PRIVACY POLICY

1. Information We Collect

1.1 Information You Provide

We collect information you provide directly when you:

• Create an account: Name, email address, password
• Subscribe to a plan: Billing information (processed by Stripe, our payment processor)
• Contact us: Name, email, message content, and any other information you choose to provide
• Upload content: Images and data you upload to create posters
• Use the service: Poster titles, dates, competitor names, and customization preferences

1.2 Information We Collect Automatically

When you use PosterGen, we automatically collect:

• Usage information: Pages viewed, features used, time spent on the platform
• Device information: Browser type, operating system, device identifiers
• Log data: IP address, access times, referrer URLs, error logs
• Cookies: Session cookies, preference cookies, analytics cookies (see Cookie Policy below)

1.3 Information from Third Parties

We may receive information from:

• Payment processors: Stripe provides payment confirmation and billing details
• Authentication providers: If you use social login (Google, etc.), we receive basic profile information
• Analytics services: Aggregated usage data from analytics providers

2. How We Use Your Information

We use your information for the following purposes:

2.1 Providing Services

• Create and manage your account
• Process poster generation requests
• Store and deliver your created posters
• Provide customer support
• Send transactional emails (account confirmations, password resets, receipts)

2.2 Improving Services

• Analyze usage patterns to improve features
• Conduct research and development
• Test new features and functionality
• Monitor and prevent technical issues

2.3 Communication

• Respond to your inquiries and support requests
• Send service announcements and updates
• Send marketing communications (with your consent)
• Notify you of plan changes or important updates

2.4 Security and Legal

• Detect and prevent fraud, abuse, and security incidents
• Enforce our Terms of Service
• Comply with legal obligations
• Protect our rights and property

3. Legal Basis for Processing (UK GDPR)

Under UK GDPR, we process your personal data based on:

• Contract performance: To provide the services you've signed up for
• Legitimate interests: To improve our services, prevent fraud, and conduct business operations
• Consent: For marketing communications and optional features (you can withdraw consent anytime)
• Legal obligations: To comply with applicable laws and regulations

4. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who help us operate our business:

• Stripe: Payment processing (subject to Stripe's privacy policy)
• Cloud hosting: Server infrastructure and data storage
• Email services: Transactional and marketing email delivery
• Analytics providers: Usage analytics and performance monitoring

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

4.2 Legal Requirements

We may disclose information if required by law or in response to:

• Legal process (subpoenas, court orders)
• Government or regulatory requests
• Enforcement of our Terms of Service
• Protection of our rights, property, or safety
• Investigation of fraud or security issues

4.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and the choices you have.

4.4 With Your Consent

We may share information with other parties when you give us explicit consent to do so.

5. Cookies and Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files stored on your device that help us provide and improve our services. We use the following types of cookies:

5.2 Types of Cookies We Use

• Essential cookies: Required for the platform to function (authentication, security)
• Functional cookies: Remember your preferences and settings
• Analytics cookies: Help us understand how you use the platform
• Marketing cookies: Track effectiveness of our marketing campaigns (with consent)

5.3 Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may affect platform functionality. Most browsers allow you to:

• View and delete cookies
• Block third-party cookies
• Block all cookies (may impact functionality)
• Receive notifications when cookies are set

6. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: Data transmitted via HTTPS/TLS encryption
• Access controls: Limited employee access to personal data
• Regular security audits: Periodic security assessments and updates
• Password security: Passwords are hashed using industry-standard algorithms
• Monitoring: Continuous monitoring for suspicious activity

While we strive to protect your information, no method of transmission over the internet is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.

7. Your Data Protection Rights (UK GDPR)

Under UK GDPR, you have the following rights:

7.1 Right to Access

You can request a copy of all personal data we hold about you. You can download your posters and data from your account settings.

7.2 Right to Rectification

You can update incorrect or incomplete personal information through your account settings or by contacting us.

7.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal data. We will comply unless we have a legal obligation to retain it. You can delete your account from account settings.

7.4 Right to Restrict Processing

You can request that we limit how we use your data in certain circumstances.

7.5 Right to Data Portability

You can request a copy of your data in a machine-readable format to transfer to another service.

7.6 Right to Object

You can object to processing based on legitimate interests or for marketing purposes.

7.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time. This does not affect the lawfulness of processing before withdrawal.

7.8 Exercising Your Rights

To exercise any of these rights, email us at privacy@postergen.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

8. Data Retention

We retain your information for as long as necessary to provide services and comply with legal obligations:

• Account data: Retained while your account is active
• Posters and uploads: Retained while your account is active, plus 30 days after deletion
• Payment records: Retained for 7 years for tax and accounting purposes
• Support communications: Retained for 3 years
• Marketing data: Retained until you unsubscribe or object
• Log data: Retained for 90 days

After these periods, we securely delete or anonymize your data. Some data may be retained longer if required by law.

9. International Data Transfers

Your data is primarily stored and processed in the United Kingdom. If we transfer data outside the UK/EEA, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the UK ICO
• Transfers to countries with adequacy decisions
• Appropriate technical and organizational security measures

10. Children's Privacy

PosterGen is not intended for children under 13 years of age (or 16 in some jurisdictions). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete it. If you believe we have collected information from a child, contact us immediately.

11. Third-Party Links

Our platform may contain links to third-party websites, services, or resources. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

12. Marketing Communications

12.1 Opt-In

We will only send you marketing emails if you have opted in. You can opt in during account creation or through your account settings.

12.2 Opt-Out

You can unsubscribe from marketing emails at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Updating preferences in your account settings
• Emailing us at support@postergen.co.uk

Note: You will continue to receive transactional emails (receipts, password resets) even if you unsubscribe from marketing.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Sending an email to your registered email address
• Posting a notice on the platform
• Updating the "Last Updated" date at the top of this policy

Your continued use of PosterGen after changes take effect constitutes acceptance of the updated policy. We encourage you to review this policy periodically.

14. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect and how we use it
• Right to delete your personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your CCPA rights

To exercise these rights, contact us at privacy@postergen.co.uk.

15. Data Protection Officer

For privacy-related inquiries or to exercise your data protection rights, you can contact our Data Protection Officer at:

16. Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us: