Privacy Policy

Last updated: October 16, 2026

Who is responsible for your information

This Privacy Policy explains how information is handled when you use Krea 3 at krea-3.net. The operator of this independent website is responsible for the processing described here and can be contacted at contact@krea-3.net. This policy concerns this website, not Krea AI's separate services.

Information processed through the service

The information involved depends on how you use the service:

• Account identifiers: your email address, account identifier and information returned through Google sign-in or email verification.
• Content you submit: uploaded images, reference files, written prompts, selected generation settings and any information visible within those files.
• Generated content and activity: output images, task identifiers, processing status, generation history, credit balances and credit usage.
• Transaction information: the plan or credit package purchased, payment and subscription references, transaction status and records needed to handle billing questions.
• Technical and support information: IP addresses and request information processed by service infrastructure, browser or device information used for security, and details you send in support correspondence.

Information comes from you, your use of the service, your chosen sign-in provider and payment or infrastructure providers. You can browse public pages without uploading an image. Account and content information is needed when you choose features that depend on it.

Why we use information

We use account information to authenticate you and provide account access. We process images, prompts and settings to fulfil generation requests and display results. Task and credit records support history, usage accounting and troubleshooting; transaction information supports purchases and billing enquiries. Technical information helps operate the service, investigate errors and prevent abuse.

Where the GDPR applies, the relevant grounds are performing our agreement with you for requested services; legitimate interests in securing and maintaining the service, subject to your rights; compliance with applicable legal obligations; and consent where required for optional processing. We explain any additional purpose before using information in a materially different way.

Images, prompts and model processing

When you submit a generation request, the prompt, relevant images and settings are sent through our service to the model and infrastructure providers needed to fulfil it. Uploads and outputs are stored to support processing, delivery and account history; closing a tab does not by itself delete these server-side records.

Providers apply their own retention, data-use and safety-review terms, which can differ between models. Contact us before uploading material that requires a specific retention period, exclusion from model training or confidentiality arrangement, so we can check the conditions relevant to your intended request. Avoid submitting identity documents, financial records or sensitive personal information that is unnecessary for your request.

Image generation is automated content processing. It should not be used as a decision about a person's employment, creditworthiness, health or legal rights.

Providers and international processing

Service providers process information for their roles in operating Krea 3: model providers handle generation; storage and hosting providers deliver files and run infrastructure; Google supports Google sign-in; Cloudflare supports security checks; and Stripe processes payments. Stripe's checkout collects payment-card information. Our application receives payment references and transaction status rather than collecting full card numbers in its own form.

Information may also need to be disclosed to comply with a valid legal requirement or to investigate fraud and protect users. Providers may process information in countries other than your own. Where transfer protections are legally required, the relevant safeguards must apply to that processing. Contact us for information about the providers and transfer arrangements relevant to your request.

Browser storage and measurement

Browser storage keeps your login session, editor preferences, draft prompts, references to uploaded files and checkout continuity. You can clear site data through your browser settings, but doing so may sign you out or remove local drafts. It does not request deletion of your account or stored generation history.

The website is configured to use self-hosted Umami analytics to measure page visits and events such as sign-in, generation requests and checkout activity. These measurements help us understand usage and troubleshoot the service. Our analytics event fields exclude prompts, email addresses, authentication tokens and raw error messages; page URLs sent to analytics exclude query strings and fragments. Google Analytics 4 and Microsoft Clarity are currently disabled. If these practices change, we will update the relevant disclosures and provide any choices required by applicable law before their use. Browser controls for cookies do not necessarily remove information already held by our service or its providers.

How long information is kept

Account and generation records are kept for the purposes described above, including access to history, delivery of results and resolution of failed tasks. Retention depends on the type of information, whether it is still needed for your account or request, applicable recordkeeping obligations and unresolved billing or security issues. This is not a promise of permanent image storage. Download important results and keep your original files.

You can request deletion by email. We may need to retain limited records for legal obligations, fraud prevention or an unresolved dispute, and will explain relevant restrictions when responding. Browser data, active service records and provider backups are separate: clearing one does not necessarily erase the others immediately.

Your privacy rights

Depending on your location and the laws that apply, you may request access, correction, deletion or a portable copy of your personal information; object to or restrict certain processing; and withdraw consent where processing relies on it. Withdrawal does not undo processing that was lawful before withdrawal. You may also complain to the relevant data protection authority.

Where the CCPA applies, California residents may have rights to know the categories and specific information collected, correct or delete information, opt out of a sale or sharing of personal information, and limit certain uses of sensitive information. These rights apply where the corresponding activity and legal requirements are present. You will not be penalized for exercising applicable privacy rights.

Send requests to contact@krea-3.net. We may verify account ownership using information proportionate to the request; do not send passwords or full identity documents in your initial email. An authorized representative may contact us, subject to verification of authority.

We respond within the period required by applicable law: generally one month for GDPR requests and 45 calendar days for qualifying CCPA requests. Where a lawful extension is needed, we explain the reason and revised timing. These are privacy-request periods, not a guarantee of a technical-support resolution time.

Security and children

No online service can guarantee absolute security. Keep account access private, use a trusted device and tell us promptly if you suspect unauthorized activity. Avoid sending sensitive files in support emails unless we have explained why they are needed.

The service is not directed to children under 13. If you believe a child has provided personal information without appropriate authorization, contact us so we can investigate and address the information concerned.

Changes and contact

We may revise this Privacy Policy as the service or its data practices change. The date above identifies the current version. Material changes will be communicated as required by applicable law. Questions about Krea 3 data processing or privacy requests can be sent to contact@krea-3.net.