Privacy Policy

1. Introduction

Welcome to Compozit Vision ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Platform").

By using Compozit Vision, you consent to the practices described in this policy. If you do not agree with this policy, please do not use our services.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, and password when you create an account
• Profile Data: Optional profile photo and preferences you choose to provide
• User Content: Photos you upload for AI transformation, text prompts, design preferences, and project details
• Payment Information: Billing details processed through our payment providers (Stripe, Apple App Store, Google Play)
• Communications: Messages you send to our support team

2.2 Information Collected Automatically

• Usage Data: Features used, designs generated, styles selected, and interaction patterns
• Device Information: Device type, operating system, unique device identifiers, and app version
• Log Data: IP address, browser type, access times, and pages viewed
• Location Data: General location based on IP address (not precise GPS)

2.3 Information from Third Parties

• Social Login: If you sign in with Google or Apple, we receive your name and email from those services
• Analytics Providers: Aggregated usage statistics from analytics services

3. How We Use Your Information

We use your information to:

• Provide Services: Process your photos through our AI, generate designs, and deliver cost estimates
• Manage Your Account: Create and maintain your account, process subscriptions, and authenticate access
• Improve Our Platform: Analyze usage patterns, fix bugs, and develop new features
• Communicate: Send service updates, respond to support requests, and (with your consent) marketing communications
• Ensure Security: Detect fraud, prevent abuse, and protect our users and platform
• Legal Compliance: Meet regulatory requirements and respond to legal requests

4. AI Processing & Your Images

When you upload photos to Compozit Vision:

• Processing: Your images are securely transmitted to our AI systems and third-party AI providers for transformation
• Storage: Original and generated images are stored in your personal gallery until you delete them or your account
• AI Training: We do not use your personal photos to train AI models without explicit consent
• Retention: Deleted images are removed from our active systems within 30 days, though backup copies may persist for up to 90 days

5. Data Sharing & Third Parties

We share your information with:

• AI Service Providers: To process and transform your images (e.g., Replicate, OpenAI)
• Cloud Infrastructure: Supabase and Cloudflare for secure data storage and delivery
• Payment Processors: Stripe, RevenueCat, Apple, and Google for subscription management
• Analytics Services: To understand usage patterns (anonymized where possible)
• Legal Requirements: When required by law, court order, or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties for their marketing purposes.

6. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to:

• Essential Cookies: Enable core functionality like authentication and security
• Analytics Cookies: Help us understand how visitors use our site
• Preference Cookies: Remember your settings and choices

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality.

7. Data Retention

We retain your information for as long as:

• Your account is active
• Needed to provide our services
• Required by law or for legitimate business purposes

When you delete your account, we remove your personal data within 30 days, except where retention is required for legal compliance, fraud prevention, or dispute resolution.

8. Data Security

We implement industry-standard security measures including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication and access controls
• Regular security assessments
• Limited employee access to personal data

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States, where our servers and service providers are located. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

10. Your Privacy Rights

Depending on your location, you may have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal data
• Portability: Receive your data in a portable format
• Objection: Object to certain processing activities
• Withdraw Consent: Withdraw consent for optional processing

To exercise these rights, contact us at contact@aicompoz.it

11. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to Know: What personal information we collect and how it's used
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do not sell personal information
• Non-Discrimination: We will not discriminate against you for exercising your rights

12. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), UK, or Switzerland, you have additional rights under the General Data Protection Regulation:

• Right to access, rectify, or erase your personal data
• Right to restrict or object to processing
• Right to data portability
• Right to lodge a complaint with a supervisory authority

Our legal bases for processing include: contract performance, legitimate interests, legal obligations, and consent.

13. Children's Privacy

Compozit Vision is not intended for users under 13 years of age (or 16 in the EEA). We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will delete it promptly.

14. Changes to This Policy

We may update this privacy policy periodically. We will notify you of material changes by email or through the app. The "Last updated" date at the top indicates when the policy was last revised. Continued use of our services after changes constitutes acceptance of the updated policy.

15. Contact Us

For questions about this Privacy Policy or to exercise your rights: