Creght Legal

Creght Privacy Policy

Last updated: October 12, 2026 · Effective: July 22, 2026

Creght values your privacy and the security of personal information. This Policy explains how we collect, use, store, share, and protect information when you visit, register for, or use Creght, and how you may exercise your rights.

This Policy applies to the Creght website, console, editor, and related services provided directly by Creght. Operators of websites created with Creght are responsible for providing their own privacy notices to visitors.

Creght at creght.com is operated by Creght LTD, a company registered in England and Wales (Company No. 16596157), with its registered office at Unit A, 82 James Carter Road, Mildenhall, IP28 7DE, United Kingdom. Creght LTD is the controller of the personal information described in this Policy. Contact: hi@creght.com.

1. Information We Collect

Account information

Email address, phone number, display name, avatar, login credentials, account ID, team, and permission information. Business users may also provide an organization name, contact person, and verification materials.

Usage and device information

IP address, browser and device type, operating system, login time, access and activity records, error logs, cookie identifiers, and security-risk signals.

Projects and AI interactions

Prompts, uploaded assets, project code, page content, AI output, version history, and publishing configuration. Unless separately and expressly authorized, private projects, form data, Auth data, and website visitor data are not used to train AI models.

Transaction information

Plan, order, amount, payment status, invoice, and refund information. Complete payment-account details are generally handled directly by payment providers.

Support and security information

Support tickets, email and chat records, reports, appeals, attachments, and materials supplied for account verification or security investigations.

Website visitor data

When a customer enables forms, CMS, Auth, Func, analytics, or similar features, Creght may process visitor information on that customer's instructions. The website operator is responsible for required notice and consent.

2. How We Use Information

We process personal information only to the extent reasonably necessary for these purposes.

Create and manage accounts, teams, and permissions;
Provide AI website building, editing, hosting, publishing, and backend features;
Process orders, payments, refunds, and invoices;
Provide customer and technical support;
Maintain reliability, security, and abuse prevention;
Detect phishing, fraud, malware, suspicious login, and other risks;
Improve product performance and user experience;
Meet legal obligations and resolve complaints or disputes;
Send product or marketing communications where lawfully authorized.

3. Google User Data

This section explains how Creght accesses, uses, stores, and shares data obtained from Google when you sign in with Google or connect a Google account to Creght.

Data we access

Google Sign-In (openid, email, profile): your name, email address, and profile picture, used to create and sign in to your Creght account.
Google Search Console (webmasters.readonly), only if you connect it: search performance (queries, clicks, impressions, average position) and indexing status for the sites you choose.
Google Analytics (analytics.readonly), only if you connect it: the list of GA4 properties you can access and traffic reports (sessions, users, page views, key events, top pages, traffic sources, countries) for the property you choose.
All Search Console and Google Analytics access is read-only. Creght never creates, changes, or deletes anything in your Google account.

How we use it

We use Google user data only to provide and improve user-facing features you can see in the product: signing you in, showing search and traffic reports for the websites you manage, and, when you ask, having the AI assistant analyze those reports and suggest improvements to your website. Data is fetched when you open these features or run a task you set up.

Storage and retention

Google Sign-In data is kept with your Creght account until you delete the account. Search Console data you sync is saved in your project's database so you can track trends over time: on your own device for local projects, or on Creght servers for online projects. Google Analytics reports are fetched when you view them and are not kept afterwards. This data is deleted when you delete the project, or within 30 days of your request to hi@creght.com.

OAuth tokens are used only to make the requests described above. When you disconnect Google, the stored tokens are deleted.

Protection

All Google data is transferred over encrypted HTTPS (TLS) connections. OAuth tokens and synced data on your device are stored in files readable only by your operating-system account. Data on Creght servers is protected by encryption in transit, access controls, permission management, and audit logging, and only authorized personnel can access systems that hold it.

Sharing

We do not sell Google user data, transfer it to data brokers or information resellers, or use it for advertising, credit-worthiness, or lending purposes. When you ask the AI assistant to analyze your data, the relevant report is sent to the AI model provider you have selected, solely to produce that answer. We do not use Google user data to develop, improve, or train generalized AI or machine-learning models. Otherwise, we share Google user data only to comply with law or to protect security, as described in this Policy.

No one at Creght reads your Google user data unless you give us permission (for example, in a support request), it is needed for security purposes, or it is required by law.

Revoking access and deletion

You can disconnect Google in Creght at any time, or revoke access at https://myaccount.google.com/permissions. To delete Google user data we hold, email hi@creght.com.

Limited Use

Creght's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

4. Cookies and Similar Technologies

We may use cookies, local storage, and similar technologies to maintain sessions, remember settings, measure service performance, and prevent abuse.

Essential cookies support login, security, and core functions. Where consent is required for analytics or marketing cookies, we will provide appropriate notice and choices. Disabling essential cookies may impair the Services.

5. Sharing and Service Providers

We do not sell personal information. We may disclose necessary information only in circumstances such as the following:

To cloud, payment, email, support, authentication, AI-model, or security providers needed to deliver the Services;
To third-party integrations that you choose to enable;
To meet legal obligations, respond to competent authorities, or protect users and the public;
As lawfully necessary in a merger, acquisition, financing, or asset transfer;
In other circumstances with your separate authorization.

6. Third Parties, International Processing, and Retention

We intend to identify material providers, service categories, and processing locations in a subprocessor list.

Where personal information is processed across borders, we will use measures required by applicable law, including notice, separate consent, contractual safeguards, or security mechanisms where necessary.

We keep personal information only for as long as reasonably necessary for the relevant purpose or as required by law, after which it is deleted or anonymized unless lawful retention remains necessary.

7. Security

We use technical and organizational measures appropriate to risk, including access controls, encryption in transit, permission management, logging, backups, security monitoring, and confidentiality obligations.

If a personal-data incident may affect your rights, we will take remedial action and provide notifications or reports as required by law.

No internet service is absolutely secure. Use a strong password, protect verification codes and keys, and respond promptly to suspicious-login warnings.

8. Your Rights

Subject to applicable law, you may submit a request through available account settings or by emailing hi@creght.com. We may verify your identity to protect the account.

Access or obtain a copy of personal information;
Correct or complete inaccurate information;
Request deletion where applicable;
Withdraw consent where processing is based on consent;
Close your account;
Request an explanation of our processing practices;
Submit a privacy complaint.

9. Children

Creght is primarily intended for individuals and organizations with the legal capacity to use the Services. We do not knowingly offer the Services to or collect personal information from children under 14.

If a guardian believes a child submitted personal information without consent, contact hi@creght.com so we can investigate and take appropriate action.

10. Policy Changes and Contact

We may update this Policy to reflect changes in products, law, or processing. Material changes will be communicated by email, in-product notice, or a prominent website notice. We will request renewed authorization where required.

For privacy questions, rights requests, or complaints, contact hi@creght.com.