Privacy Policy

Last Updated: January 14, 2026

At {{BRAND_NAME}}, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

1. Information We Collect

1.1 Information You Provide

We collect information you voluntarily provide when you:

• Create an account: Name, email address, password
• Make a payment: Billing information (processed securely by Stripe)
• Use our service: Content you upload, preferences you set
• Contact us: Messages, support requests

1.2 Information Collected Automatically

When you use our service, we automatically collect:

• Device information: IP address, browser type, operating system
• Usage data: Pages visited, features used, time spent
• Cookies: Small files stored on your device (see Cookie Policy below)

1.3 Content You Upload

Depending on our service, you may upload photos, text, or other content. We process this content to provide our AI-powered features.

2. How We Use Your Information

Purpose	Legal Basis (GDPR)
Provide and maintain the service	Contract Performance
Process payments	Contract Performance
Send service updates and notifications	Legitimate Interest
Improve our service and develop new features	Legitimate Interest
Prevent fraud and abuse	Legitimate Interest / Legal Obligation
Marketing (with your consent)	Consent

3. How We Share Your Information

We do not sell your personal information. We may share your data with:

3.1 Service Providers

• Payment processors: Stripe (for payment processing)
• Cloud hosting: AWS, Google Cloud, or similar (for data storage)
• Analytics: Google Analytics (anonymized data)
• Email service: SendGrid, Mailgun, or similar

3.2 Legal Requirements

We may disclose your information if required by law, court order, or to:

• Comply with legal obligations
• Protect our rights and property
• Prevent fraud or security issues
• Protect the safety of users or the public

3.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data is transferred.

4. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: SSL/TLS for data in transit, AES-256 for data at rest
• Access controls: Limited employee access on a need-to-know basis
• Regular audits: Security assessments and vulnerability testing
• Secure infrastructure: Firewalls, intrusion detection, monitoring

5. Data Retention

We retain your data for as long as necessary to provide our service:

• Account data: Until you delete your account
• Usage logs: 90 days
• Uploaded content: Until you delete it or your account is closed
• Payment records: 7 years (legal requirement)

6. Your Rights (GDPR)

If you are in the European Economic Area, you have these rights:

6.1 Access

Request a copy of your personal data

6.2 Rectification

Correct inaccurate or incomplete data

6.3 Erasure

Request deletion of your data ("right to be forgotten")

6.4 Data Portability

Receive your data in a machine-readable format

6.5 Restriction

Limit how we process your data

6.6 Objection

Object to processing based on legitimate interests

6.7 Withdraw Consent

Withdraw consent for marketing or other optional processing

To exercise your rights, contact us at privacy@{{DOMAIN}}. We will respond within 30 days.

7. Cookies and Tracking

We use cookies and similar technologies:

Type	Purpose	Duration
Essential	Login, security, site functionality	Session / 1 year
Analytics	Understand usage, improve service	2 years
Preferences	Remember your settings	1 year
Marketing	Targeted ads (with consent)	1 year

You can control cookies through your browser settings. Note that disabling cookies may limit functionality.

8. Children's Privacy

Our service is not intended for children under 18. We do not knowingly collect data from children. If you believe we have collected data from a child, contact us immediately and we will delete it.

9. International Data Transfers

Your data may be processed in countries outside your residence. We ensure adequate protection through:

• EU Standard Contractual Clauses
• Privacy Shield certification (where applicable)
• Other approved transfer mechanisms

10. Third-Party Links

Our service may contain links to third-party websites. We are not responsible for their privacy practices. We encourage you to read their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the new policy on this page
• Updating the "Last Updated" date
• Sending you an email notification (for significant changes)

12. Contact Us

13. Complaints

If you are in the EU and have a complaint about how we handle your data, you have the right to lodge a complaint with your local data protection authority.

14. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights:

• Right to Know: What personal information we collect and how we use it
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of sale of personal information (we don't sell data)
• Right to Non-Discrimination: Equal service regardless of privacy choices

To exercise these rights, email ccpa@{{DOMAIN}}