Privacy Policy

Cretack is operated by Rvysion LLC. This policy explains how we handle personal information when you visit Cretack, create an account, buy or access learning materials, publish products, or contact us.

Contact us about privacy or your information at support@cretack.com, or write to:

Rvysion LLC
382 Northeast 191st Street
Miami, FL 33179
United States of America

Rvysion LLC is responsible for decisions about personal information used to operate Cretack, including platform accounts, security and support. Creators also receive information needed to manage their courses and students. Their use of that information outside Cretack, including through their own communities and mailing lists, may be covered by their own privacy notices.

We collect information you provide, information generated by your use of Cretack, and information supplied by creators and service providers:

• Account information: your name, email address, profile information where provided, authentication records, verification status and account preferences.
• Learning and access information: courses and products you can access, enrolment dates, lesson activity, progress and completion records.
• Purchase and payment information: products, prices, currencies, discounts, order references, payment status and provider references, and records of refunds or disputes. Payment providers collect payment credentials through their checkout. Cretack uses transaction records to confirm purchases and provide access; do not send card details, passwords or wallet recovery phrases to our support address.
• Manual enrolment information: a creator may supply your name and email to grant free access or record a payment made outside Cretack. We may also receive the recorded amount, currency, payment date and the creator's access notes. Such a record does not mean Cretack collected that payment.
• Creator and team information: store details, published content, team roles, earnings, withdrawal requests and payment-destination information needed to administer the creator's account.
• Communications and submissions: support correspondence, checkout answers, feedback, reviews, and content you submit. Please avoid including unnecessary sensitive information about yourself or others.
• Technical information: session information, IP address and browser details where recorded, security events, error reports and internal identifiers used to investigate problems. An error report may associate an account, course, lesson and failed request without including the person's name or email.
• Email-delivery information: message identifiers, timestamps and events such as acceptance, delivery to a mail server, delay, bounce or spam complaint. Delivery confirmation does not tell us that a person read a message.

Some information is necessary to provide the service you request. For example, we need an account email to manage sign-in and course access, and order details to confirm a purchase. Without it, we may be unable to provide that feature.

We use personal information to:

• Create and secure accounts, verify email addresses and help with account recovery.
• Process enrolments, confirm payment status, provide purchased or granted access, and save learning progress.
• Help creators manage their products, learners, authorised team members and earnings.
• Send account, security, purchase, access and course-related communications, including enabled creator welcome messages and learning reminders.
• Where enabled and permitted, follow up on a specific unfinished checkout as described below, and help creators see recorded checkout and payment outcomes. These records do not tell us why a buyer personally decided not to purchase.
• Handle support, refunds, disputes, abuse reports and technical problems.
• Keep appropriate financial and operational records, meet legal obligations, and establish or defend legal claims.

Where applicable data-protection law requires a lawful basis, our bases are: performance of our agreement with you for requested account and service functions; legal obligations for records we are required to maintain; and legitimate interests in proportionate security, troubleshooting, support and fraud prevention, balanced against your rights. Where consent is required for an optional use, we will request it separately and explain how to withdraw it.

We send messages necessary to manage accounts, purchases and access. Creators may also configure course-related welcome messages and reminders. Where the feature allows it, you can manage learning-notification preferences in Cretack. Security and essential transaction messages are handled separately.

Unfinished-checkout reminders. Where enabled and permitted by applicable law, we may use your checkout email address, name, product, checkout timestamp, payment/access status and reminder history to remind you about a checkout you started but did not finish. We record the version of the policy notice linked at checkout and the time you accepted the Terms. That acknowledgement is recorded separately from any explicit email opt-in; updating this policy does not create opt-in records for earlier checkouts.

There are no more than two reminders per unfinished checkout, then they stop. The current schedule sends one reminder, no earlier than two hours after checkout starts plus the creator's chosen delay of at least one further hour, within a seven-day window after those first two hours. Delivery may be later because we check eligibility before sending. We currently allow no more than one reminder per email address in seven days across checkouts.

We check for confirmed payment, existing access and your notification choices before sending. You can unsubscribe using the link in any reminder or turn checkout reminders off in your Cretack notification preferences. A new checkout may qualify again subject to the same limits, but neither a return visit nor a new checkout overrides your unsubscribe. Essential sign-in and purchase messages are handled separately.

Creating an account or accepting Terms does not, by itself, give permission for unrelated marketing. A purchase or checkout reminder does not subscribe you to a creator's external mailing list. We assess the requirements that apply before enabling reminders; this notice does not replace any separate permission that applicable law requires.

Rvysion LLC, which operates Cretack, does not sell customer personal information. Providing information to the organisations below to operate the service is separate from selling it.

