Privacy Policy

GenCreator is operated by Arcanea Labs BV (Amsterdam, NL). This policy covers data we process on gencreator.ai and connected services (Skool, Whop, Stripe, Supabase, Resend, PostHog, Vibeclubs).

What we collect

• — Account: email, name, tier, Skool/Whop/Stripe IDs.
• — Billing: handled by Whop (Merchant of Record) and Stripe. We never see card numbers.
• — Usage: bounded page-view and product events through PostHog EU when analytics is enabled. Do Not Track disables analytics before the PostHog script loads.
• — Attribution: the Starter form can include referrer and campaign parameters so we can understand which source led to a signup.
• — Communications: Resend for transactional email; Skool for community.

Legal basis (GDPR Art. 6)

Contract performance for paid tiers; legitimate interest for free community and cookieless aggregate analytics; consent for marketing email (opt-in only).

Your rights

Access, rectify, erase, export, or object. Email privacy@arcanea.ai — we respond within 30 days.

Retention

Account data kept while you hold an active membership + 24 months. Purchase records kept 7 years per NL tax law. Analytics uses in-memory, cookieless browser state with autocapture, session recording, exception capture, and person profiles disabled. Server-side event retention follows the configured PostHog EU project settings.

Sub-processors

Supabase (EU), Vercel (EU region fra1), Whop, Stripe, Skool, Resend, PostHog EU, Notion, Anthropic (for AI features). Current list at privacy@arcanea.ai.

Controller: Arcanea Labs BV · Amsterdam · KvK pending · VAT pending