Krea
Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
“Subject to these Terms, we grant each user of the Services a worldwide, non-exclusive, non-sublicensable and non-transferable license to access, use (and in certain instances download, display, and re-share) content generated from using the Services. Your rights to use, reproduce, modify, distribute, or store of any Content may be dependent on specific…”
Watch: governing law disputes
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
Restricts users from assigning or transferring their rights, obligations, or account without Krea's prior written consent, while granting Krea the unilateral right to assign or delegate the Terms without consent.
Restricts discriminatory practices against VCDPA rights-exercising users while carving out a permission for tiered service offerings tied to the value of Personal Data provided, as allowed under applicable privacy law.
Prohibits discriminatory treatment of users exercising UCPA rights while permitting differentiated service tiers based on Personal Data value, establishing both a restriction against discrimination and a permission for tiered offerings under applicable law.
Scores derived from 64 enriched findings — same verbatim citations as below. AI-generated, not legal advice.
- Output ownership has conditions — review the commercial use and license carve-outs before building on these outputs.
- Data handling is conditional — 4 privacy or retention clauses warrant review before using Krea at scale.
Derived from AI-enriched analysis of the verified findings below — informational only, not legal advice.
How to read this page: Overall risk rates what Krea's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Policy benchmark
rubric v1.0 — how this is scoredBased on 267 verified, verbatim-cited findings below — read the citations.
Based on 315 verified, verbatim-cited findings below — read the citations.
Automated assessment against a published rubric — not legal advice.
Fully verified — complete core corpus captured and read in full.
- Terms of ServiceVerified - read in full - 80 citationspdf textLast captured 2026-07-03
- Privacy PolicyVerified - read in full - 136 citationspdf textLast captured 2026-06-08
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
This segment defines the column headers of the personal data categories table, establishing the framework for disclosing data categories, business purposes for collection, and third-party disclosure recipients.
"| Category of Personal Data (and Examples) | Business or Commercial Purpose(s) for Collection | Categories of Third Parties With Whom We Disclose this Personal Data |"
Specifies that the company must disclose the business or commercial purpose for collecting or selling Personal Data as part of the obligatory access response.
"The business or commercial purpose for collecting or selling your Personal Data."
Incorporates by reference the 'Our Commercial or Business Purposes for Collecting Personal Data' section to explain how Personal Data is used under GDPR processing grounds.
"The “Our Commercial or Business Purposes for Collecting Personal Data” section above explains how we use your Personal Data."
Defines voluntary free-form text inputs and survey responses as personal data collection sources, establishing the scope of user-generated content as a data source.
"When you voluntarily provide information in free-form text boxes through the Services or through responses to surveys or questionnaires."
Directs users to the Privacy Policy and previously stated license terms to understand how their information is treated after they stop using the Services, incorporating those documents as governing the post-termination data treatment obligations.
"You’re free to do that at any time by contacting us at support@krea.ai; please refer to our [Privacy Policy](https://www.krea.ai/privacy-policy), as well as the licenses above, to understand how we treat information you provide to us after ..."
Grants a broad permission to carry out other business purposes stated at collection or as permitted by applicable data privacy laws, functioning as a catch-all authorization clause.
"Carrying out other business purposes stated when collecting your Personal Data or as otherwise set forth in applicable data privacy laws"
Permits the company to create and disclose aggregated, de-identified, or anonymized data derived from Personal Data to third parties for business purposes including service improvement and promotion, provided re-identification is prevented.
"We may create aggregated, de-identified or anonymized data from the Personal Data we collect, including by removing information that makes the data personally identifiable to a particular user. We may use such aggregated, de-identified or a..."
Establishes that continued use of a Paid Service reaffirms the user's authorization for charges, obligates users to pay submitted charges, and preserves the Company's right to seek direct payment.
"Reaffirmation of Authorization. Your non-termination or continued use of a Paid Service reaffirms that we are authorized to charge your Payment Method for that Paid Service. We may submit those charges for payment and you will be responsibl..."
The clauses provide conflicting email addresses for users to contact support or submit requests, which would confuse users about the correct point of contact.
"If there are any conflicts between this section and any other provision of this Privacy Policy and you are a Connecticut resident, the portion that is more protective of Personal Data shall control to the extent of such conflict. If you have any questions about this section or whether any of the following rights apply to you, please contact us at [support@krea.ai](mailto:info@mootsh.com)."
"You have certain rights with respect to your Personal Data, including those set forth below. For more information about these rights, or to submit a request, please email us at [support@krea.ai](mailto:support@krea.ai). Please note that in some circumstances, we may not be able to fully comply with your request, such as if it is frivolous or extremely impractical, if it jeopardizes the rights of others, or if it is not required by law, but in those circumstances, we will still respond to notify you of such a decision. In some cases, we may also need you to provide us with additional information, which may include Personal Data, if necessary to verify your identity and the nature of your request."
Within one documentThe clauses provide different email addresses for users to contact the company regarding questions or information about their personal data rights, which would cause confusion.
"If there are any conflicts between this section and any other provision of this Privacy Policy and you are a Utah resident, the portion that is more protective of Personal Data shall control to the extent of such conflict. If you have any questions about this section or whether any of the following rights apply to you, please contact us at [support@krea.ai](mailto:info@mootsh.com)."
"You have certain rights with respect to your Personal Data, including those set forth below. For more information about these rights, or to submit a request, please email us at [support@krea.ai](mailto:support@krea.ai). Please note that in some circumstances, we may not be able to fully comply with your request, such as if it is frivolous or extremely impractical, if it jeopardizes the rights of others, or if it is not required by law, but in those circumstances, we will still respond to notify you of such a decision. In some cases, we may also need you to provide us with additional information, which may include Personal Data, if necessary to verify your identity and the nature of your request."
Within one documentThe clauses provide different email addresses for users to contact the company regarding their personal data rights, which would confuse a user.
"If there are any conflicts between this section and any other provision of this Privacy Policy and you are a Virginia resident, the portion that is more protective of Personal Data shall control to the extent of such conflict. If you have any questions about this section or whether any of the following rights apply to you, please contact us at [support@krea.ai](mailto:info@mootsh.com)."
"You have certain rights with respect to your Personal Data, including those set forth below. For more information about these rights, or to submit a request, please email us at [support@krea.ai](mailto:support@krea.ai). Please note that in some circumstances, we may not be able to fully comply with your request, such as if it is frivolous or extremely impractical, if it jeopardizes the rights of others, or if it is not required by law, but in those circumstances, we will still respond to notify you of such a decision. In some cases, we may also need you to provide us with additional information, which may include Personal Data, if necessary to verify your identity and the nature of your request."
Within one documentClause A states that if the class action waiver is unenforceable, claims will be resolved in court, whereas Clause B states that the entire arbitration agreement will be null and void under the same condition, leading to different outcomes for the arbitration agreement's validity.
"(e) Waiver of Class or Consolidated Actions. ALL CLAIMS AND DISPUTES WITHIN THE SCOPE OF THIS ARBITRATION AGREEMENT MUST BE ARBITRATED OR LITIGATED ON AN INDIVIDUAL BASIS AND NOT ON A CLASS BASIS. CLAIMS OF MORE THAN ONE CUSTOMER OR USER CANNOT BE ARBITRATED OR LITIGATED JOINTLY OR CONSOLIDATED WITH THOSE OF ANY OTHER CUSTOMER OR USER. If however, this waiver of class or consolidated actions is deemed invalid or unenforceable, neither you nor Krea is entitled to arbitration; instead all claims and disputes will be resolved in a court as set forth in (g) below."
"(h) Severability. If the prohibition against class actions and other claims brought on behalf of third parties contained above is found to be unenforceable, then all of the preceding language in this Arbitration Agreement section will be null and void. This arbitration agreement will survive the termination of your relationship with Krea."
Within one documentClause B states an unqualified right to withdraw consent at any time, while Clause A introduces conditions under which the platform may not comply with any user rights request, including the withdrawal of consent, creating a direct conflict regarding the availability of this specific right.
"You have certain rights with respect to your Personal Data, including those set forth below. For more information about these rights, or to submit a request, please email us at [support@krea.ai](mailto:support@krea.ai). Please note that in some circumstances, we may not be able to fully comply with your request, such as if it is frivolous or extremely impractical, if it jeopardizes the rights of others, or if it is not required by law, but in those circumstances, we will still respond to notify you of such a decision. In some cases, we may also need you to provide us with additional information, which may include Personal Data, if necessary to verify your identity and the nature of your request."
