookies: Required for basic website functionality (e.g., session management, security). These cannot be disabled.
  • Analytics Cookies: Help us understand how visitors use our site (e.g., Google Analytics). Collected only with your consent.
  • Functional Cookies: Remember your preferences and settings to enhance your experience.
  • Marketing Cookies: Used to deliver relevant advertising and track campaign performance. Collected only with your consent.

Managing Your Preferences

We use Complianz as our consent management platform. When you first visit our website, you will be presented with a cookie consent banner that allows you to accept or decline non-essential cookies. You can update your preferences at any time by clicking “Opt-out preferences” in the site navigation or footer.

We honor Global Privacy Control (GPC) signals. If your browser sends a GPC signal, we automatically treat it as a valid opt-out of non-essential cookies and the sale or sharing of personal information.

8. Your Rights Under California Law (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act and California Privacy Rights Act:

  • Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, our purposes for collecting it, and the categories of third parties with whom we share it.
  • Right to Delete: You may request that we delete the personal information we have collected about you, subject to certain legal exceptions.
  • Right to Correct: You may request that we correct inaccurate personal information.
  • Right to Opt Out of Sale/Sharing: We do not sell your personal information. If our practices change, we will provide a “Do Not Sell or Share My Personal Information” link and honor opt-out requests, including GPC signals.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.
  • Right to Limit Use of Sensitive Personal Information: You may request that we limit our use of sensitive personal information to what is necessary to provide our services.

To exercise any of these rights, contact us at privacy@creatiq.com. We will verify your identity and respond within 45 days as required by law.

9. Your Rights Under EU/UK Law (GDPR)

If you are located in the European Economic Area or United Kingdom, you have the following rights under the General Data Protection Regulation:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your personal data, subject to legal retention requirements.
  • Right to Restrict Processing: Request that we limit how we use your data in certain circumstances.
  • Right to Data Portability: Request your data in a structured, commonly used, machine-readable format.
  • Right to Object: Object to processing based on legitimate interests, including direct marketing.
  • Right to Withdraw Consent: Withdraw consent at any time for processing activities based on consent.
  • Right to Lodge a Complaint: File a complaint with your local data protection authority.

To exercise any of these rights, contact us at privacy@creatiq.com. We will respond within 30 days as required by GDPR.

10. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

  • Client project data: Duration of the business relationship plus 7 years for legal and tax purposes.
  • Communication records (email, SMS, WhatsApp): Duration of the business relationship plus 3 years, or as required by applicable law.
  • Analytics data: Aggregated and anonymized within 26 months of collection.
  • Marketing consent records: Retained for the duration of consent plus 3 years to demonstrate compliance.

When data is no longer needed, we securely delete or anonymize it.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS/SSL), access controls, regular security assessments, and secure data storage infrastructure. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

12. International Data Transfers

Creatiq is based in the United States of America. If you are accessing our services from outside the U.S., your information will be transferred to and processed in the United States of America. For transfers from the EEA or UK, we rely on Standard Contractual Clauses approved by the European Commission, or other appropriate safeguards as required by GDPR. By using our services, you acknowledge this transfer.

13. Children’s Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete that information promptly. If you believe we have inadvertently collected information from a child, please contact us at privacy@creatiq.com.

14. Third-Party Links and Services

Our websites and communications may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. Material changes will be communicated via email or a prominent notice on our website at least 30 days before taking effect. The “Last Updated” date at the top of this policy indicates when the most recent revisions were made.

16. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or have a complaint about how we handle your data, please contact us:

Creatiq Communications, Inc.
Privacy Inquiries: privacy@creatiq.com
General Inquiries: legal@creatiq.com
Website: creatiq.com

For GDPR-related inquiries, you may also contact your local data protection authority.