Privacy Policy

This policy governs CreatorHarbor.ai — an Arabic-first (RTL) AI generation platform operating from the United Arab Emirates — and explains how we collect, use, share and protect your personal data when you use the platform.

CreatorHarbor.ai operates this platform and controls the processing of user data for the purposes of providing, operating and protecting the service. For privacy-related enquiries: support@creatorharbor.ai

We collect the following categories of information, depending on how you actually use the platform:

• Account and authentication data: your email address, display name, account avatar (if you upload one or choose a preset), and the secure session token issued by our authentication provider when you sign in.
• Prompts and files: the text prompts you write to generate content, and any images, audio, video or reference files you upload to drive a generation or edit.
• Generated content and project information: the images, video and audio the system produces for you, and the project information saved under "My Projects."
• Usage, device and log information: device and browser type, an approximate IP address, and the performance/security logs needed to run and protect the platform against abuse.
• Subscription, transaction and payment metadata: which plan you're on, your credit balance and its history, and invoice/billing metadata (we do not store your full card number — see Section 4).
• Support communications: any message you send through the contact form or by email, to the extent needed to respond to and track your request.

• Contract fulfilment: to run your account, carry out the generation and editing requests you make, and manage your subscription and credit balance.
• Security and fraud prevention: to verify your identity, protect your account and other users' accounts, and prevent abuse of the system.
• Legal obligations: to comply with applicable UAE tax, accounting and regulatory requirements.
• Service improvement: to understand how the platform is used and improve its performance and reliability — aggregated and de-identified where practical.
• Marketing: we will never send you a marketing message without your prior, explicit consent, and you can withdraw that consent at any time (see Section 11).

To operate the platform, some content you submit must reach contracted service providers — solely to perform the service you requested. We do not "sell" your personal data to anyone, and we do not share it for a third party's marketing purposes.

Any sharing happens only to the extent necessary to provide the service or to comply with a legal obligation — and we do not sell personal data for marketing purposes.

When you make a payment, your payment details are processed by the approved payment provider. CreatorHarbor.ai does not store full payment-card numbers.

You can review the privacy policy of our payment provider, Stripe, at: https://stripe.com/privacy

We do not publish specific internal technical endpoints or credentials on this public page for security reasons, but each category's role is described accurately above. No infrastructure-provider name is ever shown inside the product's own interface — you see only the marketing-facing model name.

Because we rely on global service providers to run the platform, your data may be transferred to, or processed in, locations outside the UAE — including by our AI generation, hosting and storage providers. When that happens, we rely on those providers' own contractual and security arrangements to protect your data consistently with the UAE Federal Personal Data Protection Law (Federal Decree-Law No. 45 of 2021).

We keep your account data for as long as your account is active, and for a further period afterward for specific legitimate purposes: fraud and dispute prevention, keeping accounting and tax records as required by applicable UAE law, and meeting any other legal obligation.

You can submit an account-deletion request directly from your account settings. This files a **request for review** — it does not delete your account or data immediately or automatically; our team reviews it, and you may withdraw a pending request at any time before it's reviewed, from the same screen. Your data is never presented as "deleted" while a request is pending.

You can also request a copy of your data (account, credit balance, and your projects' metadata) via the self-service data-export feature in your account, or by contacting us at support@creatorharbor.ai.

Under the UAE Federal Personal Data Protection Law, you have — subject to applicable conditions and exceptions — the following rights:

• Access the personal data we hold about you.
• Correct any inaccurate or incomplete data.
• Request deletion of your data (via the account-deletion request described above).
• Restrict or object to specific processing of your data where the law permits.
• Port your data (get a usable copy of it) via the data-export feature.
• Withdraw your consent at any time where processing is based on your consent (such as marketing) — without affecting the lawfulness of processing carried out before the withdrawal.

Send your request to support@creatorharbor.ai, stating the type of request (access, correction, deletion, restriction, portability, or objection) and the email address associated with your account, so we can verify your identity and act on it. We aim to respond within 2–3 business days — this is an operational goal, not a commitment to a fixed response time.

We use reasonable technical and organizational measures to protect your data — including encrypted transport (HTTPS) across the entire site, secure authentication, access rules that prevent one account from reaching another account's data, and private, time-limited, signed access to user files. No system is 100% secure, and we cannot guarantee absolute security — but we continuously review and improve these controls.

This platform is not directed at children, and we do not knowingly collect data from anyone below the legal age of consent in the UAE. You must be at least 18 years old to subscribe to a paid plan or purchase credits (see the Terms of Service). If we learn an account was created by a minor without valid guardian consent, we will take reasonable steps to close it.

We will not send you marketing messages unless you explicitly opt in. Any marketing consent is kept entirely separate from your acceptance of the Terms of Service or Refund Policy at the point of purchase — we will not present a pre-checked marketing-consent box alongside any purchase flow. You can unsubscribe at any time via the link in the message itself, or by contacting us.

We may update this policy from time to time to reflect genuine changes to the platform or to legal requirements. The "Last updated" date at the top of this page always reflects the actual date of the latest publication. For material changes, we will aim to notify you through a reasonable channel (such as an in-app notice or email).

For any question about this policy or your data privacy, reach us at support@creatorharbor.ai or via the Support page.