KRETIF AI PRIVACY POLICY

Kretif AI ("Kretif", "we", "us" or "our") respects your privacy and is committed to handling personal data responsibly.

This Privacy Policy explains how we collect, use, store, share, protect and delete personal data when you access our website, applications and services.

It takes into account the Malaysian Personal Data Protection Act 2010, as amended, and other applicable data protection laws.

The data controller responsible for Kretif account information and platform operations is:

Where Kretif processes customer data solely on a business customer's instructions, Kretif may also act as a data processor, depending on the relevant service and agreement.

Depending on how you use Kretif, we may process the following categories of data.

Account information: Your name, email address, authentication information, business or organization name, profile information, language preferences and telephone number, where provided or required.

Business and brand information: Business details, products and services, target audiences, brand personas, communication preferences, logos, images, marketing materials, campaign objectives and performance targets.

Connected social media information: Where you authorize an integration, we may receive account identifiers, permitted profile information, connected Facebook Pages, professional Instagram account information, Threads account information, permissions, access tokens, scheduled content and authorized engagement or performance data.

User content and AI inputs: Instructions, prompts, captions, reference documents, images, campaign settings, feedback and content generated or edited through Kretif.

Technical information: IP addresses, browser and device information, operating systems, session details, access times, error logs and usage information.

Subscription information: Plan details, invoices, transaction records and payment status. Full payment card information is generally handled by our appointed payment provider, subject to the actual payment integration.

We do not request or store your original social media passwords through official OAuth integrations.

We obtain personal data directly from you, from your use of our website and services, from social media accounts you authorize, from relevant technical and payment providers, and from organizations that lawfully grant you access to their Kretif workspaces.

We process personal data to create and manage accounts, provide authentication, protect account security, deliver AI-powered marketing tools, generate content, schedule and publish authorized posts, provide permitted analytics, manage subscriptions, deliver customer support, prevent abuse, improve service reliability and comply with applicable laws.

We send marketing communications according to your communication preferences and applicable legal requirements.

Data obtained through social media integrations will not be used for purposes prohibited by the relevant platform's policies.

We process personal data on the basis of consent where required, performance of requested services, compliance with legal obligations or another lawful basis available under applicable law.

Certain information, including an email address and authentication information, is necessary to create and secure your account.

Other information, such as brand materials, marketing preferences and social media connections, may be optional. However, withholding it may limit the services available to you.

Where processing relies on consent, you may withdraw that consent, subject to applicable law. Withdrawal does not invalidate previously lawful processing.

This Privacy Policy provides information about data processing. It does not replace separate consent where such consent is legally required.

Kretif requests permissions relevant to the features you choose to use.

Where authorized, we may access information and permissions needed to schedule or publish content, retrieve permitted analytics, or provide other enabled social media management features.

We do not sell data obtained through Meta integrations to advertisers or data brokers.

Our processing of social media platform data is subject to the applicable platform's terms, permissions and data handling requirements.

Kretif may use third-party artificial intelligence providers to perform content generation and analysis.

Relevant task information, including your instructions, brand persona, reference materials and content drafts, may be transmitted to the AI provider used for that task.

We take reasonable steps to limit the information shared to what is necessary for the requested functionality.

Provider data retention and model training practices depend on the provider, technical configuration and service agreements used by Kretif.

Information about our AI providers and their processing purposes is available at https://kretif.com/privacy.

We will not use social media platform data to train AI models in ways that violate the source platform's applicable terms.

Depending on the services you use, we may share necessary information with:

Such sharing will be limited to permitted purposes and subject to appropriate safeguards and relevant agreements.

We may also disclose information where required by applicable law, a court order or a valid request from competent authorities.

We do not sell our users' personal information to data brokers.

Some of our hosting, AI, payment and social media providers may process information outside Malaysia.

Where personal data is transferred internationally, we will apply the safeguards and lawful transfer conditions required by applicable law.

Relevant processing locations and recipients should be identified in our published data provider information.

Kretif may use cookies and similar technologies to maintain login sessions, remember preferences, protect service security and understand how our services perform.

Where analytics or marketing cookies require consent, appropriate choices will be provided.

You may also control or block cookies through your browser settings, although some essential features may be affected.

We implement technical and organizational security measures appropriate to the nature of the personal data and associated risks.

These measures may include access controls, protection of data communications, security monitoring and restrictions on personnel or service provider access.

No digital transmission or storage system can be guaranteed to be completely secure.

We retain personal data only for as long as necessary for the purposes described in this Policy or as otherwise required by applicable law.

Account and workspace information is generally retained while the relevant account remains active.

Following a verified deletion request, data no longer required will be deleted or de-identified according to our retention and deletion procedures.

Third-party platform data will be deleted without undue delay when required by user requests, applicable platform policies or law.

Any lawful retention exception, such as a statutory accounting requirement, will be limited to the relevant purpose.

You may disconnect social media accounts through available Kretif settings or revoke access directly through the relevant social media provider.

After disconnection, we will stop new access and processing that is no longer authorized.

Access tokens and platform data that are no longer needed will be removed or deactivated in accordance with applicable platform requirements and law.

Disconnecting an account does not necessarily remove content that has already been published on that social media platform.

Subject to applicable law, you may request access to your personal data, correction of inaccurate information, deletion of eligible data, withdrawal of applicable consent, restriction of processing where available, cessation of marketing communications and data portability where the relevant right applies.

To protect your information, we may need to verify your identity before completing a request.

You can contact us at masterfirst935@gmail.com.

You may request deletion of your Kretif data or account by using an available account deletion feature or emailing masterfirst935@gmail.com with the subject "Data Deletion Request".

Please provide the email address associated with your account and identify the data or account you wish to delete. Do not provide your password.

We will verify your request, explain any data that must lawfully be retained, and delete eligible data.

If your request concerns Facebook, Instagram or Threads data, you may also revoke Kretif's access through the relevant Meta account settings.

Deleting data from Kretif does not delete posts or other content independently retained by social media platforms.

If you upload or otherwise provide the personal data of customers, employees or other individuals, you are responsible for ensuring that you have a lawful basis and appropriate authority to provide that information.

You should not submit sensitive personal information or confidential data in AI instructions unless necessary, authorized and appropriately protected.

Kretif is intended for users who are at least 18 years old.

We do not knowingly collect children's personal data for the purpose of creating user accounts.

If we discover that an account was created by someone who does not meet our minimum age requirement, we will take appropriate action in accordance with applicable law.

If a security incident involving personal data occurs, we will investigate the incident and take appropriate remedial steps.

We will notify relevant authorities, platform providers and affected individuals when and as required by applicable law or contractual obligations.

Kretif may contain links and integrations to third-party websites and services.

This Privacy Policy does not govern personal data processing independently performed by those third parties.

We encourage you to review their privacy policies and terms of service.

We may update this Privacy Policy to reflect changes in our operations, technology, service providers or applicable laws.

Material changes will be communicated through our website, application or email where appropriate.

Where new consent is required, we will obtain it in accordance with applicable law.

To ask questions, exercise your privacy rights, request deletion or submit a complaint, please contact:

Kretif AI

MF masterfirst enterprise

You may also refer to the Malaysian Personal Data Protection Department at https://www.pdp.gov.my regarding applicable privacy rights and complaint procedures.