Privacy Policy

Last updated: August 6, 2026

This Privacy Policy describes how Creative Engines ("Company," "we," "us," or "our") collects, uses, processes, and protects your information when you use the Creative Engines platform ("Service"). By using the Service, you acknowledge that you have read and understood this Privacy Policy.

1. Who we are

Creative Engines is an AI-powered marketing platform that helps teams and agencies produce strategically grounded content using Mindset Intelligence – deep buyer psychology. The Service is operated byIgor Levi, a sole proprietor registered in Israel, trading as Creative Engines ("Creative Engines," "we," "us," "our").

Our roles. For account, billing, website, and usage data we act as the data controller. For Customer Content – the materials you upload and the content you create in the Service – we act as a processor on your behalf: you decide what to upload and what to do with it, and we process it to provide the Service to you.

Contact: For any privacy-related questions, contact us at [email protected].

2. Information we collect

2.1 Information you provide

  • Account information: Name, email address, company name when you create an account
  • Brand data: Website URLs, documents, strategy materials you upload for Brand DNA extraction
  • Content: Articles, posts, and other content you create within the platform
  • Communications: Messages you send to us via email or contact forms

2.2 Information collected automatically

  • Usage data: Features used, actions taken, time spent in the platform
  • Device information: Browser type, operating system, screen resolution
  • Cookies: We use essential and analytics cookies (see Section 6)

2.3 End-customer data

The Service is not intended for processing personal data of your own end customers (such as customer lists, member registries, or CRM exports). Please do not upload such data unless separately agreed with us in writing.

3. How we use your information

  • To provide and maintain the Service
  • To extract Brand DNA and generate Mindset Intelligence profiles
  • To help you produce, review, and publish content
  • To improve and develop the Service – using de-identified and aggregated data that does not identify you, your brand, or any individual (see Section 4)
  • To communicate with you about your account and the Service
  • To comply with legal obligations

4. Data isolation and security

Brand isolation by design. Each brand's data is stored in its own isolated workspace. The Service is designed so that one brand's strategy, content, and mindset data is not accessible to another brand.

Your content does not train publicly available AI models. Your proprietary strategy, Brand DNA, and content are not used to train any publicly available AI model. Our own quality and recommendation systems learn only from de-identified, aggregated signals that do not identify you or your brand and do not contain your content in verbatim form.

Security. We apply industry-standard technical and organizational security measures to protect your data. We retain your brand's materials only as needed to provide the Service; you can export or delete your data at any time.

5. Data sharing

We do not sell your personal information. We share data only with:

  • AI model providers: We send content generation requests to third-party AI providers (e.g., Google, Anthropic, OpenAI). These requests contain your brand context but are processed under data processing agreements that prohibit model training on your data.
  • Infrastructure providers: Cloud hosting and CDN services necessary to operate the platform.
  • Analytics: Google Analytics (via Google Tag Manager) and PostHog (EU Cloud), subject to your cookie consent.

6. Cookies and similar technologies

We use a small number of cookies and browser-storage technologies:

  • Strictly necessary: a first-party browser-storage item (ce_consent) that remembers your cookie choice, a first-party item (ce_geo) that caches your approximate country so we only show the cookie banner where it is legally required, and Cloudflare security cookies that protect the site from bots and abuse. These cannot be switched off.
  • Analytics (consent-based): Google Analytics 4 (via Google Tag Manager) and PostHog (EU Cloud) — to understand how visitors use the site. Outside the EU/EEA/UK they run by default; for EU/EEA/UK visitors they stay off — or run in a reduced, cookieless mode — until you accept via the cookie banner.

For the full list of cookies, their providers, purposes, durations, and the third parties involved, see ourCookie Policy. You can change or withdraw your consent at any time from that page.

7. Your rights

Under GDPR and applicable privacy laws, you have the right to:

  • Access: Request a copy of the personal data we hold about you
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your personal data
  • Portability: Request your data in a machine-readable format
  • Restriction: Request that we limit processing of your data
  • Objection: Object to processing based on legitimate interests

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Data retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data and brand data within 30 days, except where retention is required by law.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service. Continued use of the Service after changes constitutes acceptance.

10. Contact

For questions about this Privacy Policy or our data practices, contact us at [email protected].