Privacy Policy

Last updated: [Month Year]

1. Information We Collect

[Your Product Name] collects the following data when you create an account and use our services:

• Account information — name, email address, and authentication credentials (password hash or OAuth provider tokens).
• Billing information — payment details processed through Stripe. We do not store credit card numbers on our servers.
• Usage data — feature usage logs, API call records, processing timestamps, and session metadata.
• Uploaded content — [Describe what users upload or submit. Note how long it is retained and when it is deleted.]

2. How We Use Your Data

• Provide, maintain, and improve the [Your Product Name] service.
• [Describe the core processing activity — e.g., process requests and deliver results.]
• Handle billing, invoicing, and account management.
• Send transactional emails (account confirmation, billing receipts, service notifications).
• Monitor service health and prevent abuse.

3. Content Processing and Storage

[Describe how user-uploaded content is processed. Note which third-party providers may handle it, what they are permitted to do with it, and your retention and deletion policy.]

[If applicable, note what third-party AI or processing providers are used and state that they do not retain customer data for training.]

4. Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. We share data only with:

• Payment processors — Stripe for payment handling.
• [Processing providers] — [Describe any third-party services that handle user content — purpose and data handling policy.]
• Infrastructure providers — cloud hosting for service operation.
• Law enforcement — when required by valid legal process.

5. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. Analytics cookies may be used to understand service usage patterns — these are anonymized and aggregated.

6. Data Security

We implement industry-standard security measures: TLS encryption in transit, encrypted storage at rest, access controls, and regular security audits. API keys are hashed before storage.

7. Data Retention

• Account data — retained while your account is active. Deleted within 30 days of account deletion request.
• Usage logs — retained for [X days] for debugging and billing reconciliation.
• Uploaded content — [Describe your retention and deletion policy for user-uploaded content.]

8. Your Rights

You have the right to access, correct, export, or delete your personal data. Contact us at [email protected] to exercise these rights. We respond to data requests within 30 days.

9. Changes to This Policy

We may update this privacy policy periodically. Material changes will be communicated via email to registered users. Continued use of the service after changes constitutes acceptance.

10. Contact

For privacy-related inquiries, contact: [email protected]