Privacy Policy

What we collect

When you create an account:

• Your email address
• Your name (optional, if you add it to your profile)

When you create an event:

• The design image you upload (stored in Supabase cloud storage)
• The zone configuration you define (stored in our database)
• Your event name and settings

When an attendee fills out your event card:

• The name, title, company, and any other text fields you defined
• The photo they upload (if your design includes a photo zone)
• The generated card image (the personalized PNG output)

How we use it

• To provide the card generation service
• To store your events and let you manage them
• To show you how many cards have been generated for each event

We do not sell your data or attendee data to third parties. We do not use attendee data for marketing. We do not share your design files with anyone other than you.

Where data is stored

We use Supabase for our database and file storage. Files are stored in Supabase's cloud infrastructure. Your account data lives in a Supabase database. You can read Supabase's own privacy policy at supabase.com/privacy.

Cookies

We use a session cookie to keep you logged in. We do not use tracking cookies or third-party advertising cookies. We do not run Google Analytics or Facebook Pixel.

Attendee data retention

Attendee names, photos, and generated cards are stored as long as the event exists in your account. When you delete an event, all associated attendee data and generated cards are deleted too.

Your rights

You can delete your account at any time. When you delete your account, all your events, design files, and associated attendee data are permanently removed. If you want to delete only specific events, you can do that from the dashboard.

If you are an attendee who submitted data through a Karta event and want that data removed, email us at hello@cre8so.com with the event name.

Contact

Privacy questions: hello@cre8so.com. We're a small team and we reply to every message.