Privacy Policy

1. Introduction

Welcome to Creare Mind ("we", "our", or "us"), accessible from https://crearemind.in. We are committed to respecting your privacy and protecting the personal data you share with us. This Privacy Policy explains what information we collect, how we use and protect it, and your rights regarding your personal data when using our website builder platform, services, and associated APIs.

2. Information We Collect

We collect several types of information from and about users of our platform:

• Account Information: When you register on Creare Mind, we collect your full name, email address, and encrypted authentication credentials.
• Third-Party Authentication Data (Google Sign-In): If you choose to sign in using Google, we receive your basic profile details (name, email address, and profile picture) as authorized by your Google consent.
• Media & User Assets: Any images, videos, audio, or graphics you upload to our platform are stored via our media delivery network (Cloudinary) and indexed in our database (Supabase).
• Project & Inquiry Information: Information relating to your software project scope, inquiries, service requests, and project communications.
• Technical & Log Data: Internet Protocol (IP) addresses, browser type, device specifications, access times, and pages visited on our platform to help diagnose technical issues and optimize performance.

3. How We Use Your Information

We utilize the collected information for the following legitimate business purposes:

• To provide, operate, maintain, and enhance the Creare Mind website building platform.
• To authenticate your identity, process secure logins, and send security verification codes (OTP).
• To host, optimize, and serve your uploaded website media via high-performance content delivery networks.
• To communicate important updates, account alerts, security notices, and administrative messages.
• To prevent fraudulent activity, unauthorized access, and abuse of our platform infrastructure.

4. Third-Party Service Providers

We partner with trusted, industry-leading infrastructure providers to deliver our services. These partners only process data as required to perform their specific functions:

• Supabase: Provides secure cloud database storage and authentication services with Row Level Security (RLS).
• Cloudinary: Provides high-speed cloud asset hosting, automatic optimization, and CDN media distribution.
• Google Identity Services: Provides single sign-on authentication for users choosing Google login.
• Resend: Handles transactional emails, such as 6-digit OTP verification codes.

5. Data Security & Retention

We implement comprehensive technical and organizational security measures, including SSL/TLS encryption for all data in transit, tokenized authentication, and database-level access control policies (RLS). We retain your personal data only as long as your account remains active or as necessary to fulfill legal obligations.

6. Your Rights & Choices

You retain complete ownership over your data. You have the right to access, update, export, or request the permanent deletion of your profile, media files, and account information at any time. To exercise these rights, contact our support team directly.

7. Cookies & Local Storage

We use essential session tokens and local browser storage to keep you securely signed in and preserve your preferences across sessions. We do not sell your personal data or browsing activity to third-party advertisers.

8. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please reach out to us at: