Privacy Policy

Last updated: 21 April 2026

1. Who We Are

This Privacy Policy explains how NETFALCON CREATIONS - FZCO(“we”, “our”, “us”) collects, uses, and protects information when you use the NetFalcon Creations platform. Registered office: NETFALCON CREATIONS, IFZA Business Park, Building A1, Dubai, United Arab Emirates. Contact for privacy matters: contact@netfalconcreations.com.

2. What We Collect

We collect only data needed to deliver the Service:

  • Account data: email, name, company name, billing address (if provided), password hash (managed by our auth provider Clerk).
  • Content you upload: product URLs, images, brand details, video scripts. We store these so you can access them later.
  • Ad platform data: when you connect Meta, TikTok, Shopify, or similar, we access the minimum scopes needed (typically read-only insights).
  • Payment data: for card payments, Stripe processes and stores card details — we only see the last 4 digits and transaction status. For bank transfers, we keep the reference you provide.
  • Usage data: which features you use, credit consumption, error logs — for support and product improvement.
  • Technical data: IP address, browser type, device info, captured automatically for security and fraud prevention.

3. How We Use It

  • Deliver and improve the Service (generate content, render videos, sync ad data).
  • Process payments and send receipts, invoices, and refunds.
  • Send essential service emails (verification, payment confirmations, security alerts).
  • Provide customer support.
  • Detect fraud, abuse, and security incidents.
  • Comply with legal obligations (tax records, court orders, regulatory requests).

We do not sell your data, and we do not use your content to train AI models.

4. Third-Party Processors

We share data with the following processors only to the extent needed to deliver the Service:

  • Clerk — authentication and email verification
  • Neon — PostgreSQL database hosting
  • Vercel — application hosting and edge network
  • OpenAI, Anthropic — AI text and image generation
  • Creatify — AI video generation
  • Stripe — card payment processing
  • Resend — transactional email delivery
  • Meta, TikTok, Shopify — only when you explicitly connect these accounts

Each processor has its own privacy terms. We review their security and data handling before integrating.

5. Data Retention

Account data: kept while your account is active, plus up to 2 years after closure for legal and accounting purposes. Generated content: kept indefinitely while your account is active so you can access your history. You can delete individual assets from your Asset Library at any time, or request full account deletion by emailing us.

Financial records are retained for 7 years as required by UAE tax and accounting regulations.

6. Your Rights

Depending on your jurisdiction, you may have rights to:

  • Access a copy of the personal data we hold about you.
  • Correct inaccurate data (most fields are editable from your account settings).
  • Delete your data (“right to be forgotten”). We may retain minimal data needed to comply with legal obligations.
  • Export your data in a portable format.
  • Object to certain processing activities.
  • Withdraw consent where processing is based on consent.

To exercise any of these rights, email contact@netfalconcreations.com. We respond within 30 days.

7. Security

We use industry-standard safeguards: HTTPS/TLS for all data in transit, encryption at rest for sensitive fields (passwords, access tokens), role-based access controls internally, and short-lived session cookies. Passwords are hashed and never stored in plaintext (handled by Clerk). No system is 100% secure — please report any suspected vulnerabilities to contact@netfalconcreations.com.

8. International Transfers

Our servers and processors are located globally (primarily US and EU). By using the Service, you consent to your data being transferred to and processed in jurisdictions that may have different data protection laws than your own. We rely on standard contractual clauses and similar safeguards where applicable.

9. Cookies

We use essential cookies to keep you signed in and remember your preferences (theme, dashboard state). We do not use advertising or tracking cookies. You can disable cookies in your browser, but the Service may not work correctly without them.

10. Children

The Service is not directed at children under 18. We do not knowingly collect personal data from children. If you believe we have, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified by email or prominent notice on the Service. Continued use after changes means you accept the updated Policy.

12. Contact

Privacy questions, complaints, or data requests: contact@netfalconcreations.com or NETFALCON CREATIONS, IFZA Business Park, Building A1, Dubai, United Arab Emirates.