Privacy Policy

1. Information We Collect

Account information

When you sign in, we collect your email address (via email verification or Google OAuth). We do not collect passwords.

Card content

Text, photos, and other content you provide when creating intro cards. This data is used to generate your cards and is not shared with third parties except as needed to process your request (e.g., AI generation APIs).

Payment information

Payments are processed by Stripe. We do not store your credit card number. Stripe may collect information as described in their privacy policy.

Usage data

We may collect basic usage data such as pages visited, features used, and error logs to improve the Service.

2. How We Use Your Information

• To provide and maintain the Service
• To process payments and manage credits
• To generate intro cards using AI
• To communicate with you about your account
• To improve the Service

3. Data Sharing

We do not sell your personal data. We may share data with:

• AI providers (e.g., Google Gemini) to generate card content. Only the text and images you submit for card generation are sent.
• Stripe to process payments.
• Hosting providers (e.g., Vercel, Supabase) to operate the Service.

4. Shared Cards

When you share a card via a public link, the card content (name, role, bio details) becomes publicly accessible at that URL. You control what information appears on your card.

5. Data Retention

We retain your account data for as long as your account is active. Card generation history may be stored temporarily to support features like recent history. You can request deletion of your account and associated data by contacting us.

6. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability

To exercise these rights, please contact us at the email address listed on our website.

7. Cookies

We use essential cookies to maintain your login session (a signed JWT token stored in an httpOnly cookie). We do not use third-party tracking cookies.

8. Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS), signed session tokens, and secure payment processing through Stripe.

9. Children

The Service is not intended for users under 13 years of age. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this policy from time to time. We will notify users of significant changes through the Service or by email.

11. Contact

If you have questions about this privacy policy, please contact us at support@aicardgenerator.app.