Privacy Policy

How FunShot collects, uses, stores, and protects your personal data.

1. Information We Collect

1.1 Information You Provide

• Account Information: When you sign in via Google, we collect your Google account name, email address, and profile picture.
• Uploaded Images: Product images you upload for generation purposes.
• Product Descriptions: Text descriptions you provide for image generation.

1.2 Information Collected Automatically

• Device Information: Device ID, browser type, operating system, and screen resolution.
• Usage Data: Pages visited, features used, generation history, timestamps.
• IP Address: For analytics and security purposes.

1.3 Payment Information

Payments are processed by Creem, our Merchant of Record. FunShot does not collect, store, or process credit card or other payment instrument details. Creem's Privacy Policy governs the handling of your payment data.

2. How We Use Your Information

We use the collected information for the following purposes:

• Providing and maintaining the Service (image generation, account management)
• Processing subscription payments through our payment processor (Creem)
• Improving and optimizing the Service based on usage patterns
• Communicating with you about account updates, billing, and policy changes
• Enforcing our Terms of Service and Acceptable Use Policy
• Complying with legal obligations

3. Data Storage and Retention

Your data is stored on Supabase, our cloud database and storage provider. We retain your data for the following periods:

• Account information: Until account deletion
• Uploaded images: Until you delete them or your account is terminated
• Generated images: Retained in your history for 12 months after generation
• Usage analytics: Aggregated and anonymized for 24 months

4. Data Sharing and Third Parties

We share your data only with essential service providers:

• Supabase – Cloud database, authentication, and file storage
• Google – OAuth authentication (sign-in)
• Creem – Payment processing and subscription management
• Kie AI – AI image generation model provider

We do not sell your personal data to third parties. We may disclose information if required by law or to protect our rights and the safety of our users.

5. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption in transit (TLS) for all data transmitted to and from the Service
• Encryption at rest for stored data
• Access controls and authentication for API and database access
• Regular security assessments

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access – Request a copy of the personal data we hold about you
• Rectification – Correct inaccurate or incomplete data
• Deletion – Request deletion of your account and associated data
• Portability – Receive your data in a structured, machine-readable format
• Objection – Object to certain processing activities

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. Cookies and Tracking

The Service uses essential cookies for authentication and session management. We do not use third-party tracking cookies for advertising purposes. Device IDs are stored locally to support anonymous usage tracking for analytics.

8. Children's Privacy

The Service is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will delete it promptly.

9. International Data Transfers

Your data may be processed in the United States and other jurisdictions where our service providers operate. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable data protection laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or through the Service. The "Last updated" date at the top of this page indicates when the policy was last revised.

11. Contact

For privacy-related inquiries, please contact us at [email protected].