"Withdrawal of Consent: If we are processing your Personal Data based on your consent (as indicated at the time of collection of such data), you have the right to withdraw your consent at any time. Please note, however, that if you exercise this right, you may have to then provide express consent on a case-by-case basis for the use or disclosure of certain of your Personal Data, if such use or disclosure is necessary to enable you to utilize some or all of our Services."
Within one document
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
"Subject to these Terms, we grant each user of the Services a worldwide, non-exclusive, non-sublicensable and non-transferable license to access, use (and in certain instances download, display, and re-share) content generated from using the Services. Your rights to use, reproduce, modify, distribute, or store of any Content may be dependent on specific purchases or plans you have to the Services. You understand that Krea owns the Services. You won’t modify, publish, transmit, participate in the transfer or sale of, reproduce (except as expressly provided in this Section), create derivative works based on, or otherwise exploit any of the Services themselves, except for Content we give you a license to. The Services may allow you to copy or download certain Content, but please remember that even where these functionalities exist, all the restrictions in this section still apply."
Grants users a worldwide, non-exclusive, non-sublicensable, non-transferable license to access and use content generated from the Services, while clarifying that rights to reproduce, modify, distribute, or store Content may depend on the user's subscription tier, and affirming Krea's ownership of the Services.
AI-generated interpretation, not legal advice.
"We may also de-identify or anonymize Personal Data to further our legitimate interests."
Grants the company permission to de-identify or anonymize Personal Data in furtherance of its legitimate interests, constituting an authorized data processing activity.
AI-generated interpretation, not legal advice.
"Retargeting/Advertising Cookies. Retargeting/Advertising Cookies collect data about your online activity and identify your interests so that we can provide advertising that we believe is relevant to you. For more information about this, please see the section below titled “Information about Interest-Based Advertisements.”"
Defines 'Retargeting/Advertising Cookies' as cookies collecting online activity data to enable interest-based advertising, establishing the purpose of this tracking category and cross-referencing the advertising information section.
AI-generated interpretation, not legal advice.
"We will not discriminate against you for exercising your rights under the VCDPA. We will not deny you our goods or services, charge you different prices or rates, or provide you a lower quality of goods and services if you exercise your rights under the VCDPA. However, we may offer different tiers of our Services as allowed by applicable data privacy laws (including the VCDPA) with varying prices, rates or levels of quality of the goods or services you receive related to the value of Personal Data that we receive from you."
Restricts discriminatory practices against VCDPA rights-exercising users while carving out a permission for tiered service offerings tied to the value of Personal Data provided, as allowed under applicable privacy law.
AI-generated interpretation, not legal advice.
"We will not discriminate against you for exercising your rights under the UCPA. We will not deny you our goods or services, charge you different prices or rates, or provide you a lower quality of goods and services if you exercise your rights under the UCPA. However, we may offer different tiers of our Services as allowed by applicable data privacy laws (including the UCPA) with varying prices, rates or levels of quality of the goods or services you receive related to the value of Personal Data that we receive from you."
Prohibits discriminatory treatment of users exercising UCPA rights while permitting differentiated service tiers based on Personal Data value, establishing both a restriction against discrimination and a permission for tiered offerings under applicable law.
AI-generated interpretation, not legal advice.
"Assignment. You may not assign, delegate or transfer these Terms or your rights or obligations hereunder, or your Services account, in any way (by operation of law or otherwise) without Krea's prior written consent. We may transfer, assign, or delegate these Terms and our rights and obligations without consent."
Restricts users from assigning or transferring their rights, obligations, or account without Krea's prior written consent, while granting Krea the unilateral right to assign or delegate the Terms without consent.
AI-generated interpretation, not legal advice.
"Finally, you understand and agree that Krea, in performing the required technical steps to provide the Services to our users (including you), may need to make changes to your User Submissions to conform and adapt those User Submissions to the technical requirements of connection networks, devices, services, or media, and the foregoing licenses include the rights to do so."
