PRIVACY POLICY

1. OPERATOR & SCOPE

This Privacy Policy explains how Zec Digital Enterprises Inc., the operator of PopArtify, collects, uses, stores, and protects your information when you use the web app, Studio, gallery, editor, suggestion box, referral features, and payment flows.

2. DATA WE COLLECT

We collect your email address to manage your account and track your credits. To optimize your experience and prevent abuse, we automatically capture:

• Email Addresses (used for authentication and account management).
• Device Information (Type, OS, and In-App Browser status).
• Geographic Region (based on your request architecture).
• Language/Locale (to optimize the user interface).
• Marketing Attribution (UTM parameters to measure advertising effectiveness, only after marketing consent).
• Usage Statistics (total transformations completed and current credit balance).
• Transformation Records (request status, timestamps, failure reasons, and related usage metadata).
• Saved Gallery Outputs (completed AI-generated images you choose to keep in your account gallery).
• Purchase Records (credit package, amount, currency, purchase time, Stripe customer/session/payment identifiers, and payment status).
• Referral Data (your referral code, who referred a signup, and whether referral rewards were earned).
• Suggestion Box Submissions (your suggestion text, submission date, account email, and review status).
• Account Deletion Logs (limited records such as deletion date, deleted account email, remaining credits, and total transformations at deletion).
• Cookie and Tracking Preferences (your choices for optional analytics and marketing tracking).
• Tracking and Analytics Data: When you consent, we use tools such as Meta Pixel, Meta Conversions API, and Vercel Analytics to measure site interactions, purchases, page views, referrers, device/browser information, and aggregate usage trends.

We do not store full credit card numbers. Payment details are handled by Stripe or another third-party payment processor.

3. THE "SECURE PURGE" GUARANTEE

Your privacy is our priority. We handle your photos using a Secure Purge protocol:

• Instant Deletion: Your original uploaded photo is permanently deleted from our servers the moment the AI transformation is complete (or if the process fails).
• Zero Retention: We do not store, "train" on, or maintain copies of your original personal photos once the transformation request is finalized.
• Saved Outputs: Completed AI-generated results may be stored in your user gallery so you can view, edit, download, or delete them later. These saved outputs are separate from the original uploaded image.
• Ephemeral Processing: Original uploads are treated as temporary processing files and are removed after the request is finalized.

4. HOW WE USE YOUR DATA

We use your information solely to:

• Authenticate access and protect your credit balance using atomic transactions.
• Process credit purchases, deliver paid credits, and provide purchase support.
• Enforce fair-use rate limits (50 transforms per hour) to maintain system stability.
• Handle refunds, disputes, chargebacks, fraud prevention, accounting, tax, and legal compliance.
• Optimize the studio interface for your specific device and browser.
• Save completed transformations to your gallery and generate temporary signed links so you can view, edit, download, or delete them.
• Operate referral links, assign referral rewards, and prevent referral abuse.
• Review suggestion box submissions and manage internal suggestion statuses.
• Build private admin metrics such as signups, purchases, revenue, failed transformations, device breakdowns, top users, and account deletions.
• Measure advertisement effectiveness using third-party tools like Meta Pixel and Meta Conversions API when marketing consent is enabled.

6. ACCOUNT DELETION

When you use the "Delete Account" feature, we perform a permanent wipe:

• Deleting your authentication record, metadata, and email.
• Wiping your transformation history and remaining credit balance.
• Deleting your user-specific storage assets, including saved gallery images.

Note: This action is irreversible. We may retain limited transaction, referral, suggestion, security, analytics, and account deletion records as needed for payment processing, taxes, fraud prevention, disputes, chargebacks, refunds, accounting, abuse monitoring, or legal obligations. Some anonymized or aggregated data, and some data previously sent to third-party providers such as Meta, Stripe, Supabase, Vercel, or FAL-AI, may persist according to their own policies.

7. AI PASS-THROUGH & THIRD-PARTY PROCESSING

We utilize FAL-AI as our primary image processing partner. When you request a transformation, your image is securely transmitted to their servers for processing. While we ensure our own "Secure Purge" protocol, we do not control the independent data retention policies of third-party AI providers.

We use Stripe or another third-party payment processor to handle purchases. Payment processors may collect and process payment information, billing details, fraud signals, and transaction metadata according to their own policies.

We use Supabase or similar infrastructure providers for authentication, database storage, file storage, and temporary signed gallery links. We use Vercel for hosting and, with your consent, Vercel Analytics to measure page views, performance, and aggregate usage trends. If marketing consent is enabled, we may send purchase events and attribution identifiers to Meta through Meta Pixel and Meta Conversions API to measure advertisement performance. We may use additional hosting and analytics providers to operate the service, monitor performance, prevent abuse, and understand aggregate usage trends.

8. ADMIN ACCESS & AGGREGATED METRICS

Authorized administrators may view account emails, suggestions, purchase summaries, transformation counts, failed transformation details, device/browser breakdowns, referral activity, and deletion logs for support, abuse prevention, operations, and product improvement. Where practical, dashboard metrics are shown in aggregate, but some operational views may include account-level details such as email, date, credits, or transformation count.

9. MODIFICATIONS TO THIS POLICY

We reserve the right to modify this Privacy Policy at any time. Your continued use of the Studio after such changes constitutes your acceptance of the new terms.