Privacy Policy

CrefaIO is an account-based platform that provides access to digital tools, downloadable content, and subscription-based services (the “Services”). This Privacy Policy explains how we collect, use, and share information when you use https://crefaio.com and related Services.

This Privacy Policy is part of our Terms of Service.

CrefaIO processes personal data in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and UK GDPR, where applicable.


Information You Provide to CrefaIO

We collect information you provide directly when you create an account, manage account settings, subscribe, connect integrations, or contact us. This may include:

  • Name (if provided)

  • Email address

  • Username

  • Password (stored only in hashed form)

  • Country or region (if provided, or required for tax or compliance through a payment provider)

  • Account preferences and settings

  • Subscription and entitlement status (for example, whether a plan is active or canceled)

You may also choose to add optional profile information such as a display name, avatar, biography, or social links.

Providing optional information is not required to use the core Services.


Connected Accounts and Integrations

Discord

If you connect Discord to your CrefaIO account, we may receive limited information such as:

  • Discord user ID

  • Username

  • Avatar

  • Server membership or role status (where relevant to access control)

We use this information only to enable Discord-related features such as role verification or access syncing. You can disconnect Discord at any time via your account settings or Discord’s authorization controls.

Patreon (subscription verification)

If you connect Patreon for subscription verification, we may receive information necessary to confirm your membership or access, such as:

  • Patreon user identifier

  • Membership or tier identifiers

  • Membership or access status

The exact information depends on the permissions you grant and Patreon’s policies. This information is used solely to verify access and entitlements.


Subscriptions, Purchases, and Payments

CrefaIO may offer paid subscriptions or paid access to content or services.

Payments are processed by third-party payment providers such as Paddle. CrefaIO does not store payment card details.

We may store limited billing-related metadata, such as:

  • Subscription status and dates

  • Plan or billing cycle (monthly or yearly)

  • Transaction IDs, invoice references, and tax or country indicators (where applicable)

Payment providers process personal data under their own privacy policies and terms.


Information We Collect Automatically

When you access or use CrefaIO, we automatically receive certain technical and usage information, including:

  • IP address

  • Approximate location (generally derived from IP address)

  • Browser and device type

  • Operating system

  • Language settings

  • Referring URL and parameters

  • Pages viewed and actions taken

  • Timestamps and session duration

  • Cookies and similar identifiers (explained below)

We use this information for security, diagnostics, abuse prevention, analytics, and improving the Services.


Cookies and Similar Technologies

CrefaIO uses cookies and similar technologies to:

  • Keep you logged in and maintain secure sessions

  • Remember user preferences

  • Protect against abuse, fraud, and unauthorized access

  • Understand how the Services are used (analytics)

CrefaIO does not use cookies for advertising, ad targeting, or cross-site tracking.

You can control cookies through your browser settings. Disabling cookies may affect certain features, such as login or account preferences.


How We Use Information

We use the information we collect to:

  • Provide, operate, and maintain the Services

  • Create and manage user accounts

  • Authenticate users and secure accounts

  • Provide access to gated tools and content and manage entitlements

  • Process subscriptions and enable payment-provider workflows

  • Communicate with you about service-related issues (such as security, account, or transactional notices)

  • Provide support and respond to requests

  • Monitor, prevent, and investigate fraud, abuse, and unauthorized activity

  • Analyze usage and improve performance and features

  • Comply with legal obligations and enforce our Terms


How We Share Information

We do not sell personal information.

We share information only in the following circumstances:

Service providers (processors)

We use trusted third-party providers to help operate the Services, such as hosting, infrastructure, security monitoring, email delivery, analytics, and payment processing. These providers process data on our behalf and are required to protect it and use it only to provide services to us.

Payment providers

When you purchase a subscription or paid access, necessary data is shared with the payment provider (such as Paddle or Patreon) to complete the transaction, handle taxes, issue receipts or invoices, and manage refunds or disputes according to their terms.

Connected integrations

If you connect third-party services (such as Discord or Patreon), information is shared or received as needed to provide the features you enable.

Legal requirements and safety

We may disclose information if we believe it is reasonably necessary to:

  • Comply with applicable law, regulation, or legal process

  • Protect the security or integrity of CrefaIO

  • Prevent fraud, abuse, or illegal activity

  • Protect the rights, property, or safety of CrefaIO, our users, or the public

Business transfers

If CrefaIO is involved in a merger, acquisition, restructuring, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to this Privacy Policy.


Legal Bases for Processing (EEA/UK)

If you are located in the EEA or UK (or where required by law), we process personal data under the following legal bases:

  • Contract performance (providing the Services you request)

  • Legitimate interests (such as security, abuse prevention, and improving the Services)

  • Legal obligation (including tax, accounting, and lawful requests)

  • Consent (where you choose optional features such as certain integrations or analytics settings, depending on implementation)


Your Rights and Choices

Depending on your location and applicable law, you may have rights to:

  • Access your personal data

  • Correct inaccurate data

  • Request deletion of your data

  • Object to or restrict certain processing

  • Request portability of your data

  • Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@crefaio.com. We may request verification to protect your account.

If you are located in the EEA or UK, you may also have the right to lodge a complaint with your local data protection authority.


Data Retention

We retain personal data only for as long as necessary to provide and operate the Services, maintain security, and comply with legal obligations.

For example:

  • Account data is retained until the account is deleted by the user.

  • Subscription and billing records are retained for the period required by tax and accounting laws.

  • Security and access logs are retained for a limited period for abuse prevention, diagnostics, and auditing.

Retention periods may vary depending on the type of data and the purpose for which it is processed.


Security

We implement reasonable technical and organizational measures to protect personal information, including access controls, encryption, and infrastructure-level security protections. However, no system is completely secure, and we cannot guarantee absolute security.


International Data Transfers

CrefaIO may process and store information in countries outside your country of residence. Where required, we use appropriate safeguards for international data transfers, such as contractual protections.


Children

CrefaIO is not intended for children under the age of 13, and the Services may not be used by individuals under the minimum age required by applicable law.


Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated policy and revise the “Last updated” date. Continued use of the Services after changes become effective constitutes acceptance of the updated policy.


Contact

For privacy questions or requests, you may contact us at:

📧 privacy@crefaio.com