Skip to main content
Platform Review
PricingSign in
← All platforms
Image / Video / Audio Generation · krea.ai

Krea

Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.

Overall riskHIGHReviewed 2026-07-03
Creator: medium · GRC: medium · Counsel: medium
creator band
Severe
enterprise · Severe
Dealbreaker · Third-party sublicensing
Exhibit A · Terms of Service · verbatim

Subject to these Terms, we grant each user of the Services a worldwide, non-exclusive, non-sublicensable and non-transferable license to access, use (and in certain instances download, display, and re-share) content generated from using the Services. Your rights to use, reproduce, modify, distribute, or store of any Content may be dependent on specific

cited by the third-party sublicensing dealbreaker — tap for the citation
216 verified findings10 policy surfaces2/2 core docs verified
Risk triage

Watch: governing law disputes

Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.

0
high
51
medium
165
low
2/2
docs
Trains on your data?
Not yet assessed
no verified finding covers this surface yet
Who owns outputs?
You own outputs — with license carve-outs
from 1 cited finding
Commercial use?
Commercial use allowed — with conditions
from 2 cited findings
Every rating:verbatim-citedsnapshot-datedchange-loggedHow we keep ratings honest →
Risk by role
Select a role to tailor the summary and reorder the findings below.

Scores derived from 64 enriched findings — same verbatim citations as below. AI-generated, not legal advice.

What this means for you
  • Output ownership has conditions — review the commercial use and license carve-outs before building on these outputs.
  • Data handling is conditional — 4 privacy or retention clauses warrant review before using Krea at scale.

Derived from AI-enriched analysis of the verified findings below — informational only, not legal advice.

How to read this page: Overall risk rates what Krea's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.

Creator lens
Your prompts, your outputs, your IP
SEVERE
Dealbreaker — Third-party sublicensing. Rights in your content can be passed on to third parties beyond service operation. see the clause

Based on 267 verified, verbatim-cited findings below — read the citations.

Enterprise lens
Data use, retention, subprocessors, audit
SEVERE
Dealbreaker — Third-party sublicensing. Rights in your content can be passed on to third parties beyond service operation. see the clause

Based on 315 verified, verbatim-cited findings below — read the citations.

Automated assessment against a published rubric — not legal advice.

Fully verifiedImage / Video / Audio Generation

Fully verified — complete core corpus captured and read in full.

Document status
  • Terms of Service
    Verified - read in full - 80 citationspdf textLast captured 2026-07-03
  • Privacy Policy
    Verified - read in full - 136 citationspdf textLast captured 2026-06-08
Tier conditions

Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.

plan language
Privacy & data use

This segment defines the column headers of the personal data categories table, establishing the framework for disclosing data categories, business purposes for collection, and third-party disclosure recipients.

"| Category of Personal Data (and Examples) | Business or Commercial Purpose(s) for Collection | Categories of Third Parties With Whom We Disclose this Personal Data |"
📍 Privacy Policy › “Categories of Personal Data We Collect”Jump to exact text →
plan language
Privacy & data use

Specifies that the company must disclose the business or commercial purpose for collecting or selling Personal Data as part of the obligatory access response.

"The business or commercial purpose for collecting or selling your Personal Data."
📍 Privacy Policy › “Access”Jump to exact text →
plan language
Privacy & data use

Incorporates by reference the 'Our Commercial or Business Purposes for Collecting Personal Data' section to explain how Personal Data is used under GDPR processing grounds.

"The “Our Commercial or Business Purposes for Collecting Personal Data” section above explains how we use your Personal Data."
📍 Privacy Policy › “Personal Data Use and Processing Grounds”Jump to exact text →
plan language
Privacy & data use

Defines voluntary free-form text inputs and survey responses as personal data collection sources, establishing the scope of user-generated content as a data source.

"When you voluntarily provide information in free-form text boxes through the Services or through responses to surveys or questionnaires."
📍 Privacy Policy › “You”Jump to exact text →
plan language
Privacy & data use

Directs users to the Privacy Policy and previously stated license terms to understand how their information is treated after they stop using the Services, incorporating those documents as governing the post-termination data treatment obligations.

"You’re free to do that at any time by contacting us at support@krea.ai; please refer to our [Privacy Policy](https://www.krea.ai/privacy-policy), as well as the licenses above, to understand how we treat information you provide to us after ..."
📍 Terms of Service › “What if I want to stop using the Services?”Jump to exact text →
plan language
Privacy & data use

Grants a broad permission to carry out other business purposes stated at collection or as permitted by applicable data privacy laws, functioning as a catch-all authorization clause.

"Carrying out other business purposes stated when collecting your Personal Data or as otherwise set forth in applicable data privacy laws"
📍 Privacy Policy › “Providing, Customizing and Improving the Services”Jump to exact text →
plan language
Privacy & data use

Permits the company to create and disclose aggregated, de-identified, or anonymized data derived from Personal Data to third parties for business purposes including service improvement and promotion, provided re-identification is prevented.

