Privacy Policy

1. Introduction

This Privacy Policy describes how Gazmandros ("we," "our," or "us") collects, uses, and protects your personal information when you use our service. We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR).

2. Information We Collect

We collect the following categories of personal information:

• Account Information: Email address (required for account creation and service delivery)
• Usage Logs: Job IDs, timestamps, and metadata related to your use of the service (e.g., generation requests, style selections)
• Payment Records: Transaction information processed through third-party payment processors (e.g., PayPal). We do not store full payment card details.
• Generated Content: URLs and metadata for generated images, stored to provide the service and maintain your gallery
• Technical Data: IP address, browser type, device information, and usage patterns for security and service improvement purposes
• Age Verification: Consent confirmation stored locally in your browser (localStorage) to verify age eligibility

3. How We Use Your Information

We use your personal information for the following purposes:

• Service Provision: To provide, maintain, and improve our AI art generation service
• Account Management: To create and manage your account, process transactions, and provide customer support
• Abuse Prevention: To detect, prevent, and respond to fraud, abuse, security threats, and violations of our Terms of Service and Content Policy
• Security: To protect the security and integrity of our service and users
• Legal Compliance: To comply with applicable laws, regulations, and lawful requests from authorities
• Communication: To send you service-related notifications, updates, and support messages

4. Lawful Basis for Processing (GDPR)

Under GDPR, we process your personal information based on the following lawful bases:

• Contract: Processing necessary for the performance of our contract with you (providing the service, processing payments)
• Legitimate Interests: Processing necessary for our legitimate interests, including:
  • Preventing fraud and abuse
  • Ensuring service security
  • Improving our service
  • Complying with legal obligations
• Consent: For optional features and communications where you have provided explicit consent
• Legal Obligation: Where processing is required by law (e.g., reporting illegal content, responding to lawful requests from authorities)

5. Data Retention

We follow the principle of data minimization and retain personal information only for as long as necessary:

• Account Data: Retained while your account is active and for [X years/months] after account closure, unless a longer retention period is required by law
• Usage Logs: Retained for [X months] for security and abuse prevention purposes
• Generated Content: Generated outputs and related metadata are stored for a limited period (default: 30 days) unless deleted earlier by the user. After the retention period, data is automatically removed.
• Payment Records: Retained as required by financial regulations (typically [X years])
• Legal Holds: Data may be retained longer if subject to a legal hold or investigation

You can delete your generated content at any time through your account dashboard. Content that has been reported or is under investigation may be retained longer as required by law or for legal proceedings.

6. Data Deletion

You may request deletion of your personal information at any time by:

• Deleting generated content through your account dashboard
• Closing your account (which will trigger deletion of associated data, subject to legal retention requirements)
• Contacting us at the email address below

We will process deletion requests promptly, subject to our legal obligations to retain certain information (e.g., for fraud prevention, legal compliance, or ongoing investigations).

7. Your Rights (GDPR)

Under GDPR and applicable data protection laws, you have the following rights:

• Right of Access: Request a copy of the personal information we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete information
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal information, subject to legal retention requirements
• Right to Restrict Processing: Request that we limit how we use your information
• Right to Data Portability: Request a copy of your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at the email address provided below. We will respond to your request within [30 days] as required by GDPR.

8. Data Sharing and Third Parties

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our service (e.g., payment processors, cloud hosting providers), subject to strict confidentiality agreements
• Legal Requirements: When required by law, regulation, or lawful requests from government authorities or courts
• Safety and Security: To protect the rights, property, or safety of Gazmandros, our users, or others, including reporting illegal content to authorities
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to users)

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including encryption, access controls, and regular security assessments. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

10. Cookies and Local Storage

We use cookies and local storage to enhance your experience, maintain your session, store preferences, and verify age eligibility. You can control cookies through your browser settings, but this may affect the functionality of our service.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.

12. Children's Privacy

Our service is restricted to users 18 years of age or older. We do not knowingly collect personal information from individuals under 18. If we become aware that we have collected information from someone under 18, we will take steps to delete that information immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us: