Acceptable Use Policy

1. Permitted Uses

You may use Creofy to:

• Create and manage AI-generated synthetic influencer personas that you have originated and control.
• Generate images, videos, and audio for legitimate commercial or creative purposes, including branded content, advertising, and social media.
• Produce content featuring real individuals where you have their explicit, documented consent and the content is lawful in the relevant jurisdiction.
• Build and manage campaigns, brand deal pipelines, and publishing workflows for yourself or clients (Agency plan).
• Experiment with AI tools for legitimate research, education, or personal creative projects.

2. Absolutely Prohibited Content

The following content is prohibited without exception. We will remove it immediately, terminate the responsible account, and report to law enforcement or relevant authorities where required:

Child Sexual Abuse Material (CSAM)

You must never generate, upload, distribute, or store any sexual content depicting a minor (anyone under 18) — whether real or AI-generated. AI-generated CSAM is illegal in the UK (Protection of Children Act 1978, as amended), the US (PROTECT Act), the EU, and most jurisdictions globally. We report all known or suspected CSAM to the National Center for Missing & Exploited Children (NCMEC) in the US, the Internet Watch Foundation (IWF) in the UK, and relevant national authorities.

Non-Consensual Intimate Imagery (NCII)

Generating, distributing, or facilitating the distribution of sexual or intimate images of a real person without their explicit consent ("deepfake pornography") is prohibited. This is a criminal offence in the United Kingdom under the Online Safety Act 2023, illegal in numerous US states, and prohibited under the EU Digital Services Act. We will remove such content, terminate the account, and report to relevant authorities.

Terrorism and Violent Extremism

You may not generate content that promotes, incites, glorifies, or facilitates terrorism, genocide, or mass violence — including content that recruits for terrorist organisations or promotes their ideology.

Content Targeting Minors Sexually

Any content designed to groom, exploit, or solicit sexual activity from a minor is prohibited and will be reported to law enforcement immediately.

3. Prohibited Conduct

You must not use Creofy to:

Impersonation and Fraud

• Generate content impersonating a real, identifiable person in a way that could deceive or mislead others about the source or endorsement of that content.
• Create synthetic media of politicians, public officials, or candidates designed to deceive voters or interfere with elections.
• Generate fake testimonials, reviews, or endorsements attributed to real people.
• Use AI-generated content to commit fraud, phishing, or financial deception.

Harassment and Hate

• Create content designed to harass, bully, threaten, or intimidate a specific individual or group.
• Generate content that promotes hatred against people based on race, ethnicity, national origin, religion, gender, sexual orientation, disability, or other protected characteristics.
• Produce content that dehumanises individuals or groups.

Disinformation and Manipulated Media

• Generate synthetic media designed to deceive the public about real-world events ("deepfake news").
• Create content that falsely depicts a real person saying or doing something they did not say or do, in a context designed to mislead.
• Use Creofy to produce coordinated inauthentic behaviour — fake personas operating networks of fake accounts.

Spam and Unsolicited Communications

• Use Creofy to generate high-volume unsolicited commercial communications (spam).
• Automate the generation of content for mass distribution without platform consent.

Intellectual Property Violations

• Upload content you do not have the right to use as input (e.g., copyrighted images without a licence).
• Generate content that closely replicates a specific, identifiable copyrighted work.
• Use a real person's name, likeness, voice, or signature as a commercial asset without their authorisation.

Illegal Activity

• Use Creofy in furtherance of any activity that is illegal under applicable law, including money laundering, drug trafficking, or organised crime.
• Attempt to circumvent export control laws or sanctions.

4. Biometric Data Rules

Certain features of Creofy (such as face-referenced image generation and voice cloning) involve the processing of biometric data. Biometric data receives heightened legal protection in multiple jurisdictions:

Illinois (BIPA)

If you are subject to the Illinois Biometric Information Privacy Act (BIPA), or if any individual whose biometric data you process is located in Illinois, you must:

• Obtain a written release (informed consent) from each individual before collecting or using their biometric identifier (face geometry, voiceprint).
• Maintain a publicly available written retention and destruction policy for biometric data.
• Not sell, lease, trade, or profit from biometric data.

BIPA carries a private right of action: individuals may sue for statutory damages of $1,000–$5,000 per violation. By using Creofy's biometric features, you represent that you have obtained all necessary consents.

Other US States

Texas (CUBI), Washington (My Health MY Data Act for some biometric uses), and other states have enacted biometric privacy laws. You are responsible for complying with the laws of the jurisdictions in which you operate.