"We may create aggregated, de-identified or anonymized data from the Personal Data we collect, including by removing information that makes the data personally identifiable to a particular user. We may use such aggregated, de-identified or a..."
📍 Privacy Policy › “Data that is Not Personal Data”Jump to exact text →
plan language
Moderation & enforcement

Establishes that continued use of a Paid Service reaffirms the user's authorization for charges, obligates users to pay submitted charges, and preserves the Company's right to seek direct payment.

"Reaffirmation of Authorization. Your non-termination or continued use of a Paid Service reaffirms that we are authorized to charge your Payment Method for that Paid Service. We may submit those charges for payment and you will be responsibl..."
📍 Terms of Service › “Do the Services cost anything?”Jump to exact text →
Conflicting provisions (5)
  • The clauses provide conflicting email addresses for users to contact support or submit requests, which would confuse users about the correct point of contact.

    "If there are any conflicts between this section and any other provision of this Privacy Policy and you are a Connecticut resident, the portion that is more protective of Personal Data shall control to the extent of such conflict. If you have any questions about this section or whether any of the following rights apply to you, please contact us at [support@krea.ai](mailto:info@mootsh.com)."
    "You have certain rights with respect to your Personal Data, including those set forth below. For more information about these rights, or to submit a request, please email us at [support@krea.ai](mailto:support@krea.ai). Please note that in some circumstances, we may not be able to fully comply with your request, such as if it is frivolous or extremely impractical, if it jeopardizes the rights of others, or if it is not required by law, but in those circumstances, we will still respond to notify you of such a decision. In some cases, we may also need you to provide us with additional information, which may include Personal Data, if necessary to verify your identity and the nature of your request."
    Within one document
  • The clauses provide different email addresses for users to contact the company regarding questions or information about their personal data rights, which would cause confusion.

    "If there are any conflicts between this section and any other provision of this Privacy Policy and you are a Utah resident, the portion that is more protective of Personal Data shall control to the extent of such conflict. If you have any questions about this section or whether any of the following rights apply to you, please contact us at [support@krea.ai](mailto:info@mootsh.com)."
    "You have certain rights with respect to your Personal Data, including those set forth below. For more information about these rights, or to submit a request, please email us at [support@krea.ai](mailto:support@krea.ai). Please note that in some circumstances, we may not be able to fully comply with your request, such as if it is frivolous or extremely impractical, if it jeopardizes the rights of others, or if it is not required by law, but in those circumstances, we will still respond to notify you of such a decision. In some cases, we may also need you to provide us with additional information, which may include Personal Data, if necessary to verify your identity and the nature of your request."
    Within one document
  • The clauses provide different email addresses for users to contact the company regarding their personal data rights, which would confuse a user.

    "If there are any conflicts between this section and any other provision of this Privacy Policy and you are a Virginia resident, the portion that is more protective of Personal Data shall control to the extent of such conflict. If you have any questions about this section or whether any of the following rights apply to you, please contact us at [support@krea.ai](mailto:info@mootsh.com)."
    "You have certain rights with respect to your Personal Data, including those set forth below. For more information about these rights, or to submit a request, please email us at [support@krea.ai](mailto:support@krea.ai). Please note that in some circumstances, we may not be able to fully comply with your request, such as if it is frivolous or extremely impractical, if it jeopardizes the rights of others, or if it is not required by law, but in those circumstances, we will still respond to notify you of such a decision. In some cases, we may also need you to provide us with additional information, which may include Personal Data, if necessary to verify your identity and the nature of your request."
    Within one document
  • Clause A states that if the class action waiver is unenforceable, claims will be resolved in court, whereas Clause B states that the entire arbitration agreement will be null and void under the same condition, leading to different outcomes for the arbitration agreement's validity.

    "(e) Waiver of Class or Consolidated Actions. ALL CLAIMS AND DISPUTES WITHIN THE SCOPE OF THIS ARBITRATION AGREEMENT MUST BE ARBITRATED OR LITIGATED ON AN INDIVIDUAL BASIS AND NOT ON A CLASS BASIS. CLAIMS OF MORE THAN ONE CUSTOMER OR USER CANNOT BE ARBITRATED OR LITIGATED JOINTLY OR CONSOLIDATED WITH THOSE OF ANY OTHER CUSTOMER OR USER. If however, this waiver of class or consolidated actions is deemed invalid or unenforceable, neither you nor Krea is entitled to arbitration; instead all claims and disputes will be resolved in a court as set forth in (g) below."
    "(h) Severability. If the prohibition against class actions and other claims brought on behalf of third parties contained above is found to be unenforceable, then all of the preceding language in this Arbitration Agreement section will be null and void. This arbitration agreement will survive the termination of your relationship with Krea."
    Within one document
  • Clause B states an unqualified right to withdraw consent at any time, while Clause A introduces conditions under which the platform may not comply with any user rights request, including the withdrawal of consent, creating a direct conflict regarding the availability of this specific right.

    "You have certain rights with respect to your Personal Data, including those set forth below. For more information about these rights, or to submit a request, please email us at [support@krea.ai](mailto:support@krea.ai). Please note that in some circumstances, we may not be able to fully comply with your request, such as if it is frivolous or extremely impractical, if it jeopardizes the rights of others, or if it is not required by law, but in those circumstances, we will still respond to notify you of such a decision. In some cases, we may also need you to provide us with additional information, which may include Personal Data, if necessary to verify your identity and the nature of your request."
    "Withdrawal of Consent: If we are processing your Personal Data based on your consent (as indicated at the time of collection of such data), you have the right to withdraw your consent at any time. Please note, however, that if you exercise this right, you may have to then provide express consent on a case-by-case basis for the use or disclosure of certain of your Personal Data, if such use or disclosure is necessary to enable you to utilize some or all of our Services."
    Within one document

Evidence appendix

Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.

High - 0
Medium - 51
Tier-specific - 0
Total citations - 216
Severity
Surface
Document
Tier
Output ownership
CautionHigh
"Subject to these Terms, we grant each user of the Services a worldwide, non-exclusive, non-sublicensable and non-transferable license to access, use (and in certain instances download, display, and re-share) content generated from using the Services. Your rights to use, reproduce, modify, distribute, or store of any Content may be dependent on specific purchases or plans you have to the Services. You understand that Krea owns the Services. You won’t modify, publish, transmit, participate in the transfer or sale of, reproduce (except as expressly provided in this Section), create derivative works based on, or otherwise exploit any of the Services themselves, except for Content we give you a license to. The Services may allow you to copy or download certain Content, but please remember that even where these functionalities exist, all the restrictions in this section still apply."
Terms of Service › “What are my rights in the Services?”Jump to exact text →
Source: Terms of Service- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Grants users a worldwide, non-exclusive, non-sublicensable, non-transferable license to access and use content generated from the Services, while clarifying that rights to reproduce, modify, distribute, or store Content may depend on the user's subscription tier, and affirming Krea's ownership of the Services.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
"We may also de-identify or anonymize Personal Data to further our legitimate interests."
Privacy Policy › “Commercial Data, Device or IP Data, Geolocation Data, Web Analytics”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Grants the company permission to de-identify or anonymize Personal Data in furtherance of its legitimate interests, constituting an authorized data processing activity.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
"Retargeting/Advertising Cookies. Retargeting/Advertising Cookies collect data about your online activity and identify your interests so that we can provide advertising that we believe is relevant to you. For more information about this, please see the section below titled “Information about Interest-Based Advertisements.”"
Privacy Policy › “Tracking Tools, Advertising, and Opt-Out”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Defines 'Retargeting/Advertising Cookies' as cookies collecting online activity data to enable interest-based advertising, establishing the purpose of this tracking category and cross-referencing the advertising information section.

AI-generated interpretation, not legal advice.

Privacy & data use
High
"We will not discriminate against you for exercising your rights under the VCDPA. We will not deny you our goods or services, charge you different prices or rates, or provide you a lower quality of goods and services if you exercise your rights under the VCDPA. However, we may offer different tiers of our Services as allowed by applicable data privacy laws (including the VCDPA) with varying prices, rates or levels of quality of the goods or services you receive related to the value of Personal Data that we receive from you."
Privacy Policy › “Opt-Out of Certain Processing Activities”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Restricts discriminatory practices against VCDPA rights-exercising users while carving out a permission for tiered service offerings tied to the value of Personal Data provided, as allowed under applicable privacy law.

AI-generated interpretation, not legal advice.

Privacy & data use
High
"We will not discriminate against you for exercising your rights under the UCPA. We will not deny you our goods or services, charge you different prices or rates, or provide you a lower quality of goods and services if you exercise your rights under the UCPA. However, we may offer different tiers of our Services as allowed by applicable data privacy laws (including the UCPA) with varying prices, rates or levels of quality of the goods or services you receive related to the value of Personal Data that we receive from you."
Privacy Policy › “Opt-Out of Certain Processing Activities”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Prohibits discriminatory treatment of users exercising UCPA rights while permitting differentiated service tiers based on Personal Data value, establishing both a restriction against discrimination and a permission for tiered offerings under applicable law.

AI-generated interpretation, not legal advice.

Governing law & disputes
High
"Assignment. You may not assign, delegate or transfer these Terms or your rights or obligations hereunder, or your Services account, in any way (by operation of law or otherwise) without Krea's prior written consent. We may transfer, assign, or delegate these Terms and our rights and obligations without consent."
Terms of Service › “What else do I need to know?”Jump to exact text →
Source: Terms of Service- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Restricts users from assigning or transferring their rights, obligations, or account without Krea's prior written consent, while granting Krea the unilateral right to assign or delegate the Terms without consent.