Grants Krea the right to make technical changes and adaptations to User Submissions as necessary to provide the Services across networks, devices, and media, confirming that the licenses granted include this right.
AI-generated interpretation, not legal advice.
"To display your User Submissions and allow their use within the Services, you grant us certain rights, detailed below. These rights are always subject to our [Privacy Policy](https://krea.ai/privacy-policy) and are only applicable to the extent they involve your personally identifiable information."
Explains the purpose of the license grants that follow and incorporates the Privacy Policy by reference, restricting the licenses to the extent they involve personally identifiable information.
AI-generated interpretation, not legal advice.
"The materials displayed or performed or available on or through the Services, including, but not limited to, text, graphics, data, articles, photos, images, illustrations, User Submissions (as defined below) and so forth (all of the foregoing, the “Content”) are protected by copyright and/or other intellectual property laws. You promise to abide by all copyright notices, trademark rules, information, and restrictions contained in any Content you access through the Services, and you won’t use, copy, reproduce, modify, translate, publish, broadcast, transmit, distribute, perform, upload, display, license, sell, commercialize or otherwise exploit for any purpose any Content not owned by you, (i) without the prior consent of the owner of that Content or (ii) in a way that violates someone else’s (including Krea's) rights."
Defines 'Content' as materials available through the Services protected by copyright and other IP laws, and obliges users to abide by all copyright notices, trademark rules, and restrictions contained in any Content they access, restricting unauthorized use, copying, reproduction, and distribution.
AI-generated interpretation, not legal advice.
"Improving the Services, including testing, research, internal analytics and product development."
Permits use of personal data for internal analytics, testing, research, and product development, which may include training-adjacent activities and service improvement functions.
AI-generated interpretation, not legal advice.
"Other Processing Grounds: From time to time we may also need to process Personal Data to comply with a legal obligation, if it is necessary to protect the vital interests of you or other data subjects, or if it is necessary for a task carried out in the public interest."
Identifies additional lawful processing grounds beyond consent and legitimate interest—legal obligation, vital interests, and public interest tasks—creating an obligation framework for processing in those circumstances.
AI-generated interpretation, not legal advice.
"Additionally, you may be able to access certain parts or features of the Services by using your account credentials from other services (each, a “Third Party Account”), such as those offered by Google and Discord. By using the Services through a Third Party Account, you permit us to access certain information from such account for use by the Services. You are ultimately in control of how much information is accessible to us and may exercise such control by adjusting your privacy settings on your Third Party Account."
This segment permits Krea to access information from third-party accounts (e.g., Google, Discord) when users choose to authenticate through them, and grants users control over accessible information via privacy settings on those third-party platforms.
AI-generated interpretation, not legal advice.
"| Device/IP Data such as IP address, device ID, domain server, and type of device/ operating system/ browser used to access the Services. | • Providing, Customizing and Improving the Services<br>• Marketing the Services | • Service Providers<br>• Analytics Partners |"
Defines Device/IP Data as a collected personal data category and maps it to permitted processing purposes (providing services, marketing) and authorized disclosure recipients (service providers, analytics partners).
AI-generated interpretation, not legal advice.
"The Services use cookies and similar technologies such as pixel tags, web beacons, clear GIFs and JavaScript (collectively, “Cookies”) to enable our servers to recognize your web browser, tell us how and when you visit and use our Services, analyze trends, learn about our user base and operate and improve our Services. Cookies are small pieces of data– usually text files – placed on your computer, tablet, phone or similar device when you use that device to access our Services. We may also supplement the information we collect from you with information received from third parties, including third parties that have placed their own Cookies on your device(s)."
Discloses the company's use of cookies and similar tracking technologies for purposes including server recognition, usage analysis, and service improvement, and notes supplementation of collected data with third-party information, describing data collection practices.
AI-generated interpretation, not legal advice.
"Please note that because of our use of Cookies, the Services do not support “Do Not Track” requests sent from a browser at this time."
Disclaims support for 'Do Not Track' browser signals, informing users that such requests will not be honored, limiting users' ability to restrict tracking through browser settings.
AI-generated interpretation, not legal advice.
"We will only process your Personal Data if we have a lawful basis for doing so. Lawful bases for processing include consent, contractual necessity and our “legitimate interests” or the legitimate interest of others, as further described below."
