Privacy Policy

Last updated: [DATE] — [Your Company Legal Name]

1. What we collect

Account data: email, password (hashed, never stored in plain text)
Payment data: handled by Stripe — we do not store full card numbers
Usage data: prompts, generated content, credit/generation history
Uploaded reference images (for characters/products)

2. How we use it

To provide the Service, process payments, prevent fraud/trial abuse, and improve the platform. We do not sell personal data to third parties.

3. Third parties we share data with

AI generation providers (to process your prompts), Stripe (payments), [hosting provider]. [LAWYER: list every actual sub-processor once finalized, per UAE/Bangladesh disclosure requirements.]

LAWYER: confirm whether UAE PDPL and/or Bangladesh's data protection framework require a specific sub-processor list, data localization, or a Data Protection Officer designation for a business this size.

4. Data retention

[LAWYER: define exact retention periods for account data, generated content, and payment records — this varies by requirement in each jurisdiction.]

5. User rights

Users may request access to, correction of, or deletion of their personal data by contacting [support email]. [LAWYER: confirm exact rights owed under applicable law — may include a formal request process and response deadline.]

6. Security

Passwords are hashed; provider API keys are encrypted at rest; payments are processed by Stripe, not stored on our servers.

7. Children

The Service is not directed at children under 18. [LAWYER: confirm the exact minimum age requirement for each jurisdiction you operate in.]

8. Contact

[Your support email / registered business address]