AI-generated interpretation, not legal advice.

Prompt / input ownership
NeutralHigh
"Finally, you understand and agree that Krea, in performing the required technical steps to provide the Services to our users (including you), may need to make changes to your User Submissions to conform and adapt those User Submissions to the technical requirements of connection networks, devices, services, or media, and the foregoing licenses include the rights to do so."
Terms of Service › “Technical Adaptations”Jump to exact text →
Source: Terms of Service- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Grants Krea the right to make technical changes and adaptations to User Submissions as necessary to provide the Services across networks, devices, and media, confirming that the licenses granted include this right.

AI-generated interpretation, not legal advice.

Prompt / input ownership
NeutralHigh
"To display your User Submissions and allow their use within the Services, you grant us certain rights, detailed below. These rights are always subject to our [Privacy Policy](https://krea.ai/privacy-policy) and are only applicable to the extent they involve your personally identifiable information."
Terms of Service › “Licenses”Jump to exact text →
Source: Terms of Service- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Explains the purpose of the license grants that follow and incorporates the Privacy Policy by reference, restricting the licenses to the extent they involve personally identifiable information.

AI-generated interpretation, not legal advice.

Commercial use
NeutralHigh
"The materials displayed or performed or available on or through the Services, including, but not limited to, text, graphics, data, articles, photos, images, illustrations, User Submissions (as defined below) and so forth (all of the foregoing, the “Content”) are protected by copyright and/or other intellectual property laws. You promise to abide by all copyright notices, trademark rules, information, and restrictions contained in any Content you access through the Services, and you won’t use, copy, reproduce, modify, translate, publish, broadcast, transmit, distribute, perform, upload, display, license, sell, commercialize or otherwise exploit for any purpose any Content not owned by you, (i) without the prior consent of the owner of that Content or (ii) in a way that violates someone else’s (including Krea's) rights."
Terms of Service › “What are my rights in the Services?”Jump to exact text →
Source: Terms of Service- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Defines 'Content' as materials available through the Services protected by copyright and other IP laws, and obliges users to abide by all copyright notices, trademark rules, and restrictions contained in any Content they access, restricting unauthorized use, copying, reproduction, and distribution.

AI-generated interpretation, not legal advice.

Privacy & data use
High
"Improving the Services, including testing, research, internal analytics and product development."
Privacy Policy › “Providing, Customizing and Improving the Services”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Permits use of personal data for internal analytics, testing, research, and product development, which may include training-adjacent activities and service improvement functions.

AI-generated interpretation, not legal advice.

Privacy & data use
NeutralHigh
"Other Processing Grounds: From time to time we may also need to process Personal Data to comply with a legal obligation, if it is necessary to protect the vital interests of you or other data subjects, or if it is necessary for a task carried out in the public interest."
Privacy Policy › “Commercial Data, Device or IP Data, Geolocation Data, Web Analytics”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Identifies additional lawful processing grounds beyond consent and legitimate interest—legal obligation, vital interests, and public interest tasks—creating an obligation framework for processing in those circumstances.

AI-generated interpretation, not legal advice.

Privacy & data use
High
"Additionally, you may be able to access certain parts or features of the Services by using your account credentials from other services (each, a “Third Party Account”), such as those offered by Google and Discord. By using the Services through a Third Party Account, you permit us to access certain information from such account for use by the Services. You are ultimately in control of how much information is accessible to us and may exercise such control by adjusting your privacy settings on your Third Party Account."
Terms of Service › “What are the basics of using Krea?”Jump to exact text →
Source: Terms of Service- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

This segment permits Krea to access information from third-party accounts (e.g., Google, Discord) when users choose to authenticate through them, and grants users control over accessible information via privacy settings on those third-party platforms.

AI-generated interpretation, not legal advice.

Privacy & data use
NeutralHigh
"| Device/IP Data such as IP address, device ID, domain server, and type of device/ operating system/ browser used to access the Services. | • Providing, Customizing and Improving the Services<br>• Marketing the Services | • Service Providers<br>• Analytics Partners |"
Privacy Policy › “Categories of Personal Data We Collect”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Defines Device/IP Data as a collected personal data category and maps it to permitted processing purposes (providing services, marketing) and authorized disclosure recipients (service providers, analytics partners).

AI-generated interpretation, not legal advice.

Privacy & data use
High
"The Services use cookies and similar technologies such as pixel tags, web beacons, clear GIFs and JavaScript (collectively, “Cookies”) to enable our servers to recognize your web browser, tell us how and when you visit and use our Services, analyze trends, learn about our user base and operate and improve our Services. Cookies are small pieces of data– usually text files – placed on your computer, tablet, phone or similar device when you use that device to access our Services. We may also supplement the information we collect from you with information received from third parties, including third parties that have placed their own Cookies on your device(s)."
Privacy Policy › “Tracking Tools, Advertising, and Opt-Out”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Discloses the company's use of cookies and similar tracking technologies for purposes including server recognition, usage analysis, and service improvement, and notes supplementation of collected data with third-party information, describing data collection practices.

