This policy explains what information CreatesOnline ("we") collects when you visit createsonline.com, create an account, or run a business on the platform, and how it is used.
What we collect
- Account details: your name, email address, password (stored only as a secure hash), and whether you sign up as a business or an individual.
- Business details you give at sign-up: business name, country, registration number, and your business address on createsonline.com.
- Business data you or your team put into the platform: website content, products, prices, stock, orders, quotations, customers, and messages. You control this data; we process it only to run the service for you.
- Contact form and newsletter: the name, email address and message you send us.
- Usage data: pages visited, collected through Google Analytics, and basic server logs (IP address, browser) used for security and abuse prevention.
How we use it
We use this information to provide and secure the service, verify accounts and businesses, bill subscriptions, send you service emails (sign-in codes, password resets, receipts), answer your questions, and improve the platform. We do not sell personal information.
Service providers
We share data only with providers that help us run the service, and only as needed: Oracle Cloud (hosting), Cloudflare (network and security), Resend (email delivery), Stripe, PayPal or Mercado Pago (payments, depending on your country), Meta WhatsApp and Twilio (messages a business sends to its customers), Google Analytics (site statistics), and AI model providers such as Anthropic and OpenAI when a business turns on AI features.
Connecting AI assistants (ChatGPT, Claude)
A business owner, admin or manager can connect their CreatesOnline business to an AI assistant such as ChatGPT. You sign in on createsonline.com, choose one business, and see exactly what the assistant may do before you approve. The assistant can then read that business's products, prices, stock, orders, quotations and chats waiting for the team, and create quotation drafts that a person checks and sends. It cannot send messages, take payments, issue refunds or change prices. The data the assistant reads is passed to the assistant's provider to answer your requests and is handled under that provider's privacy policy. We store only secure hashes of connection tokens. Access ends when you disconnect in the assistant, when you lose your role in the business, or after 60 days without use.
Cookies
We use a session cookie for signed-in users, a CSRF cookie to protect forms, a language preference cookie, and Google Analytics cookies to understand site traffic. We do not use advertising cookies.
Data retention and your rights
We keep account and business data while your account is active, and delete it within 90 days after you close your account unless the law requires us to keep it longer (for example, invoices). You can ask to access, correct, export or delete your personal information at any time by emailing [email protected]. Businesses on the platform are responsible for the data of their own customers; their customers should contact them directly.
Security
Each business's data is kept separate at the database level. Connections are encrypted, passwords and tokens are stored as hashes, and access is limited to authorised people.
Changes to this policy
We will update the date at the top of this page whenever this policy changes materially.