Privacy policy
Last updated: 17 August 2026
Who we are
Kre8AI is a product of SynrgiseLearn, a South African learning technology company. For the purposes of the Protection of Personal Information Act, 2013 (POPIA), SynrgiseLearn is the responsible party for personal information collected through this website and through Kre8AI account signup.
Our Information Officer is Xenothan Hojem. For privacy requests, use the contact form (topic: Privacy / POPIA), or write to us through the contact options published on synrgise.com. We do not publish a raw mailbox on this page to reduce automated abuse; a human still receives the request.
What this policy covers
This policy covers personal information we collect on the marketing website (kre8ai.xyz), through lead forms, consented analytics, and during self-serve trial signup for Kre8AI.
Documents, media and course content you upload into the product are customer content. We process that content as an operator on your instruction to provide the service. Our security page describes tenant isolation and how we handle that content. Your customer agreement (or trial terms) governs product data beyond what this policy states.
What we collect through this website
When you submit a form on this site, we collect the information you enter: your name, work email address, organisation, role, team size, the LMS you use, and anything you write in the message field.
We also record how you reached us: the page you submitted the form from, the referring website, and any campaign parameters in the link you followed. This tells us which of our activities are useful and which are wasted.
We store the exact wording of the consent statement you agreed to and the time you agreed to it, so that we can produce it if you ask us what you consented to.
What we collect when you create a Kre8AI account
If you start a trial or create an account, we collect the account details you provide (such as name, work email and authentication credentials or tokens), organisation membership, plan selection, billing-related identifiers needed to confirm a payment method, and product usage data needed to operate the service (for example login events, credit consumption and audit events).
We may also process technical logs (IP address, device or browser metadata, timestamps) for security, abuse prevention and troubleshooting. We use those logs to protect the service, not to build advertising profiles.
Analytics and cookies
No analytics or advertising cookie is set until you accept them in the banner. If you decline, nothing is loaded and the site works exactly the same. You can change your mind by clearing this site’s data in your browser, which makes the banner appear again.
When you accept, we may load Google Analytics, the LinkedIn Insight Tag and the Google Ads tag. Each of these sets its own cookies and receives your IP address. You can refuse those tags without losing access to the site.
What we do with it
We use personal information to:
- reply to enquiries and run pilots or sales conversations you asked for;
- create and operate your Kre8AI account and organisation;
- process trial activation, billing setup and plan changes;
- secure the service, prevent abuse and investigate incidents;
- improve the product and website using aggregated or de-identified signals where practicable; and
- meet legal, accounting and regulatory obligations.
We do not sell or rent your personal information. We do not add you to a marketing newsletter unless you ask for one. We do not use your uploaded course source documents to market to other customers.
Lawful bases
Depending on the activity, we rely on:
- Consent — for form submissions where you tick the consent statement, and for optional analytics or advertising cookies;
- Contract — to create your account, provide the trial or paid service, and support you;
- Legitimate interests — to secure the service, prevent fraud and abuse, and understand which marketing channels work, balanced against your rights; and
- Legal obligation — where we must retain or disclose information under South African law.
Who we share it with
We use service providers to host infrastructure, send transactional email, process payments, and operate Kre8AI. Website analytics only run if you accept cookies.
We may disclose personal information if required by law, to protect rights and safety, or in connection with a corporate transaction involving SynrgiseLearn, under appropriate safeguards.
How long we keep it
Marketing enquiry records (including consent text and timestamp) are kept for up to 24 months after your last interaction about that enquiry, unless a longer period is needed for an active opportunity, a legal claim, or a record we must retain. You may ask us to delete sooner where POPIA allows.
Account and billing records are kept for the life of the account and for a further period required for tax, accounting and dispute purposes after closure. Product content retention and deletion are described on the security page and in your customer agreement.
Security and abuse-prevention logs are kept only as long as needed for investigation and service protection, then deleted or aggregated.
Security
SynrgiseLearn maintains an Information Security Management System and is ISO 27001 certified. Practical controls for Kre8AI — tenant isolation, retention and incident handling — are summarised on the security page.
Your rights
Under POPIA you may ask us what personal information we hold about you, ask us to correct it, object to us processing it for certain purposes, withdraw consent where processing is consent-based, or ask us to delete it where no overriding lawful basis remains. You may also complain to the Information Regulator (South Africa).
Send privacy requests through the contact form. We aim to respond within 30 days. If we need more time because the request is complex, we will say so. We may ask for enough information to verify that the request is from you or someone authorised to act for you — not to obstruct you, but to stop someone else abusing access or deletion rights against your account.
Information Regulator contact details are published at inforegulator.org.za.
Children
Kre8AI and this website are directed at organisations and working adults. We do not knowingly collect personal information from children for marketing or account creation.
Changes
We may update this policy. The “Last updated” date at the top will change when we do. Material changes that affect how we use personal information already collected will be communicated in a reasonable way for the channel (for example a notice on this page or an email to account holders).