Draftpie

1. Introduction

This Privacy Policy describes how we collect, use, and protect your personal information when you use our AI image generation service ("Service"). By using the Service, you consent to the practices described in this policy.

2. Information We Collect

We collect the following types of information:

Account Information: Email address, name, and profile picture provided through Google OAuth authentication.
Usage Data: Prompts submitted, images generated, features used, and interaction patterns with the Service.
Payment Information: Payment details are processed by Stripe. We store transaction records and subscription status but do not store full payment card details.
Technical Data: IP address, browser type, device information, and cookies for session management and analytics.
Generated Content: Images you create and associated metadata stored on our servers.

3. How We Use Your Information

We use your information to:

Provide, maintain, and improve the Service
Process transactions and manage your account
Send service-related communications
Monitor and analyze usage patterns
Detect and prevent fraud, abuse, and security issues
Comply with legal obligations
Train and improve our AI systems using anonymized data

4. Data Sharing

We may share your information with:

Service Providers: Third-party services that help us operate the Service, including cloud hosting (Supabase), payment processing (Stripe), and AI model providers.
Legal Requirements: When required by law, court order, or government request.
Business Transfers: In connection with a merger, acquisition, or sale of assets.
With Your Consent: When you explicitly authorize sharing.

We do not sell your personal information to third parties for marketing purposes.

5. Data Storage and Security

Your data is stored on secure servers provided by Supabase. We implement industry-standard security measures including encryption in transit and at rest, access controls, and regular security audits. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your account information and generated content for as long as your account is active. Upon account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required for legal purposes. Transaction records may be retained for up to 7 years for tax and accounting purposes.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access your personal data
Correct inaccurate data
Delete your data ("right to be forgotten")
Export your data in a portable format
Object to certain processing activities
Withdraw consent where processing is based on consent

To exercise these rights, please contact us through the Service.

8. Cookies and Tracking

We use essential cookies for authentication and session management. We may use analytics tools to understand how users interact with the Service. You can control cookie settings through your browser, but disabling essential cookies may affect Service functionality.

9. Third-Party Services

Our Service integrates with third-party services including Google (authentication), Stripe (payments), and AI model providers. These services have their own privacy policies, and we encourage you to review them. We are not responsible for the privacy practices of third-party services.

10. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete that information.

11. International Data Transfers

Your data may be transferred to and processed in countries other than your own. By using the Service, you consent to such transfers. We ensure appropriate safeguards are in place for international data transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on the Service and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us through the Service.