Privacy Policy

1. Introduction

This Privacy Policy explains how Posterlet ("we" or "the Service") collects, uses, and protects your personal information when you use our AI-powered image generation service and related features.

2. Types of Data We Handle

• Account information: name, email address, and authentication data (Google OAuth tokens when applicable).
• Usage data: prompts submitted to the AI, generated images, credit consumption, and feature usage patterns.
• Device information: IP address, browser type, and device identifiers for security and analytics.

Payment information: We do not collect or store payment card data. Payment card data is processed by our payment processor and is never stored on our servers.

3. How We Use Your Data

We use your information to:

• Provide and improve our AI image generation services.
• Process transactions and manage subscriptions and credits.
• Send communications about your account, billing, and service updates.
• Enforce our Acceptable Use Policy through content moderation.
• Analyze usage patterns for service improvements and abuse prevention.

4. Data Sharing

We do not sell your personal information. We may share your data with:

• AI model providers: Prompts are sent to third-party AI providers to generate outputs. These providers process data under their own privacy policies.
• Payment processor: Payment card data is handled by our payment processor.
• Cloud storage: Generated images are stored on encrypted cloud storage.
• Service providers: Email delivery, analytics, and infrastructure providers who assist us in operating the service.
• Law enforcement: As required by law, particularly for content involving child safety or terrorism.

5. Data Security

We implement industry-standard security measures to protect your information. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

• Account data: Retained for 90 days following account cancellation, then deleted.
• Generated images: Retained as long as your account is active. Public images may be retained after account deletion. Private images are deleted upon account deletion.
• Billing records: Retained as required by law for financial record-keeping.
• Moderation logs: Retained for abuse prevention and legal compliance for up to 2 years.

7. Your Rights

You have the right to:

• Access, correct, or delete your personal information through your account settings.
• Export your generated images and account data.
• Opt out of non-essential communications.
• Request deletion of your account and associated data.
• Where applicable under GDPR/CCPA: right to restrict processing, right to data portability, right to object to processing.

8. Cookies and Tracking

We use cookies and similar technologies to improve your experience, maintain session state, and assist in analytics.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We take appropriate safeguards to protect your information in accordance with this Privacy Policy and applicable data protection laws.

10. Changes to This Policy

We may update this Privacy Policy at any time. Continued use constitutes acceptance.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at [email protected].