Obligates the company to process Personal Data only where a lawful basis exists under GDPR, enumerating consent, contractual necessity, and legitimate interests as recognized lawful bases.
AI-generated interpretation, not legal advice.
"Performance/Analytical Cookies. Performance/Analytical Cookies allow us to understand how visitors use our Services. They do this by collecting information about the number of visitors to the Services, what pages visitors view on our Services and how long visitors are viewing pages on the Services. Performance/Analytical Cookies also help us measure the performance of our advertising campaigns in order to help us improve our campaigns and the Services’ content for those who engage with our advertising."
Defines 'Performance/Analytical Cookies' as cookies collecting visitor usage data and measuring advertising campaign performance, establishing the purpose and scope of this tracking category.
AI-generated interpretation, not legal advice.
"| Web Analytics such as web page interactions, referring webpage/source through which you accessed the Services, non-identifiable request IDs, and statistics associated with the interaction between device or browser and the Services. | • Providing, Customizing and Improving the Services<br>• Marketing the Services | • Service Providers<br>• Analytics Partners |"
Defines Web Analytics as a collected personal data category and maps it to permitted processing purposes (providing/improving services, marketing) and authorized disclosure recipients (service providers, analytics partners).
AI-generated interpretation, not legal advice.
Common questions about Krea's policies
- Who owns the content you create with Krea?
- You own outputs — with license carve-outs — based on 1 verified finding from Krea's published policy. Informational only, not legal advice.
- Can you use Krea's output commercially?
- Commercial use allowed — with conditions — based on 2 verified findings from Krea's published policy. Informational only, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Krea's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
65 verified clausesClauses in Krea's policies that work in your favour — commitments the platform made to you.
- Privacy & data usechildren's data
“The Children’s Online Privacy Protection Act (“COPPA”) requires that online service providers obtain parental consent before they knowingly collect personally identifiable information online from children who are under 13 years of age. We do not knowingly coll…”
This segment restricts collection of personal information from children under 13, prohibits such children from registering or using the Services, imposes an obligation to delete any such data if discovered, and reference…
📍 Terms of Service › “Children’s Online Privacy Protection Act”Jump to exact text → - Privacy & data use
“If you are a Virginia resident, you have the rights set forth under the Virginia Consumer Data Protection Act (“VCDPA”). Please see the “Exercising Your Rights” section below for instructions regarding how to exercise these rights. Please note that we may proc…”
Describes VCDPA rights available to Virginia residents, directs users to the exercise instructions section, and clarifies that when acting as a service provider, the data controller is the appropriate first contact for r…
📍 Privacy Policy › “Virginia Resident Rights”Jump to exact text → - Privacy & data use
“If you are a Connecticut resident, you have the rights set forth under the Connecticut Data Privacy Act (“CTDPA”). Please see the “Exercising Your Rights” section below for instructions regarding how to exercise these rights. Please note that we may process Pe…”
Incorporates the Connecticut Data Privacy Act (CTDPA) as the legal basis for Connecticut residents' rights, cross-references the 'Exercising Your Rights' section for procedures, and establishes an exception clarifying th…
📍 Privacy Policy › “Connecticut Resident Rights”Jump to exact text → - Privacy & data usesale/sharing of personal data
“If you are a California resident, you have the rights set forth in this section. Please see the “Exercising Your Rights under the State Privacy Laws” section below for instructions regarding how to exercise these rights. Please note that we may process Persona…”
Grants California residents specific privacy rights under state law, provides procedural direction for exercising those rights, clarifies the company's role as a service provider in some contexts, and notes potential exc…
📍 Privacy Policy › “California Resident Rights”Jump to exact text → - Privacy & data use
“To exercise the rights described in this Privacy Policy, you or, if you are a California, Colorado or Connecticut resident, your Authorized Agent (defined below) must send us a request that (1) provides sufficient information to allow us to verify that you are…”
Establishes the procedure and criteria for submitting a Valid Request to exercise state privacy rights, including verification requirements and the definition of a 'Valid Request,' and notes that Authorized Agents may ac…
📍 Privacy Policy › “Exercising Your Rights under the State Privacy Laws”Jump to exact text → - Privacy & data use
“If there are any conflicts between this section and any other provision of this Privacy Policy, the policy or portion that is more protective of Personal Data shall control to the extent of such conflict. If you have any questions about this section or whether…”
Incorporates a conflict-resolution rule prioritizing more protective provisions, provides contact information for GDPR queries, and defines circumstances where Krea acts as a data processor rather than controller, cross-…
- Designated security contact: support@krea.ai
📍 Privacy Policy › “EU and UK Residents”Jump to exact text →
+ 59 more verified clauses of this kind on this platform, cited in full in the report.
