Open the studio Sign in

NK Creator Privacy Policy

Last updated October 21, 2026. Effective October 21, 2026.

The short version. We collect your email, the words you type into designs, and your purchase history. We use them to make your creations and deliver your files. We don't sell or share personal information for advertising, we don't run ad trackers, and we use one cookie, which keeps you signed in. You can export or delete everything from your account page.

1. What we collect

  • Account: your email address.
  • Creations: the text you type into designs (names, dates, messages, and for some designs an address or phone number), the colors you pick, and the resulting design. These are private unless you make a creation public or unlisted.
  • AI design assistant: the messages you send it, the current design, and any photo you attach, so it can answer.
  • Photos: a photo you attach is used for that request and then deleted.
  • Purchases: that you bought something, what, when and for how much. Stripe processes your payment and holds your card details; we store your Stripe customer ID and your order and subscription status, never your card number.
  • Downloads and usage: which files you downloaded and when, your IP address, browser type, the pages you use, and error reports. We keep these for security and to resolve payment disputes.
  • Email: your sign-in links, receipts and the emails you send us.

2. How we use it

To run NK Creator: sign you in, build and show your designs, answer the assistant, deliver your files, take payment, send receipts and the subscription notices the law requires, answer support, prevent abuse and fraud, and keep records we're required to keep (tax, payments). We don't use your words, designs or photos to train AI models, and our AI provider is contractually barred from doing so.

3. Who sees it

Service providers that work for us, under contracts that limit them to our instructions: Stripe (payments, tax), Resend (sending email), Anthropic (the AI behind the design assistant; it receives your messages, the current design and any attached photo, and keeps API data for up to 30 days for abuse monitoring), and our hosting provider (servers and encrypted backups). We also share information if the law requires it, to protect someone's safety, or if the business is sold (we'd tell you). Anything you make public is visible to anyone, including the 3D render of your creation and, if you chose to show them, your words on it; unlisted creations are visible to anyone who has the link.

4. We do not sell your personal information

And we don't share it for cross-context behavioral advertising. We have no ad pixels or data-broker relationships. Because we don't sell or share, there is nothing to opt out of, and we treat Global Privacy Control signals as confirmation of that.

5. Cookies

One cookie keeps you signed in; it is strictly necessary and expires after 30 days or when you sign out. We don't use advertising or cross-site tracking cookies.

6. How long we keep things

  • Account and creations: until you delete them or your account. Deleting your account removes everything within 30 days (backups expire within a further 30 days).
  • Generated print files: 7 days after they're made; you can regenerate them from your creation at any time while you're entitled to download.
  • Attached photos: deleted as soon as the assistant has answered.
  • Assistant conversation records: 30 days, without the text of your messages.
  • Sign-in, download and request logs: 30 days for request logs, 18 months for download and purchase records (payment-dispute windows).
  • Payment records: 7 years, as tax law requires, held mostly by Stripe.

7. Your choices and rights

From your account page you can download a copy of your data (JSON), delete creations, make them private, and delete your account. You can unsubscribe from any marketing email with one click; sign-in links, receipts and subscription notices are part of the service and continue while you have an account. If you live somewhere with privacy rights (California and other US states, the EU/EEA, the UK), you can also ask us to correct your data or confirm what we hold by emailing [email protected]; we answer within 30 days (45 for California requests), we'll verify it's you via your account email, and we won't treat you differently for asking. You may use an authorized agent. If you're in the EU/UK: our legal basis is performing our contract with you (and our legitimate interest in security and fraud prevention); your data is processed in the United States under standard contractual clauses with our providers; you can complain to your local data-protection authority.

8. Children

NK Creator is not for children under 13 and we don't knowingly collect their personal information. Names and dates that parents type into nursery or baby designs are the parent's information, entered by the parent. If you believe a child under 13 has an account, email [email protected] and we'll delete it.

9. Security

Everything travels over HTTPS; sign-in uses one-time links rather than passwords; backups are encrypted; access to production is limited to the people who run the service. No system is perfect: if a breach affects your data we'll tell you promptly. Report security issues to [email protected].

10. Changes and contact

We'll email account holders about material changes before they take effect. Questions: [email protected]. NK Creator.