Privacy Policy

This Privacy Policy applies to CreativeFly websites, applications, AI creative-production features, reference analysis, templates, asset and project workspaces, subscriptions, credits, and CreativeFly AdSignal (together, the “Services”). The Services are operated by Spacetime Creative Pte. Ltd (“CreativeFly,” “we,” “us,” or “our”).

This policy describes how we process personal information when you visit, create an account, upload or generate content, purchase a plan or credits, connect an authorized service, contact support, or otherwise use the Services.

Account and contact information may include your name, email address, verification status, account identifier, organization and team information, language preference, and communications with us.

Service and device information may include browser and device type, operating system, IP address, timestamps, page and feature interactions, authentication, security, error and audit logs, cookies, and similar technologies.

Creative-production information may include prompts, briefs, images, videos, audio, reference materials, templates, model and generation settings, projects, assets, outputs, and related trace metadata that you submit or create.

Transaction information may include order number, plan or credit package, amount, currency, payment status, and billing or support information. Payment providers process payment credentials; we do not intend to receive your payment password or full card number.

AdSignal may process documented public, advertiser-authorized, licensed, or otherwise permitted advertising information, together with source, market, capture time, rights basis, confidence, and evidence metadata.

We process information to provide and secure the Services, authenticate users, run requested asynchronous generation and analysis jobs, save results to Assets, support project collaboration, complete purchases, prevent fraud and abuse, provide customer support, maintain traceability and version history, comply with law, and improve reliability and usability.

Depending on the context and applicable law, our legal bases may include performing a contract with you, complying with legal obligations, our legitimate interests in operating and protecting the Services, and consent where required. We do not use customer prompts, media URLs, filenames, emails, phone numbers, payment details, or raw provider errors in product analytics.

We use service providers for cloud hosting and object storage, content delivery, communications, authentication, payments, observability, security, analytics, and AI model or compute services. The content and settings needed to perform your request may be sent to the selected provider. Providers process information under their own terms and our applicable contractual and security controls.

We may disclose information when required by law, to protect users or the Services, in connection with a corporate transaction subject to appropriate safeguards, or at your direction or with your consent. We do not sell personal information for money.

Assets, projects, delivery links, template groups, or social publishing features may let you share content with team members, clients, the public, or connected platforms. You control the intended audience and are responsible for confirming that you have the rights and permissions required to share the content.

Public or advertiser-authorized records processed by AdSignal are kept separate from private account content and retain their source and rights metadata. Platform audiovisual media remains reference-only unless applicable terms or a written licence permits storage and downstream use.

CreativeFly operates internationally. Information may be processed in Singapore or in another country where we or our providers operate. Where required, we use appropriate contractual safeguards, notices, consent, assessments, or other lawful transfer mechanisms.

We apply reasonable technical and organizational safeguards, including access control, least-privilege service roles, transport encryption, secret isolation, audit logging, backups, monitoring, and incident response. No method of transmission or storage is completely secure.

We retain personal information for as long as reasonably necessary to provide the Services, maintain security and transaction records, resolve disputes, and meet legal obligations. We then delete, anonymize, or isolate it as appropriate.

Retention may vary by content type, plan, provider, source licence, and legal requirement. Provider deletion, revocation, and licence requirements take priority over a general product retention period. Backup copies may remain for a limited period before scheduled deletion.

Depending on your jurisdiction, you may have rights to access, obtain a copy of, correct, delete, or restrict processing of your personal information; object to certain processing; withdraw consent; close your account; or complain to a competent authority.

Submit a request to yuki@spacetime.world. We may need to verify your identity and authority. We may retain limited information where required by law or reasonably necessary for security, fraud prevention, accounting, or legal claims.

The Services are intended for business users and people able to enter into a binding agreement. They are not directed to children under 13, or a higher minimum age where required by local law. If we learn that we collected a child’s personal information without required authorization, we will take appropriate steps to delete it.

We may update this policy as the Services, providers, or legal requirements change. We will publish the updated version here and provide additional notice when a change materially affects your rights.

Questions, complaints, and privacy-rights requests may be sent to yuki@spacetime.world.