Privacy Policy

1.1 Information You Provide

We collect information you directly provide, including:

• Account Information: Name, email address, and password when you create an account
• Profile Information: Display name, company name, and other optional profile details
• Payment Information: Billing address and payment method details (processed securely by Stripe)
• Content: Product images you upload and configuration preferences for generation
• Communications: Messages you send to our support team

1.2 Information Collected Automatically

When you use our Service, we automatically collect certain information:

• Usage Data: Pages visited, features used, job history, and generation preferences
• Device Information: Browser type, operating system, device identifiers, and screen resolution
• Log Data: IP address, access times, and referring URLs
• Cookies: Session cookies for authentication and preferences (see Section 7)

3.1 Payment Processing

Stripe processes all payments. We never store your full credit card number. Stripe's privacy policy: stripe.com/privacy

3.2 AI Processing

Replicate processes your images to generate outputs. Images are temporarily stored during processing and deleted after completion. Replicate's privacy policy: replicate.com/privacy

3.3 Cloud Storage

Amazon Web Services (AWS) stores your uploaded images and generated outputs securely. Data is encrypted at rest and in transit. AWS privacy policy: aws.amazon.com/privacy

3.4 Email Services

Resend delivers transactional emails (verification codes, password resets, receipts). Resend's privacy policy: resend.com/legal/privacy-policy

3.5 Error Monitoring

Sentry helps us identify and fix errors. Error reports may include technical information but not your personal content. Sentry's privacy policy: sentry.io/privacy

4.1 Where We Store Your Data

Your data is stored on servers located in the European Union (AWS eu-west-1 region). We use industry-standard security measures including:

• Encryption in transit (TLS 1.3)
• Encryption at rest (AES-256)
• Regular security audits and updates
• Access controls and authentication
• Automated backups with point-in-time recovery

4.2 Security Measures

While we implement robust security measures, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your data using industry best practices.

6.1 Access and Portability

You can request a copy of your personal data in a structured, machine-readable format. Contact us at privacy@studiozero.app to request an export.

6.2 Correction

You can update your account information directly in your account settings, or contact us to correct inaccurate data.

6.3 Deletion

You can delete your account at any time from your account settings. This will permanently delete your account, uploaded images, generated outputs, and associated data within 30 days.

6.4 Restriction and Objection

You may request that we restrict processing of your data or object to certain processing activities. Contact us to make such requests.

6.5 Withdraw Consent

Where we rely on consent for processing, you may withdraw consent at any time. This will not affect the lawfulness of processing before withdrawal.

8.1 Legal Basis for Processing

We process your data based on:

• Contract: To provide the Service you requested
• Legitimate Interest: To improve the Service, ensure security, and prevent fraud
• Legal Obligation: To comply with applicable laws
• Consent: For optional features where you provide explicit consent

8.2 Data Controller

StudioZero is the data controller for your personal information. Contact details are provided in Section 11.

8.3 Supervisory Authority

You have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.