Privacy Policy

1. Data Controller

The controller of the data described in this policy is CREATECH+, the publisher of Griot.

For any question regarding your personal data, you may contact us at the support address indicated in the application.

2. Data Collected

We collect your account data: email address, hashed password, country, language, and time zone.

We also collect the brand data you enter — editorial guidelines, personas, content pillars, logo.

We also collect the content generated for you.

In addition, we collect your billing data: order history, the mobile money number used for payment, and invoices.

Finally, we retain technical logs necessary for the proper functioning and security of the service.

3. Purposes

Your data is used to provide the service: content generation, scheduling, and reminders.

It is also used for billing and fraud prevention.

It is also used for the support we provide you.

It is also used for the continuous improvement of the service.

Finally, it is used to comply with our legal obligations.

4. AI Generation

To generate your content, your brand descriptions and the topics you provide are transmitted to artificial intelligence providers (for example Anthropic, or providers specialized in image generation), strictly for the purpose of producing the content you request.

This information is treated as data to be processed, never as instructions capable of altering the service's behavior.

We do not use it to train artificial intelligence models.

5. Subcontractors

We use subcontractors for hosting our infrastructure and storing files, our payment provider NeoPay for mobile money transactions, and artificial intelligence providers for generating your content.

Each of these subcontractors only accesses the data strictly necessary to perform its function.

6. Retention Periods

Your account data is retained for the entire lifetime of your account.

Your content and brands are retained until you decide to delete them.

Invoices are retained for the period required by law.

Technical logs are retained for a short period proportionate to security and diagnostic needs.

7. Your Rights

You have the right to access, rectify, delete, object to, and port your personal data.

You may exercise these rights by contacting support.

Deletion of your account may be requested at any time.

8. Cookies

Griot only uses cookies essential to the operation of the service: securely maintaining your session, and remembering your theme and language preferences.

We do not use any advertising cookies or third-party tracking tools.

9. Security

We implement appropriate security measures: passwords are hashed, sensitive keys are encrypted, workspaces are strictly isolated from one another, and access to our systems is restricted and logged.

10. Changes

This privacy policy may evolve. Any material change is notified to you in the application.