📋 Rules you must follow
18 verified clausesWhat Krea requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
- Commercial useconduct restrictions
“The materials displayed or performed or available on or through the Services, including, but not limited to, text, graphics, data, articles, photos, images, illustrations, User Submissions (as defined below) and so forth (all of the foregoing, the “Content”) a…”
Defines 'Content' as materials available through the Services protected by copyright and other IP laws, and obliges users to abide by all copyright notices, trademark rules, and restrictions contained in any Content they…
📍 Terms of Service › “What are my rights in the Services?”Jump to exact text → - Moderation & enforcement
“You agree that you will not post, upload, share, store, or otherwise provide through the Services any User Submissions that: (i) infringe any third party's copyrights or other rights (e.g., trademark, privacy rights, etc.); (ii) contain sexually explicit conte…”
Restricts users from posting User Submissions that infringe third-party rights, contain prohibited content such as explicit material or hate speech, exploit minors, depict unlawful violence, promote fraud, or otherwise v…
📍 Terms of Service › “Your Responsibilities”Jump to exact text → - Moderation & enforcement
“You may be required to sign up for an account, select a password and user name (“Krea Credentials”), and provide us with certain information or data, such as your contact information. You promise to provide us with accurate, complete, and updated registration…”
This segment imposes obligations on users to provide accurate registration information, prohibits use of unauthorized names or impersonation, and restricts account transfer without prior written permission, establishing…
📍 Terms of Service › “What are the basics of using Krea?”Jump to exact text → - Moderation & enforcementconduct restrictions
“runs Maillist, Listserv, any form of auto-responder or “spam” on the Services, or any processes that run or are activated while you are not logged into the Services, or that otherwise interfere with the proper working of the Services (including by placing an u…”
Restricts users from running spam, auto-responders, or processes that interfere with the proper functioning or infrastructure of the Services.
📍 Terms of Service › “Are there restrictions in how I can use the Services?”Jump to exact text → - Moderation & enforcement
“You represent, warrant, and agree that you will not provide, contribute, or generate any Content or User Submission (as those terms are defined below), to the Services, or otherwise use or interact with the Services, in a manner that:”
Imposes a representation, warranty, and agreement on the user not to provide, contribute, generate, or use the Services in prohibited manners, establishing the user's binding commitment to comply with the listed restrict…
📍 Terms of Service › “Are there restrictions in how I can use the Services?”Jump to exact text →
+ 13 more verified clauses of this kind on this platform, cited in full in the report.
What the policies actually cover
14 topics- Product telemetry & usage tracking1 protective16 clauses
- Advertising & tracking4 protective11 clauses
- Sale or sharing of personal data11 protective16 clauses
- Sensitive data (biometric, location, health)2 protective2 clauses
- Children's data2 protective2 clauses
- Government & law-enforcement disclosure1 clause
- Arbitration & class-action waiver3 protective7 clauses
- Damages & liability cap1 clause
- Indemnity direction1 clause
- Terms can change at any time2 protective2 clauses
- Deletion rights & post-termination survival3 protective5 clauses
- Auto-renewal & cancel window7 clauses
- Breach-notification promises1 clause
- Conduct restrictions7 obligations7 clauses
137 further verified clauses are cited on this page but not yet assigned a topic.
Cross-clause notes
The Terms of Service, Terms of Service › “What are my rights in the Services?” describes rights the platform takes in user content, and the Privacy Policy, Privacy Policy › “Advertising Partners” describes disclosure of data to third parties or subprocessors. Both clauses are in force at the same time — read them together.
Automated cross-reference against the published rubric — not legal advice.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause allows indefinite, perpetual, or necessity-based retention.