UK and EU (GDPR / UK GDPR)

Biometric data is Special Category data under Article 9 of the UK GDPR and GDPR. Processing requires one of the explicit Article 9 conditions — typically explicit consent of the data subject. If you use Creofy to process the biometric data of EU or UK individuals, you must identify a valid lawful basis and comply with applicable data protection obligations.

Your Obligations

By using any Creofy feature that processes biometric identifiers, you represent and warrant that:

• You have obtained all legally required consents from individuals whose biometric data is processed.
• You will not use biometric features to process data of individuals who have not consented.
• You will honour deletion requests and not retain biometric data beyond the consented purpose.

5. Synthetic Persons and Real Likenesses

Synthetic Personas (Permitted)

You may create and use entirely synthetic personas — AI-generated characters with no real-world counterpart — for commercial, creative, or brand purposes. A "synthetic persona" means one you have originated from scratch using Creofy, not one based on or designed to resemble a specific real person.

Using Real Person Likenesses

You may only use a real, identifiable person's likeness, voice, or image if:

• You have that person's explicit, informed, and documented written consent for the specific use case.
• The content does not portray them in a false, defamatory, or misleading way.
• The content complies with applicable right-of-publicity, portrait rights, and data protection laws in the relevant jurisdiction.
• Any paid partnership or branded content involving a real person meets applicable advertising disclosure laws (FTC guidelines in the US, CAP/BCAP in the UK, EU UCPD).

Lookalikes and Implied Identity

You must not deliberately create a synthetic persona that is designed to closely resemble a specific real person in a way that could mislead audiences about that person's identity, endorsement, or affiliation — even if the persona is not an exact replica.

Voice Cloning

Voice cloning is only permitted for voices you own, voices for which you hold a valid licence, or voices for which you have explicit written consent from the voice owner. Cloning the voice of a real person without their consent is prohibited and may constitute a criminal offence in some jurisdictions (including under the UK Online Safety Act 2023 and US state laws).

6. AI Content Disclosure Obligations

When distributing AI-generated content, you are responsible for complying with applicable disclosure requirements:

• EU AI Act (Article 50) — from 2 August 2026:Content that constitutes a "deep fake" (AI-generated or manipulated images, audio, or video of existing persons, places, or events that would falsely appear authentic) must be labelled as artificially generated or manipulated in a clear and distinguishable manner.
• FTC (United States):Advertising and influencer content must clearly disclose material connections and AI-generated nature where relevant. The FTC's Endorsement Guides apply to AI-generated influencer posts.
• UK ASA / CAP: Advertising that is materially misleading because the AI-generated nature is not disclosed may breach the CAP Code.
• Platform terms: Instagram, TikTok, YouTube, and most major platforms require disclosure of AI-generated realistic content. Failing to disclose on-platform may result in content removal or account action by the platform — not Creofy.

Creofy supports these obligations by embedding metadata in generated outputs where technically feasible, but you remain solely responsible for ensuring your content carries all disclosures required by the laws and platform policies applicable to your distribution channels.

7. Agency and Workspace Use

If you are an agency or workspace administrator, you are responsible for ensuring that all members of your workspace comply with this AUP. Violations by workspace members are attributed to the workspace account. Agency customers who use Creofy to produce content on behalf of clients must ensure that client-instructed content does not violate this policy — you cannot use "client instructions" as a defence for AUP violations.

8. Enforcement

We reserve the right, but have no obligation (except where required by law), to monitor content generated on Creofy. When we identify or receive notice of a violation, we may take one or more of the following steps:

• Remove or disable access to the violating content.
• Suspend or terminate the account responsible.
• Restrict access to specific features (e.g., biometric or voice-cloning tools).
• Preserve and disclose content to law enforcement or other authorities where legally required or permitted.
• Report content to the relevant national authority (NCMEC, IWF, or equivalent) in cases involving CSAM or NCII.

We will use reasonable judgment in applying these measures. We are not required to give advance notice before removing content or suspending an account where delay would cause harm or where the violation is of the absolutely prohibited category (Section 2).

9. Reporting Violations

If you encounter content on Creofy that you believe violates this policy, please report it to support@creofy.io with the subject line AUP Report. Include the URL or description of the content and the nature of the concern. We take all reports seriously and aim to respond within 2 business days.

If you believe content constitutes an immediate risk of harm or a criminal offence, please also report it directly to your local law enforcement or relevant authority (in the UK: the Internet Watch Foundation or CEOP; in the US: NCMEC CyberTipline).

10. Changes to This Policy

We may update this AUP from time to time as our platform, applicable laws, and industry standards evolve. Material changes will be notified via email or in-app notice. Continued use of Creofy after the effective date of a revised AUP constitutes acceptance of the new terms.

11. Contact

Questions about this policy: support@creofy.io. For business or partnership enquiries: hello@creofy.io.