Privacy Policy

GenCreator is operated by Arcanea Labs BV (Amsterdam, NL). This policy covers data we process on gencreator.ai and connected services (Skool, Whop, Stripe, Supabase, Resend, PostHog, Vibeclubs).

What we collect

• — Account: email, name, tier, Skool/Whop/Stripe IDs.
• — Billing: handled by Whop (Merchant of Record) and Stripe. We never see card numbers.
• — Usage: bounded page-view and product events through PostHog EU when analytics is enabled. Do Not Track disables analytics before the PostHog script loads.
• — Attribution: the Starter form can include referrer and campaign parameters so we can understand which source led to a signup.
• — Communications: Resend for transactional email; Skool for community.

Creator Studio and early access

The public Creator Studio arranges source text in your browser tab. It does not send that text to a drafting service or save it to a GenCreator account. Copy your exports before leaving. When you call the public MCP tools, the inputs are processed by our server for that request; these tools do not create a saved workspace or publish content.

The early access form records your email, selected workflow interest, consent version, request receipt and available campaign attribution in our central signup service on Supabase. Your opt-in covers GenCreator early access and launch updates. It does not enroll you in the Starter email sequence. You can withdraw that consent through the unsubscribe option in an update or by contacting the address below.

Legal basis (GDPR Art. 6)

Contract performance for paid tiers; legitimate interest for free community and cookieless aggregate analytics; consent for marketing email (opt-in only).

Your rights

Access, rectify, erase, export, or object. Email privacy@arcanea.ai — we respond within 30 days.

Retention

Account data kept while you hold an active membership + 24 months. Purchase records kept 7 years per NL tax law. Analytics uses in-memory, cookieless browser state with autocapture, session recording, exception capture, and person profiles disabled. Server-side event retention follows the configured PostHog EU project settings.

Sub-processors

Supabase (EU), Vercel (EU region fra1), Whop, Stripe, Skool, Resend, PostHog EU, Notion, Anthropic (for AI features). Current list at privacy@arcanea.ai.

Controller: Arcanea Labs BV · Amsterdam · KvK pending · VAT pending