AI-generated interpretation, not legal advice.

Privacy & data use
High
"Please note that because of our use of Cookies, the Services do not support “Do Not Track” requests sent from a browser at this time."
Privacy Policy › “Tracking Tools, Advertising, and Opt-Out”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Disclaims support for 'Do Not Track' browser signals, informing users that such requests will not be honored, limiting users' ability to restrict tracking through browser settings.

AI-generated interpretation, not legal advice.

Privacy & data use
High
"We will only process your Personal Data if we have a lawful basis for doing so. Lawful bases for processing include consent, contractual necessity and our “legitimate interests” or the legitimate interest of others, as further described below."
Privacy Policy › “Personal Data Use and Processing Grounds”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Obligates the company to process Personal Data only where a lawful basis exists under GDPR, enumerating consent, contractual necessity, and legitimate interests as recognized lawful bases.

AI-generated interpretation, not legal advice.

Privacy & data use
High
"Performance/Analytical Cookies. Performance/Analytical Cookies allow us to understand how visitors use our Services. They do this by collecting information about the number of visitors to the Services, what pages visitors view on our Services and how long visitors are viewing pages on the Services. Performance/Analytical Cookies also help us measure the performance of our advertising campaigns in order to help us improve our campaigns and the Services’ content for those who engage with our advertising."
Privacy Policy › “Tracking Tools, Advertising, and Opt-Out”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Defines 'Performance/Analytical Cookies' as cookies collecting visitor usage data and measuring advertising campaign performance, establishing the purpose and scope of this tracking category.

AI-generated interpretation, not legal advice.

Privacy & data use
High
"| Web Analytics such as web page interactions, referring webpage/source through which you accessed the Services, non-identifiable request IDs, and statistics associated with the interaction between device or browser and the Services. | • Providing, Customizing and Improving the Services<br>• Marketing the Services | • Service Providers<br>• Analytics Partners |"
Privacy Policy › “Categories of Personal Data We Collect”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-08- View source
Permalink to this finding →
Automated analysis

Defines Web Analytics as a collected personal data category and maps it to permitted processing purposes (providing/improving services, marketing) and authorized disclosure recipients (service providers, analytics partners).

AI-generated interpretation, not legal advice.

Common questions about Krea's policies

Who owns the content you create with Krea?
You own outputs — with license carve-outs — based on 1 verified finding from Krea's published policy. Informational only, not legal advice.
Can you use Krea's output commercially?
Commercial use allowed — with conditions — based on 2 verified findings from Krea's published policy. Informational only, not legal advice.

Clause detail — protections, your obligations, and coverage

Every clause below is a verbatim quote from Krea's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.

✅ Protections found

65 verified clauses

Clauses in Krea's policies that work in your favour — commitments the platform made to you.

  • Privacy & data usechildren's data
    The Children’s Online Privacy Protection Act (“COPPA”) requires that online service providers obtain parental consent before they knowingly collect personally identifiable information online from children who are under 13 years of age. We do not knowingly coll…

    This segment restricts collection of personal information from children under 13, prohibits such children from registering or using the Services, imposes an obligation to delete any such data if discovered, and reference…

    📍 Terms of Service › “Children’s Online Privacy Protection Act”Jump to exact text →
  • Privacy & data use
    If you are a Virginia resident, you have the rights set forth under the Virginia Consumer Data Protection Act (“VCDPA”). Please see the “Exercising Your Rights” section below for instructions regarding how to exercise these rights. Please note that we may proc…

    Describes VCDPA rights available to Virginia residents, directs users to the exercise instructions section, and clarifies that when acting as a service provider, the data controller is the appropriate first contact for r…

    📍 Privacy Policy › “Virginia Resident Rights”Jump to exact text →
  • Privacy & data use
    If you are a Connecticut resident, you have the rights set forth under the Connecticut Data Privacy Act (“CTDPA”). Please see the “Exercising Your Rights” section below for instructions regarding how to exercise these rights. Please note that we may process Pe…

    Incorporates the Connecticut Data Privacy Act (CTDPA) as the legal basis for Connecticut residents' rights, cross-references the 'Exercising Your Rights' section for procedures, and establishes an exception clarifying th…

    📍 Privacy Policy › “Connecticut Resident Rights”Jump to exact text →
  • Privacy & data usesale/sharing of personal data
    If you are a California resident, you have the rights set forth in this section. Please see the “Exercising Your Rights under the State Privacy Laws” section below for instructions regarding how to exercise these rights. Please note that we may process Persona…