“We retain Personal Data about you for as long as necessary to provide you with our Services or to perform our business or commercial purposes for collecting your Personal Data. When establishing a retention period for specific categories of data, we consider who we collected the data from, our need for the Personal Data, why we collected the Personal Data, and the sensitivity of the Personal Data. In some cases we...”Open source citation
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“(e) Waiver of Class or Consolidated Actions. ALL CLAIMS AND DISPUTES WITHIN THE SCOPE OF THIS ARBITRATION AGREEMENT MUST BE ARBITRATED OR LITIGATED ON AN INDIVIDUAL BASIS AND NOT ON A CLASS BASIS. CLAIMS OF MORE THAN ONE CUSTOMER OR USER CANNOT BE ARBITRATED OR LITIGATED JOINTLY OR CONSOLIDATED WITH THOSE OF ANY OTHER CUSTOMER OR USER. If however, this waiver of class or consolidated actions is deemed invalid or u...”Open source citation
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“Arbitration Agreement. Please read the following ARBITRATION AGREEMENT carefully because it requires you to arbitrate certain disputes and claims with Krea and limits the manner in which you can seek relief from Krea. Both you and Krea acknowledge and agree that for the purposes of any dispute arising out of or relating to the subject matter of these Terms, Krea's officers, directors, employees and independent con...”Open source citation
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“(b) Costs of Arbitration. The Rules will govern payment of all arbitration fees. Krea will pay all arbitration fees for claims less than seventy-five thousand ($75,000) dollars. Krea will not seek its attorneys’ fees and costs in arbitration unless the arbitrator determines that your claim is frivolous.”Open source citation
The clause imposes arbitration, class-action waiver, or jury-trial waiver terms.
“Except as expressly set forth in the section above regarding the arbitration agreement, you and Krea agree there are no third-party beneficiaries intended under these Terms.”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | governing law disputes | conditional | MEDIUM | 20 |
| All applicable tiers | moderation enforcement | worsens | HIGH | 4 |
| All applicable tiers | output ownership | worsens | HIGH | 2 |
| All applicable tiers | privacy data use | worsens | HIGH | 4 |
| All applicable tiers | subprocessors data sharing | worsens | HIGH | 6 |
| Free | indemnity liability | conditional | MEDIUM | 2 |
| Free | subprocessors data sharing | worsens | HIGH | 4 |
| Free | training use | worsens | HIGH | 2 |
| Pro / Paid | privacy data use | worsens | HIGH | 2 |
| Pro / Paid | subprocessors data sharing | worsens | HIGH | 1 |
| Team / Business | data retention | conditional | MEDIUM | 1 |
| Team / Business | indemnity liability | conditional | MEDIUM | 2 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
data sharing improved from high/sale or sell to medium/third party or vendor sharing.
“We do not currently sell or process for the purposes of targeted advertising your Personal Data as defined under the CPA.”Before citation
“You agree that you will not post, upload, share, store, or otherwise provide through the Services any User Submissions that: (i) infringe any third party's copyrights or other rights (e.g., trademark, privacy rights, etc.); (ii) contain sexually explicit content or pornography; (iii) contain hateful, defamatory, or discriminatory content or incite hatred against any individual or group; (iv) exploit minors; (v) depict unlawful acts or extreme violence; (vi) depict animal cruelty or extreme violence towards animals; (vii) promote fraudulent schemes, multi-level marketing (MLM) schemes, get rich quick schemes, online gaming and gambling, cash gifting, work from home businesses, or any other dubious money-making ventures; or (viii) that violate any law.”After citation
data sharing worsened from medium/third party or vendor sharing to high/sale or sell.
“Certain features of the Services allow you to share information with others, including through your social networks or other Third Party Accounts. When Content is authorized for sharing, we will clearly identify the Content you are authorized to redistribute and the ways you may redistribute it, usually by providing a “share” button on or near the Content. If you share information from the Services with others through your Third Party Accounts, such as your social networks, you authorize Krea to share that information with the applicable Third Party Account provider. Please review the policies of any Third Party Account providers you share information with or through for additional information about how they may use your information. If you redistribute Content, you must be able to edit or delete any Content you redistribute, and you must edit or delete it promptly upon our request.”Before citation
“We do not currently sell or process for the purposes of targeted advertising your Personal Data as defined under the CPA.”After citation
data sharing worsened from medium/third party or vendor sharing to high/sale or sell.
