Skip to content
CreatisBeta

Privacy Policy

Last updated: 11 October 2026

This translation is provided for convenience; the French version prevails. Version française

2Bgroups is committed to protecting your privacy. This policy describes the data processed by the creatis.info website and the Creatis software, and how we use it, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).

1. Data controller

2Bgroups, publisher of Creatis — contact: contact@creatis.info.

2. Data processed

  • Account: first name, last name, email address, password (stored as a hash, never in plain text). If you log in with Apple or Google, we receive from them an account identifier, your email address (possibly an Apple relay address) and your name; we never receive your Apple or Google password.
  • Sign-in codes: one-time codes sent by email are stored as a hash for no more than 10 minutes.
  • Subscription: plan, status, payment history and invoices. Card data is processed exclusively by Stripe; we never have access to it.
  • Usage and security: AI credit consumption, software version, login logs (date, IP address, device type), technical logs.
  • Projects: saved on your computer. With the Studio plan, the projects you choose to send to the cloud are hosted on our servers and accessible to you alone.
  • AI requests: the text of your requests and the necessary context from your model are processed by our own AI model, hosted on our servers in France; they are not passed on to any third-party AI provider.
  • Real terrain: the address, coordinates or plot you search for are sent directly from the software to the public geographic data services (see § 4), without any information about your account. The elevation and aerial photography obtained are saved in your project.
  • Support and workshop: your messages to support and the models you publish in the workshop.

3. Purposes and legal bases

  • Providing the software, the account, the cloud and the subscription — performance of the contract.
  • Invoicing and accounting obligations — legal obligation.
  • Security, prevention of fraud and abuse, service improvement — legitimate interest.
  • News about new features — consent, which can be withdrawn at any time.

4. Recipients and processors

Your data is never sold. It is accessible only to 2Bgroups and to the providers strictly necessary:

  • OVHcloud (hosting of the servers, the AI and the cloud, France);
  • Stripe (online payment and invoices);
  • Apple and Google, only if you choose to log in with their account;
  • public geographic data services queried by the Real terrain feature: IGN’s Géoplateforme (elevation, aerial photography, DGFiP cadastre), Base Adresse Nationale and, outside France, OpenStreetMap (Nominatim, Overpass for existing buildings), Open-Meteo and, depending on the country, the European public cadastral and geographic services listed in the legal notice. The software contacts them directly with the searched coordinates or address, together with your connection's IP address as for any internet request, but never your identity or account.

Some of these providers (Stripe, Apple, Google) may process data outside the European Union; these transfers are covered by the safeguards provided for by the GDPR (adequacy decision or standard contractual clauses).

5. Retention periods

  • Account and cloud projects: as long as the account exists; erased as soon as it is deleted.
  • Invoices: 10 years (legal obligation), kept by Stripe.
  • Login logs and technical logs: 12 months maximum.
  • Marketing data: 3 years after the last contact.

6. Your rights

You have the rights of access, rectification, erasure, objection, restriction and portability, as well as the right to give instructions on what happens to your data after your death. You can delete your account and all hosted data yourself from the software (Compte & abonnement → Supprimer mon compte, i.e. “Account & subscription → Delete my account”). For any other request: contact@creatis.info. You can also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).

7. Security

Communications are encrypted (HTTPS), passwords and codes are stored as hashes, access to the servers is restricted and software updates are verified (Apple signature, SHA-512 checksum) before installation.

8. Cookies

The website and the software only use cookies and technical storage that are necessary for them to work (session, preferences). No advertising cookies or third-party trackers are set.