    Grants California residents specific privacy rights under state law, provides procedural direction for exercising those rights, clarifies the company's role as a service provider in some contexts, and notes potential exc…

    📍 Privacy Policy › “California Resident Rights”Jump to exact text →
  • Privacy & data use
    To exercise the rights described in this Privacy Policy, you or, if you are a California, Colorado or Connecticut resident, your Authorized Agent (defined below) must send us a request that (1) provides sufficient information to allow us to verify that you are…

    Establishes the procedure and criteria for submitting a Valid Request to exercise state privacy rights, including verification requirements and the definition of a 'Valid Request,' and notes that Authorized Agents may ac…

    📍 Privacy Policy › “Exercising Your Rights under the State Privacy Laws”Jump to exact text →
  • Privacy & data use
    If there are any conflicts between this section and any other provision of this Privacy Policy, the policy or portion that is more protective of Personal Data shall control to the extent of such conflict. If you have any questions about this section or whether…

    Incorporates a conflict-resolution rule prioritizing more protective provisions, provides contact information for GDPR queries, and defines circumstances where Krea acts as a data processor rather than controller, cross-…

    • Designated security contact: support@krea.ai
    📍 Privacy Policy › “EU and UK Residents”Jump to exact text →

+ 59 more verified clauses of this kind on this platform, cited in full in the report.

📋 Rules you must follow

18 verified clauses

What Krea requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.

  • Commercial useconduct restrictions
    The materials displayed or performed or available on or through the Services, including, but not limited to, text, graphics, data, articles, photos, images, illustrations, User Submissions (as defined below) and so forth (all of the foregoing, the “Content”) a…

    Defines 'Content' as materials available through the Services protected by copyright and other IP laws, and obliges users to abide by all copyright notices, trademark rules, and restrictions contained in any Content they…

    📍 Terms of Service › “What are my rights in the Services?”Jump to exact text →
  • Moderation & enforcement
    You agree that you will not post, upload, share, store, or otherwise provide through the Services any User Submissions that: (i) infringe any third party's copyrights or other rights (e.g., trademark, privacy rights, etc.); (ii) contain sexually explicit conte…

    Restricts users from posting User Submissions that infringe third-party rights, contain prohibited content such as explicit material or hate speech, exploit minors, depict unlawful violence, promote fraud, or otherwise v…

    📍 Terms of Service › “Your Responsibilities”Jump to exact text →
  • Moderation & enforcement
    You may be required to sign up for an account, select a password and user name (“Krea Credentials”), and provide us with certain information or data, such as your contact information. You promise to provide us with accurate, complete, and updated registration…

    This segment imposes obligations on users to provide accurate registration information, prohibits use of unauthorized names or impersonation, and restricts account transfer without prior written permission, establishing…

    📍 Terms of Service › “What are the basics of using Krea?”Jump to exact text →
  • Moderation & enforcementconduct restrictions
    runs Maillist, Listserv, any form of auto-responder or “spam” on the Services, or any processes that run or are activated while you are not logged into the Services, or that otherwise interfere with the proper working of the Services (including by placing an u…

    Restricts users from running spam, auto-responders, or processes that interfere with the proper functioning or infrastructure of the Services.

    📍 Terms of Service › “Are there restrictions in how I can use the Services?”Jump to exact text →
  • Moderation & enforcement
    You represent, warrant, and agree that you will not provide,  contribute, or generate any Content or User Submission (as those terms are defined below), to the Services, or otherwise use or interact with the Services, in a manner that:

    Imposes a representation, warranty, and agreement on the user not to provide, contribute, generate, or use the Services in prohibited manners, establishing the user's binding commitment to comply with the listed restrict…

    📍 Terms of Service › “Are there restrictions in how I can use the Services?”Jump to exact text →

+ 13 more verified clauses of this kind on this platform, cited in full in the report.

What the policies actually cover

14 topics
  • Product telemetry & usage tracking1 protective16 clauses
  • Advertising & tracking4 protective11 clauses
  • Sale or sharing of personal data11 protective16 clauses
  • Sensitive data (biometric, location, health)2 protective2 clauses
  • Children's data2 protective2 clauses
  • Government & law-enforcement disclosure1 clause
  • Arbitration & class-action waiver3 protective7 clauses
  • Damages & liability cap1 clause
  • Indemnity direction1 clause
  • Terms can change at any time2 protective2 clauses
  • Deletion rights & post-termination survival3 protective5 clauses
  • Auto-renewal & cancel window7 clauses
  • Breach-notification promises1 clause
  • Conduct restrictions7 obligations7 clauses

137 further verified clauses are cited on this page but not yet assigned a topic.

Cross-clause notes

Cross-referenceacross documents

The Terms of Service, Terms of Service › “What are my rights in the Services?” describes rights the platform takes in user content, and the Privacy Policy, Privacy Policy › “Advertising Partners” describes disclosure of data to third parties or subprocessors. Both clauses are in force at the same time — read them together.

