Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

Account Information:

• Email address
• Name (optional)
• Password (encrypted)

Payment Information:

• Payment details are processed by our third-party payment processor (Stripe)
• We do not store complete credit card numbers on our servers

Content You Upload:

• Vehicle images you submit for processing
• Any metadata contained in those images

Communications:

• Emails or messages you send to our support team
• Feedback and survey responses

1.2 Automatically Collected Information

Device and Usage Information:

• IP address
• Browser type and version
• Operating system
• Device type
• Pages visited and features used
• Time and date of visits
• Referring website addresses

Cookies and Similar Technologies:

• Session cookies (essential for service functionality)
• Analytics cookies (to understand service usage)
• Preference cookies (to store your settings)

1.3 Information from Third Parties

• Payment confirmation from payment processors
• Analytics data from service providers

2. How We Use Your Information

We use the information we collect to:

2.1 Provide and Improve the Service

• Process your uploaded images
• Deliver transformed/generated images to you
• Process payments and manage your account
• Provide customer support
• Improve and optimize the service

2.2 Communication

• Send transactional emails (order confirmations, receipts)
• Respond to your inquiries and support requests
• Send service-related announcements
• Send marketing communications with your consent

2.3 Security and Legal Compliance

• Detect, prevent, and address fraud or abuse
• Comply with legal obligations
• Enforce our Terms of Service
• Protect our rights and the rights of others

2.4 Analytics and Research

• Analyze usage patterns to improve the service
• Conduct research and development
• Create aggregated, anonymized statistics

3. Image Data Processing

3.1 How We Process Your Images

• Images are uploaded to secure servers for AI processing
• Images are processed using AI/machine learning
• Processed images are made available for download

3.2 Image Retention

• Uploaded images are retained for a limited period to enable service delivery and potential reprocessing
• Standard retention period: 30 days after processing
• You can request earlier deletion of your images

3.3 What We Do NOT Do with Your Images

• We do NOT use your images to train AI models
• We do NOT sell your images to third parties
• We do NOT share your images publicly
• We do NOT use your images for purposes other than providing the service

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we process your personal data on the following legal bases:

5. Information Sharing and Disclosure

We do NOT sell your personal data. We may share your information only under the following circumstances:

5.1 Service Providers

We share information with third-party providers who perform services on our behalf:

• Payment processing: Stripe
• Cloud hosting: Vercel
• Analytics: Google Analytics (anonymized)

These providers are contractually obligated to protect your information and use it only for the services they provide.

5.2 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request, including:

• To comply with a subpoena or court order
• To cooperate with law enforcement
• To protect our legal rights or defend against legal claims

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such changes.

5.4 With Your Consent

We may share your information for other purposes with your explicit consent.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (TLS/SSL)
• Encryption of sensitive data at rest
• Regular security assessments
• Access controls and authentication
• Secure data centers

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee its absolute security.

7. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected:

You can request earlier deletion of your data (see Section 8).

8. Your Privacy Rights

8.1 Rights for All Users

Regardless of your location, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Opt out of marketing communications

8.2 Additional Rights (EEA, UK, Switzerland - GDPR/FADP)

If you are in the European Economic Area, United Kingdom, or Switzerland, you additionally have the right to:

• Data portability: Receive your data in a structured, machine-readable format
• Restriction of processing: Request that we limit the use of your data
• Object to processing: Object to processing based on legitimate interests
• Withdraw consent: Withdraw your consent at any time (if processing is based on consent)
• File a complaint: File a complaint with your local data protection authority

8.3 Exercising Your Rights

To exercise any of these rights, contact us at:

• Email: privacy@ai-car-studio.com
• Subject: "Privacy Rights Request"

We will respond to your request within 30 days (or sooner if required by law).

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.

For transfers from the EEA, United Kingdom, or Switzerland to countries without adequate data protection levels:

• We use Standard Contractual Clauses approved by the European Commission
• We ensure appropriate safeguards are in place

10. Cookies and Tracking Technologies

10.1 Types of Cookies We Use

10.2 Managing Cookies

You can control cookies through your browser settings:

• Most browsers allow you to reject or delete cookies
• Blocking essential cookies may affect service functionality

10.3 Do Not Track

We currently do not respond to "Do Not Track" browser signals as there is no industry standard for this feature.

11. Third-Party Links

Our service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

12. Children's Privacy

The service is not intended for persons under 16 years of age (or the applicable age for digital consent in your jurisdiction). We do not knowingly collect personal data from children.

If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information.

If you believe we have collected information from a child, please contact us at: privacy@ai-car-studio.com

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

For material changes, we will provide a more prominent notice (e.g., an email notification).

Your continued use of the service after changes take effect constitutes acceptance of the updated Privacy Policy.

14. Contact

For questions or concerns about this Privacy Policy or our data practices, please contact us:

AI Car Studio

Privacy Inquiries:
Email: privacy@ai-car-studio.com

General Inquiries:
Email: support@ai-car-studio.com

15. Supervisory Authority

If you are in the EEA or United Kingdom and believe we have not adequately addressed your concerns, you have the right to file a complaint with your local data protection supervisory authority.

For Swiss residents: Federal Data Protection and Information Commissioner (FDPIC)