Privacy Policy

GymCreatives may collect account and profile data, billing and subscription data if subscriptions are enabled for your account, uploaded or imported files, generated creative content, analytics and diagnostics, and support communications.

We avoid collecting personal data that is not needed to operate the website, waitlist, account, Elements library, creative workflows, support, security, billing, and product diagnostics.

When you connect Google Drive, GymCreatives accesses only the Drive image files you select through Google Picker, plus limited metadata needed to import and display those files, such as file name, MIME type, file size, dimensions, and Drive file ID.

The Google Drive integration is used from Account Settings > Integrations and Elements > Upload > From Google Drive. GymCreatives copies only the selected image files into your Elements library. GymCreatives does not browse all Drive files, edit Drive files, delete Drive files, sync Drive folders, or use Drive data for ads.

The target Google OAuth scope for this integration is https://www.googleapis.com/auth/drive.file, which is intended for files you select or create with the app.

GymCreatives uses your information to provide the website, waitlist, account features, Elements library, creative workflows, generated creative content, customer support, billing if applicable, security, abuse prevention, diagnostics, and product operations.

Google user data is used only to copy selected images into your GymCreatives Elements library and make those images available for user-facing creative workflows.

GymCreatives does not sell Google user data, share it with advertising platforms or data brokers, use it for retargeting, or use it to determine creditworthiness.

Google user data is not used to train or improve foundation or generalized AI models.

Copied images are stored in GymCreatives application storage. Imported Elements remain available until deleted according to app or account controls.

Refresh tokens used for connected Google accounts are encrypted at rest. Access to tokens and imported files is limited to what is needed to operate the product.

We retain information for as long as needed to provide the product, meet legal obligations, resolve disputes, enforce agreements, protect users, and maintain security.

Humans do not read or view Google user data except with your consent, for security or abuse investigation, support, legal compliance, or aggregated internal operations.

Service providers may process data only as needed to operate GymCreatives, such as hosting, storage, billing, analytics, diagnostics, email, and support systems.

GymCreatives' use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Google Drive in Account Settings > Integrations. You can delete imported assets and account data through app controls where available or by contacting support.

You may contact GymCreatives to request access, correction, deletion, or other assistance with your personal information, subject to identity verification and legal limits.

GymCreatives uses HTTPS for data in transit, encrypted token storage, access controls, and service providers used only to operate the product.

No system is perfectly secure, but GymCreatives works to limit access, collect only necessary information, and protect account and integration data.

For privacy questions or requests, contact gymcreatives@gmail.com.