Automated cross-reference against the published rubric — not legal advice.

Clause intelligence

Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.

389
clauses
85
patterns
85
stances
privacy sharing · 32dispute resolution · 20ip license · 12ip ownership · 9tier conditionality · 7legal burden · 4
data retentionMEDIUMPrivacy Policy › “Data Retention”

The clause allows indefinite, perpetual, or necessity-based retention.

We retain Personal Data about you for as long as necessary to provide you with our Services or to perform our business or commercial purposes for collecting your Personal Data. When establishing a retention period for specific categories of data, we consider who we collected the data from, our need for the Personal Data, why we collected the Personal Data, and the sensitivity of the Personal Data. In some cases we...
Open source citation
dispute resolutionMEDIUMTerms of Service › “What else do I need to know?”

The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.

(e) Waiver of Class or Consolidated Actions. ALL CLAIMS AND DISPUTES WITHIN THE SCOPE OF THIS ARBITRATION AGREEMENT MUST BE ARBITRATED OR LITIGATED ON AN INDIVIDUAL BASIS AND NOT ON A CLASS BASIS. CLAIMS OF MORE THAN ONE CUSTOMER OR USER CANNOT BE ARBITRATED OR LITIGATED JOINTLY OR CONSOLIDATED WITH THOSE OF ANY OTHER CUSTOMER OR USER. If however, this waiver of class or consolidated actions is deemed invalid or u...
Open source citation
dispute resolutionMEDIUMTerms of Service › “What else do I need to know?”

The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.

Arbitration Agreement. Please read the following ARBITRATION AGREEMENT carefully because it requires you to arbitrate certain disputes and claims with Krea and limits the manner in which you can seek relief from Krea. Both you and Krea acknowledge and agree that for the purposes of any dispute arising out of or relating to the subject matter of these Terms, Krea's officers, directors, employees and independent con...
Open source citation
dispute resolutionMEDIUMTerms of Service › “What else do I need to know?”

The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.

(b) Costs of Arbitration. The Rules will govern payment of all arbitration fees. Krea will pay all arbitration fees for claims less than seventy-five thousand ($75,000) dollars. Krea will not seek its attorneys’ fees and costs in arbitration unless the arbitrator determines that your claim is frivolous.
Open source citation
dispute resolutionMEDIUMTerms of Service › “What else do I need to know?”

The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.

Except as expressly set forth in the section above regarding the arbitration agreement, you and Krea agree there are no third-party beneficiaries intended under these Terms.
Open source citation

Tier matrix

Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.

TierSurfaceVerdictRiskCitations
All applicable tiersgoverning law disputesconditionalMEDIUM20
All applicable tiersmoderation enforcementworsensHIGH4
All applicable tiersoutput ownershipworsensHIGH2
All applicable tiersprivacy data useworsensHIGH4
All applicable tierssubprocessors data sharingworsensHIGH6
Freeindemnity liabilityconditionalMEDIUM2
Freesubprocessors data sharingworsensHIGH4
Freetraining useworsensHIGH2
Pro / Paidprivacy data useworsensHIGH2
Pro / Paidsubprocessors data sharingworsensHIGH1
Team / Businessdata retentionconditionalMEDIUM1
Team / Businessindemnity liabilityconditionalMEDIUM2

Policy evolution

Open full timeline

Before/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.

improvedhigh materialityJun 17Jul 8, 2026

data sharing improved from high/sale or sell to medium/third party or vendor sharing.

Before · high
We do not currently sell or process for the purposes of targeted advertising your Personal Data as defined under the CPA.
Before citation
After · medium
You agree that you will not post, upload, share, store, or otherwise provide through the Services any User Submissions that: (i) infringe any third party's copyrights or other rights (e.g., trademark, privacy rights, etc.); (ii) contain sexually explicit content or pornography; (iii) contain hateful, defamatory, or discriminatory content or incite hatred against any individual or group; (iv) exploit minors; (v) depict unlawful acts or extreme violence; (vi) depict animal cruelty or extreme violence towards animals; (vii) promote fraudulent schemes, multi-level marketing (MLM) schemes, get rich quick schemes, online gaming and gambling, cash gifting, work from home businesses, or any other dubious money-making ventures; or (viii) that violate any law.
After citation
worsenedhigh materialityJun 17Jun 17, 2026

data sharing worsened from medium/third party or vendor sharing to high/sale or sell.

