Privacy policy

Yours. Your account, what you tell Creator, and what it makes for you. We decide how this is used, as described here.

Your clients’ users’. The people who use the apps you build store their data in each app’s own database. We hold it for you, to run the app, and use it for nothing else. You decide what the app collects and you answer to its users for it.

• Your account: your name and email address. Your password is held by our sign-in service, Amazon Cognito; we never store it. If you sign in with Google, Google gives us your name and email address.
• What you give Creator to build with: briefs, messages, answers to its questions, files you upload, and the names of your clients and projects.
• What Creator makes for you: plans, designs, code, tests and the records of each check.
• Usage: the work each project and story used, and its cost, so we can show it to you and apply your plan’s limits; and the ordinary logs any web service keeps, such as your IP address, browser and the time of each request.
• Requests for access: your email address, your name and what you told us you will build.
• Apps you list publicly: an app on our apps page shows its address, a picture of it and a record of its checks. Nothing is listed unless you list it.

• To build, run, check and host your apps, and to show you their progress and cost.
• To keep your account and apps secure, and to prevent abuse.
• To answer you when you write to us, and to email you about your account and the service.
• To understand what works in Creator and improve it.

We do not sell your data, we do not use it for advertising, and we do not train AI models on it.

We use these services to run Creator. Each handles data only to do its part:

• Amazon Web Services, in its Mumbai region: hosting, databases, file storage, sign-in (Amazon Cognito), email (Amazon SES), and the AI models that build your apps (Amazon Bedrock).
• The makers of those AI models, whose models run on Amazon Bedrock and read what Creator sends them to do the work.
• Vercel, which serves this website and Creator’s interface.
• Google, if you choose to sign in with Google.
• GitHub, only when you push code to a repository.

Most of this happens in India. Some of these services may handle data in other countries; when they do, they protect it under their own terms with us.

We share data with others only if the law requires it, or to protect someone from harm.

We use a cookie to keep you signed in, and a short-lived one while you sign up or ask for access. Your browser also keeps a few settings for you, such as your choice of light or dark theme. We use no advertising or third-party analytics cookies.

We keep your data while your account is open. When you ask us to delete your account, we delete it and your projects, except anything the law requires us to keep, and copies in our backups, which age out on their own schedule. Push your code to GitHub first if you want to keep it.

Each app runs in its own environment, with its own database credentials, storage and secrets. Data is encrypted at rest and in transit. Access by our team is limited to what is needed to run and support the service.

Under India’s Digital Personal Data Protection Act, 2023, you can ask us what personal data we hold about you and how we use it, ask us to correct or delete it, withdraw consent, and name someone to act for you. Write to hello@convonexai.tech; we answer every request. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

Creator is for businesses and the people who work for them. It is not meant for anyone under 18.

When this policy changes, we update it here and change the date at the top. If a change matters to how we use your data, we email you before it takes effect.