Privacy Policy
Last updated: 9 August 2026
This policy explains what we collect, why, who else touches it, and what you can demand of us. It covers the Creative Ads website and app.
- Data controller
- R2 Films LTDA, trading as Creative Ads
- Company ID (CNPJ)
- 40.305.331/0001-54
- Address
- Rua Ary Parreiras, 31, apt. 804 — Várzea
Teresópolis, RJ, 25953-080, Brazil - Privacy contact
- privacy@creativeads.app
1. What we collect
| Data | Why | Basis |
|---|---|---|
| Email address and password hash | To create and secure your account | Performance of contract |
| Images you upload — logo, storefront, products, people | To place your real business inside the commercial | Performance of contract |
| Your brief, script and editing instructions | To generate and, if requested, hand-edit the commercial | Performance of contract |
| Generated commercials | So you can download them again later | Performance of contract |
| Purchase records — amount, date, credits | Billing, tax and accounting obligations | Legal obligation |
| Basic technical logs — IP, browser, timestamps | Security, abuse prevention, troubleshooting | Legitimate interest |
We do not receive or store your card details. Payment is handled entirely by Stripe on their own pages.
2. Who else processes your data
We are a small company built on specialist infrastructure. These providers process data on our behalf, and most are located in the United States:
| Provider | What it handles |
|---|---|
| Supabase | Database, login and file storage — your account, uploads and finished videos |
| Netlify | Website hosting and delivery |
| Stripe | Payments and billing |
| Atlas Cloud | AI generation of images and video — the models that build your commercial |
| Anthropic | AI that writes your script from your brief |
Being explicit about the part that matters most: the photos you upload and the brief you write are sent to the AI providers above so your commercial can be produced. There is no way to generate the video without this. Please do not upload anything you would not want processed by a third-party AI service — including images of people who have not agreed to it, identity documents, or anything confidential.
We do not sell your personal data, and we do not share it for advertising purposes.
3. International transfers
We are established in Brazil and our providers are largely in the United States, so your data is transferred internationally. These transfers rely on the safeguards in our providers’ data processing agreements, including Standard Contractual Clauses where applicable.
4. How long we keep it
- Account data: while your account exists.
- Uploaded images and generated commercials: while your account exists, so you can download them again. You may ask us to delete specific files at any time.
- Purchase records: retained for the period Brazilian tax and accounting law requires, even after account deletion.
- Technical logs: up to 12 months.
When you delete your account, we remove your personal data and files within 30 days, except records we are legally required to keep.
5. Your rights
Wherever you are, you may ask us to confirm what we hold, give you a copy, correct it, delete it, or stop processing it. If you are in Brazil these rights come from the LGPD; in the European Union or United Kingdom, the GDPR; in California, the CCPA — including the right not to be discriminated against for exercising them.
Write to privacy@creativeads.app and we will respond within 30 days. If you are unhappy with our response, you may complain to your local data protection authority — in Brazil, the ANPD.
6. Cookies
We use only what is necessary to run the Service: a session cookie that keeps you logged in, and local storage that remembers your progress through the wizard. We do not use advertising or third-party tracking cookies on this site. If that changes, we will ask for your consent first and update this policy.
7. Children
The Service is for businesses and is not directed at anyone under 18. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.
8. Security
Data is encrypted in transit and at rest, access to production systems is restricted, and payment details never reach our servers. No system is perfectly secure; if a breach affects your personal data, we will notify you and the relevant authority as the law requires.
9. Changes
If we change this policy in a way that materially affects you, we will notify you by email or in the app before it takes effect.