Before · medium
Certain features of the Services allow you to share information with others, including through your social networks or other Third Party Accounts. When Content is authorized for sharing, we will clearly identify the Content you are authorized to redistribute and the ways you may redistribute it, usually by providing a “share” button on or near the Content. If you share information from the Services with others through your Third Party Accounts, such as your social networks, you authorize Krea to share that information with the applicable Third Party Account provider. Please review the policies of any Third Party Account providers you share information with or through for additional information about how they may use your information. If you redistribute Content, you must be able to edit or delete any Content you redistribute, and you must edit or delete it promptly upon our request.
Before citation
After · high
We do not currently sell or process for the purposes of targeted advertising your Personal Data as defined under the CPA.
After citation
worsenedhigh materialityJun 17Jun 17, 2026

data sharing worsened from medium/third party or vendor sharing to high/sale or sell.

Before · medium
The Children’s Online Privacy Protection Act (“COPPA”) requires that online service providers obtain parental consent before they knowingly collect personally identifiable information online from children who are under 13 years of age. We do not knowingly collect or solicit personally identifiable information from children under 13 years of age; if you are a child under 13 years of age, please do not attempt to register for or otherwise use the Services or send us any personal information. If we learn we have collected personal information from a child under 13 years of age, we will delete that information as quickly as possible. If you believe that a child under 13 years of age may have provided us personal information, please contact us at support@krea.ai.
Before citation
After · high
You have the right to opt-out to the sale of your Personal Data. We do not currently sell your Personal Data as defined under the VDCPA.
After citation
Jul 8, 2026legal burdenMEDIUM

Latest stance: liability limited on indemnity liability

Warranty Disclaimer. Krea and its licensors, suppliers, partners, parent, subsidiaries or affiliated entities, and each of their respective officers, directors, members, employees, consultants, contract employees, representatives and agents, and each of their respective successors and assigns (Krea and all such parties together, the “Krea Parties”) make no representations or warranties concerning the Services, including without limitation regarding any Content contained in or accessed through the Services, and the Krea Parties will not be responsible or liable for the accuracy, copyright compliance, legality, or decency of material contained in or accessed through the Services or any claims, actions, suits procedures, costs, expenses, damages or liabilities arising out of use of, or in any way related to your participation in, the Services. The Krea Parties make no representations or warranties regarding suggestions or recommendations of services or products offered or purchased through or in connection with the Services. THE SERVICES AND CONTENT ARE PROVIDED BY KREA (AND ITS LICENSORS AND SUPPLIERS) ON AN “AS-IS” BASIS, WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, WITHOUT LIMITATION, IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, OR THAT USE OF THE SERVICES WILL BE UNINTERRUPTED OR ERROR-FREE. SOME STATES DO NOT ALLOW LIMITATIONS ON HOW LONG AN IMPLIED WARRANTY LASTS, SO THE ABOVE LIMITATIONS MAY NOT APPLY TO YOU.
Open timeline citation
Jul 8, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on subprocessors data sharing

You agree that you will not post, upload, share, store, or otherwise provide through the Services any User Submissions that: (i) infringe any third party's copyrights or other rights (e.g., trademark, privacy rights, etc.); (ii) contain sexually explicit content or pornography; (iii) contain hateful, defamatory, or discriminatory content or incite hatred against any individual or group; (iv) exploit minors; (v) depict unlawful acts or extreme violence; (vi) depict animal cruelty or extreme violence towards animals; (vii) promote fraudulent schemes, multi-level marketing (MLM) schemes, get rich quick schemes, online gaming and gambling, cash gifting, work from home businesses, or any other dubious money-making ventures; or (viii) that violate any law.
Open timeline citation
Jul 8, 2026dispute termsMEDIUM

Latest stance: arbitration or waiver on governing law disputes

(d) Waiver of Jury Trial. YOU AND KREA WAIVE ANY CONSTITUTIONAL AND STATUTORY RIGHTS TO GO TO COURT AND HAVE A TRIAL IN FRONT OF A JUDGE OR JURY. You and Krea are instead choosing to have claims and disputes resolved by arbitration. Arbitration procedures are typically more limited, more efficient, and less costly than rules applicable in court and are subject to very limited review by a court. In any litigation between you and Krea over whether to vacate or enforce an arbitration award, YOU AND KREA WAIVE ALL RIGHTS TO A JURY TRIAL, and elect instead to have the dispute be resolved by a judge.
Open timeline citation
Jul 8, 2026dispute termsMEDIUM

Latest stance: arbitration or waiver on governing law disputes

Except as expressly set forth in the section above regarding the arbitration agreement, you and Krea agree there are no third-party beneficiaries intended under these Terms.
Open timeline citation

Capture recency

  • Terms of Service:Last captured 2026-07-03· verified 2026-07-03
  • Privacy Policy:Last captured 2026-06-08· verified 2026-06-08verified once — no re-scan in 94 days

Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.

↑ 109 more findings this quarter vs last (383 vs 274). First scan: June 2026.

Claim this profile

Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Krea's policies — no human edits the data.

Need this for procurement or legal diligence?

Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.

Every finding above is a verbatim quote from Krea's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.

📢 POLICY UPDATES ALERT

AIRIN Brief

Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.