<aside> <img src="/icons/calendar_gray.svg" alt="/icons/calendar_gray.svg" width="40px" /> Last updated: May 20, 2024.

</aside>

Introduction

At Krea, we take your privacy seriously. Please read this Privacy Policy (this “Policy”) to learn how we treat your personal data. By using or accessing our Services in any manner, you acknowledge that you accept the practices and policies outlined below, and you hereby consent that we will collect, use and disclose your information as described in this Privacy Policy.

Remember that your use of Krea’s Services is at all times subject to our Terms of Use, which incorporates this Privacy Policy. Any terms we use in this Policy without defining them have the definitions given to them in the Terms of Use.

As we continually work to improve our Services, we may need to change this Policy from time to time. We will alert you of material changes by placing a notice on the Krea website, by sending you an email and/or by some other means. Please note that if you’ve opted not to receive legal notice emails from us (or you haven’t provided us with your email address), those legal notices will still govern your use of the Services, and you are still responsible for reading and understanding them. If you use the Services after any changes to the Privacy Policy have been posted, that means you agree to all of the changes.

What this Privacy Policy Covers

This Privacy Policy covers how we treat Personal Data that we gather when you access or use our Services. “Personal Data” means any information that identifies or relates to a particular individual and also includes information referred to as “personally identifiable information” or “personal information” or “sensitive personal information” under applicable data privacy laws, rules or regulations. This Privacy Policy does not cover the practices of companies we don’t own or control or people we don’t manage.

Personal Data

Categories of Personal Data We Collect

This chart details the categories of Personal Data that we collect and have collected over the past 12 months:

Category of Personal Data (and Examples)	Business or Commercial Purpose(s) for Collection	Categories of Third Parties With Whom We Disclose this Personal Data
Profile or Contact Data such as first and last name, email, phone number, and unique identifiers.	• Providing the Services
• Corresponding with You	• Service Providers
Identifiers such as social security number, driver’s license number, state identification card, passport number, cultural or social identifiers (for example, being a skateboarder, a Green Bay Packers fan, an environmental activist, religious or philosophical beliefs, etc.)	• Providing, Customizing and Improving the Services	• Analytics Partners
Payment Data such as financial account information, payment card type, last 4 digits of payment card, and billing address, phone number, and email.	• Providing the Services	• Service Providers (specifically our payment processing partner, currently Stripe, Inc.)
Commercial Data such as purchase history and consumer profiles.	• Providing, Customizing and Improving the Services	• Analytics Partners
Device/IP Data such as IP address, device ID, domain server, and type of device/ operating system/ browser used to access the Services.	• Providing, Customizing and Improving the Services
• Marketing the Services	• Service Providers
• Analytics Partners
Web Analytics such as web page interactions, referring webpage/source through which you accessed the Services, non-identifiable request IDs, and statistics associated with the interaction between device or browser and the Services.	• Providing, Customizing and Improving the Services
• Marketing the Services	• Service Providers
• Analytics Partners
Social Network Data such as email, phone number, user name, IP address, and device ID.	• Providing Services	• Service Providers
• Parties You Authorize, Access or Authenticate
Geolocation Data such as IP-address-based location information, and GPS data.	• Providing, Customizing and Improving the Services	• Service Providers
• Analytics Partners
Sensory Data such as photos, videos, or recordings of you and/or of your environment.	• Providing, Customizing and Improving the Services	• Service Providers
• Analytics Partners

Our Commercial or Business Purposes for Collecting Personal Data

Providing, Customizing and Improving the Services
- Creating and managing your account or other user profiles.
- Processing orders or other transactions; billing.
- Providing you with the products, services or information you request.
- Meeting or fulfilling the reason you provided the information to us.
- Providing support and assistance for the Services.
- Improving the Services, including testing, research, internal analytics and product development.
- Personalizing the Services, website content and communications based on your preferences.
- Carrying out other business purposes stated when collecting your Personal Data or as otherwise set forth in applicable data privacy laws
Marketing the Services
- Marketing and selling the Services.
Corresponding with You
- Responding to correspondence that we receive from you, contacting you when necessary or requested, and sending you information about Krea or the Services.

Other Permitted Purposes for Processing Personal Data

In addition, each of the above referenced categories of Personal Data may be collected, used, and disclosed with the government, including law enforcement, or other parties to meet certain legal requirements and enforcing legal terms including: fulfilling our legal obligations under applicable law, regulation, court order or other legal process, such as preventing, detecting and investigating security incidents and potentially illegal or prohibited activities; protecting the rights, property or safety of you, Krea or another party; enforcing any agreements with you; responding to claims that any posting or other content violates third-party rights; and resolving disputes.