We share information as needed with:

• The relevant creator and their authorised team: learner identity, access, order and progress information needed to provide and support their products. A refund request may also include the reason you provide and relevant order references. Creators currently arrange reimbursements outside Cretack; their handling of information in that process may be covered by their own privacy notices. Cretack may retain related case and completion records for support, reconciliation and applicable recordkeeping duties. Store owners can export their store's business records, including customer details on their orders, checkout answers and course reviews available to them. Marking a course review private prevents public display; it does not hide that review from the creator. Creator exports exclude learner lesson progress, sign-in credentials and private student-to-platform technical reports.
• Service providers: hosting, databases, file storage, email delivery, payments and error monitoring. These providers include Vercel, Neon, Cloudflare R2, Resend, Sentry and Bachs.
• Professional advisers, authorities or other parties where necessary: to meet legal duties, respond to valid legal process, protect rights or address security incidents.
• Parties to a business transfer: where necessary for a proposed or completed merger, acquisition or restructuring, subject to applicable safeguards and notice.

Public store content and reviews you agree to publish can be seen by others. Private feedback should not be treated as permission to publish a testimonial.

External payment pages, embedded media and community links may be operated by other organisations. Their own privacy terms apply to their activities.

Cretack uses session cookies and related browser storage to support sign-in, security and application functionality. Disabling these may prevent sign-in or other requested features. Third-party pages and embedded content may use their own technologies.

Course content may include images loaded from a creator's chosen external host. Opening that content can send a request to the image host, even if you do not click an external link. The host may receive technical information such as your IP address and browser details.

Cretack's current error-monitoring configuration disables session replay and performance tracing. Error reporting is separate from recording a video of a browsing session.

Rvysion LLC is based in the United States. Using Cretack may involve processing information outside your country through our infrastructure and service providers. Different countries may offer different legal protections.

Our primary production database is hosted by Neon in London, United Kingdom. Our current production application deployment runs on Vercel in the United States. Resend, our email-delivery provider, states that it stores customer data in the United States. Our Sentry organisation uses its Germany storage region for error events, but some account, administrative and other service data may be stored elsewhere. Our production Cloudflare R2 file-storage bucket reports Western Europe as its location; this is not a commitment that all Cloudflare processing occurs within the European Union. These locations do not describe every copy of information or every service provider's processing locations.

Retention depends on the purpose of the record: providing account and learning access, resolving support cases, security needs, financial-record requirements and applicable claim periods. Closing an account or requesting deletion does not necessarily permit immediate removal of records required for a legal duty or an unresolved transaction. Backups and service-provider records also need to be addressed in the retention process.

Creator store closure is different from deletion of every record associated with that person. Closure removes the store from public sale and clears its public profile details while preserving records needed for existing learners, transactions and unresolved obligations. If the creator also has learning access or purchases, their learner account is preserved. Retained identifiers and transaction records may still identify people; store closure does not make all retained data anonymous.

Generated creator export archives have a 48-hour download window. After that window, Cretack refuses new download links and schedules removal of the archive; failed removal attempts are retained for retry. Previously issued download links are short-lived. Expiry removes a temporary export copy, not the original course materials, lesson downloads or purchase records. An export-history record remains.

Depending on the law that applies and the circumstances, you may have rights to access your information, correct it, request deletion, obtain a portable copy, restrict processing, object to certain uses, or withdraw consent for processing that relies on it. These rights are subject to legal conditions; withdrawal does not undo lawful processing before withdrawal.

You can update your display name and manage your password in your account settings. Store owners can request a business-data export or store closure from Settings → Your data. These tools have a specific scope: a store export is not a complete copy of every item of personal information Cretack holds, and closing a store is not the same as requesting deletion of your personal information. For a broader access, correction or deletion request, use the contact below.

Contact support@cretack.com with your request. We may need proportionate information to verify your identity. Please do not send passwords or unnecessary identity documents. We will assess requests and respond within the period required by applicable law, explaining any lawful limitation.

You may also complain to the relevant data-protection authority. For example, the Nigeria Data Protection Commission serves Nigeria and the Information Commissioner's Office serves the United Kingdom. Other jurisdictions have their own supervisory authorities.

We use measures intended to protect accounts and information, including access controls and authenticated service flows. No online service can guarantee absolute security. Tell us promptly if you suspect account misuse.

Cretack's intended student audience includes learners of all ages. Children’s information requires additional care. Parents or guardians can contact support@cretack.com with questions about a child's information or access. Please do not send unnecessary identity documents.

This policy shows its last-updated date. Material changes will be communicated as required by applicable law. An updated policy does not replace any separate consent required for a new use of information.

For questions or requests, contact support@cretack.com or Rvysion LLC at the address above.