“The Children’s Online Privacy Protection Act (“COPPA”) requires that online service providers obtain parental consent before they knowingly collect personally identifiable information online from children who are under 13 years of age. We do not knowingly collect or solicit personally identifiable information from children under 13 years of age; if you are a child under 13 years of age, please do not attempt to register for or otherwise use the Services or send us any personal information. If we learn we have collected personal information from a child under 13 years of age, we will delete that information as quickly as possible. If you believe that a child under 13 years of age may have provided us personal information, please contact us at support@krea.ai.”Before citation
“You have the right to opt-out to the sale of your Personal Data. We do not currently sell your Personal Data as defined under the VDCPA.”After citation
Latest stance: liability limited on indemnity liability
“Warranty Disclaimer. Krea and its licensors, suppliers, partners, parent, subsidiaries or affiliated entities, and each of their respective officers, directors, members, employees, consultants, contract employees, representatives and agents, and each of their respective successors and assigns (Krea and all such parties together, the “Krea Parties”) make no representations or warranties concerning the Services, including without limitation regarding any Content contained in or accessed through the Services, and the Krea Parties will not be responsible or liable for the accuracy, copyright compliance, legality, or decency of material contained in or accessed through the Services or any claims, actions, suits procedures, costs, expenses, damages or liabilities arising out of use of, or in any way related to your participation in, the Services. The Krea Parties make no representations or warranties regarding suggestions or recommendations of services or products offered or purchased through or in connection with the Services. THE SERVICES AND CONTENT ARE PROVIDED BY KREA (AND ITS LICENSORS AND SUPPLIERS) ON AN “AS-IS” BASIS, WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, WITHOUT LIMITATION, IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, OR THAT USE OF THE SERVICES WILL BE UNINTERRUPTED OR ERROR-FREE. SOME STATES DO NOT ALLOW LIMITATIONS ON HOW LONG AN IMPLIED WARRANTY LASTS, SO THE ABOVE LIMITATIONS MAY NOT APPLY TO YOU.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“You agree that you will not post, upload, share, store, or otherwise provide through the Services any User Submissions that: (i) infringe any third party's copyrights or other rights (e.g., trademark, privacy rights, etc.); (ii) contain sexually explicit content or pornography; (iii) contain hateful, defamatory, or discriminatory content or incite hatred against any individual or group; (iv) exploit minors; (v) depict unlawful acts or extreme violence; (vi) depict animal cruelty or extreme violence towards animals; (vii) promote fraudulent schemes, multi-level marketing (MLM) schemes, get rich quick schemes, online gaming and gambling, cash gifting, work from home businesses, or any other dubious money-making ventures; or (viii) that violate any law.”Open timeline citation
Latest stance: arbitration or waiver on governing law disputes
“(d) Waiver of Jury Trial. YOU AND KREA WAIVE ANY CONSTITUTIONAL AND STATUTORY RIGHTS TO GO TO COURT AND HAVE A TRIAL IN FRONT OF A JUDGE OR JURY. You and Krea are instead choosing to have claims and disputes resolved by arbitration. Arbitration procedures are typically more limited, more efficient, and less costly than rules applicable in court and are subject to very limited review by a court. In any litigation between you and Krea over whether to vacate or enforce an arbitration award, YOU AND KREA WAIVE ALL RIGHTS TO A JURY TRIAL, and elect instead to have the dispute be resolved by a judge.”Open timeline citation
Latest stance: arbitration or waiver on governing law disputes
“Except as expressly set forth in the section above regarding the arbitration agreement, you and Krea agree there are no third-party beneficiaries intended under these Terms.”Open timeline citation
Capture recency
- Terms of Service:Last captured 2026-07-03· verified 2026-07-03
- Privacy Policy:Last captured 2026-06-08· verified 2026-06-08verified once — no re-scan in 94 days
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
↑ 109 more findings this quarter vs last (383 vs 274). First scan: June 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Krea's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Every finding above is a verbatim quote from Krea's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.