Privacy Policy

Last updated 1 November 2026

This policy explains what personal data Creatpad collects, why, and the choices you have. Creatpad is operated by Creatpad, B1502, Glen Gate, House of Hiranandani, Devi Nagar, Bengaluru 560092, Karnataka, India ("Creatpad", "we", "us"). Questions go to hello@creatpad.com.

1. Two kinds of people

Coaches sign up for Creatpad to run their site and business. For their account data, we are the controller.
Clients buy from or contact a Coach through a site we host. The Coach decides what they collect and why, and is the controller of that data; we process it on the Coach's behalf. If you are a Client, the Coach's own privacy policy applies, and you can contact them or us about your data.

2. What we collect

Account details: name, email, password (stored hashed) or Google sign-in, and your team members' names and emails.
Business content: your site, products, schedules, files, messages and settings.
Client details a Coach collects: such as name, email, phone, bookings, purchases, course progress, form answers and messages.
Billing: your Creatpad subscription is sold by Paddle, who collect your payment details. We receive your plan, billing country and payment status, never your full card number.
Connected accounts: if you connect Google Calendar, a payment provider or another service, the tokens or keys needed to use it, stored encrypted.
Usage and device data: IP address, browser, pages visited and timestamps, from server logs and privacy-friendly page analytics.
Emails: emails we send for Coaches, and replies sent to our mail addresses so they can join the right conversation.

3. How we use it

to provide the Service: host sites, take bookings, deliver products, send emails and run your account;
to bill your subscription and prevent fraud and abuse;
to support you and tell you about changes to the Service;
to keep the Service secure, fix problems and understand how it is used so we can improve it;
to meet legal obligations.

Our legal bases are performing our contract with you, our legitimate interest in running a secure and useful service, your consent where we ask for it, and legal obligations. We don't sell personal data, and we don't use Clients' data for our own marketing.

4. Who we share it with

We use service providers who process data for us under contract, only to run the Service:

Vercel (hosting) and Neon (database);
Amazon Web Services (file storage and email delivery);
Mux (course video hosting and playback);
EmailOctopus (the creatpad.com waitlist);
Cloudflare (network and analytics);
Paddle (subscription payments, as Merchant of Record);
Google (sign-in and calendar, when you connect them);
Automette (certificates and receipts, when used).

When a Coach connects their own payment provider, video tool or analytics (such as Stripe, Razorpay, Zoom or Google Analytics), Client data goes to that provider under the Coach's own agreement with them. We may also disclose data when the law requires it, or as part of a merger or sale of our business, with notice to you.

5. International transfers

Our providers store and process data in the European Union, the United States, India and other countries. Where data leaves its home region, we rely on our providers' standard contractual safeguards.

6. Cookies

We use only the cookies needed to sign you in, keep a Client signed in to their page, and remember settings. Our page analytics don't use cookies. Coaches may add their own analytics or advertising tags to their sites, which may set further cookies; the Coach is responsible for those.

7. How long we keep it

We keep account and business data while your account is open. When you close it, we delete it within 90 days, apart from records we must keep by law (such as invoices) and backups that expire on their own schedule. Incoming emails are deleted once processed, and within 7 days at most.

8. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your data, to object to or restrict some uses, and to withdraw consent. Email hello@creatpad.com and we will respond within 30 days. Clients can also ask the Coach directly.

GDPR (EEA and UK): you can access, correct, erase or port your data, restrict or object to processing, and withdraw consent at any time. You can complain to your local data protection authority.
CCPA (California): you can know what personal information we collect and why, ask us to delete or correct it, and use these rights without being treated differently. We don't sell or share personal information for cross-context advertising. You can name an authorised agent to ask for you.
DPDP Act (India): you can access, correct and erase your data, withdraw consent and name someone to act for you, and raise grievances with us at the address below.

9. Security

We use encryption in transit, encrypt stored secrets, limit staff access and keep files in private storage. No system is perfectly secure, and we will tell affected users promptly if a breach puts their data at risk.

10. Children

The Service isn't meant for anyone under 18, and we don't knowingly collect their data for our own purposes.

11. Changes

We may update this policy. If a change is significant, we will tell Coaches by email or in the app before it applies.

12. Contact

Creatpad, B1502, Glen Gate, House of Hiranandani, Devi Nagar, Bengaluru 560092, Karnataka, India. Email: hello@creatpad.com.