Privacy Policy

1. Introduction

TastyInteriors ("we," "our," "us," or "Company") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains in detail how we collect, use, disclose, store, and safeguard your information when you use our AI-powered interior design service ("Service" or "Platform").

This Privacy Policy applies to all users of our Service, including visitors to our website, registered users, and subscribers. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

We are committed to compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other relevant privacy regulations worldwide.

2. Information We Collect

2.1 Personal Information You Provide

When you create an account or use our Service, we collect the following personal information:

• Account Information: Email address, name, profile picture (via Google OAuth)
• Authentication Data: OAuth tokens, authentication credentials
• Payment Information: Billing details, payment method information (processed securely through Polar)
• Communication Data: Messages, feedback, support requests, and correspondence with us
• User Content: Photos and images you upload for AI design generation

2.2 Automatically Collected Information

When you access or use our Service, we automatically collect certain information:

• Usage Data: Pages visited, features used, time spent on pages, generation history, design preferences
• Device Information: Device type, operating system, browser type and version, screen resolution
• Log Data: IP address, access times, referring URLs, error logs
• Location Data: General geographic location based on IP address
• Analytics Data: User interactions, click patterns, feature usage statistics

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your browsing activities:

• Essential Cookies: Required for the Service to function (authentication, security)
• Analytics Cookies: Help us understand how users interact with our Service (Vercel Analytics)
• Preference Cookies: Remember your settings and preferences
• Session Cookies: Maintain your session while using the Service

You can control cookie preferences through your browser settings. However, disabling certain cookies may limit your ability to use some features of the Service.

2.4 Information from Third Parties

We may receive information about you from third-party services:

• Google OAuth: Profile information, email address, authentication data
• Payment Processors: Transaction data, payment status, billing information
• Analytics Providers: Aggregated usage statistics and trends

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Service Provision

• Create and manage your account
• Process your AI design generation requests
• Store and display your generated designs
• Provide customer support and respond to inquiries
• Process payments and manage subscriptions
• Send transactional emails and service notifications

3.2 Service Improvement

• Analyze usage patterns to improve features and functionality
• Train and improve our AI models and algorithms
• Develop new features and services
• Conduct research and development
• Optimize user experience and interface design

3.3 Communication

• Send important service updates and announcements
• Provide customer support and technical assistance
• Send promotional emails and marketing communications (with your consent)
• Notify you about changes to our Terms or Privacy Policy
• Request feedback and conduct surveys

3.4 Security and Fraud Prevention

• Detect and prevent fraud, abuse, and security incidents
• Enforce our Terms of Service and policies
• Protect the rights, property, and safety of TastyInteriors, users, and the public
• Monitor for suspicious activity and rate limiting violations

3.5 Legal Compliance

• Comply with legal obligations and regulatory requirements
• Respond to legal requests and prevent illegal activities
• Establish, exercise, or defend legal claims

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information in the following circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our Service:

• Cloud Hosting: Vercel (hosting and infrastructure)
• Database Services: Supabase (data storage and authentication)
• Payment Processing: Polar (subscription and payment management)
• AI Services: Replicate and other AI model providers (image generation)
• Analytics: Vercel Analytics (usage analytics and insights)
• Email Services: Email delivery and communication platforms

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 Business Transfers

If TastyInteriors is involved in a merger, acquisition, asset sale, bankruptcy, or other business transaction, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our Service of any change in ownership or use of your personal information.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal processes (subpoenas, court orders, search warrants)
• Government or regulatory requests
• Requests from law enforcement agencies
• Protection of our legal rights and property
• Prevention of fraud or illegal activities
• Protection of the safety of our users or the public

4.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing, such as when you choose to share your generated designs on social media or with other users.

4.5 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you. This may include usage statistics, trends, and insights for research, marketing, or business purposes.

5. Data Storage and Security

5.1 Data Storage

Your data is stored securely using industry-standard practices. We use Supabase for database storage and authentication, which provides enterprise-grade security. Images are stored in secure cloud storage with access controls and encryption.

5.2 Security Measures

We implement comprehensive security measures to protect your information:

• Encryption: Data is encrypted in transit (TLS/SSL) and at rest
• Access Controls: Strict access controls and authentication requirements
• Regular Audits: Security audits and vulnerability assessments
• Monitoring: Continuous monitoring for security threats and anomalies
• Secure Development: Security best practices in software development
• Employee Training: Regular security training for employees

5.3 Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law, typically within 72 hours of becoming aware of the breach. We will provide information about the nature of the breach, the data affected, and steps we are taking to address it.

5.4 Limitations

While we implement reasonable security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data. You are responsible for maintaining the confidentiality of your account credentials and for any activities under your account.

6. Your Privacy Rights

Depending on your location and applicable laws, you may have the following rights regarding your personal information:

6.1 Access and Portability

• Right to Access: Request a copy of the personal information we hold about you
• Right to Data Portability: Receive your data in a structured, commonly used format

6.2 Correction and Deletion

• Right to Rectification: Correct inaccurate or incomplete personal information
• Right to Erasure: Request deletion of your personal information ("right to be forgotten")

6.3 Control and Restriction

• Right to Restriction: Limit how we use your personal information
• Right to Object: Object to processing of your personal information
• Right to Withdraw Consent: Withdraw consent for data processing at any time

6.4 Marketing Communications

• Opt-Out: Unsubscribe from marketing emails using the link in each email
• Preferences: Manage communication preferences in your account settings

6.5 Exercising Your Rights

To exercise any of these rights, please contact us at info@tastyinteriors.com. We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before processing your request. There is no fee for exercising your rights, unless your request is clearly unfounded or excessive.

6.6 Complaints

If you believe we have not handled your personal information properly, you have the right to lodge a complaint with your local data protection authority. For EEA residents, you can find your data protection authority at https://edpb.europa.eu.

7. Cookies and Tracking Technologies

7.1 Types of Cookies We Use

We use the following types of cookies:

• Strictly Necessary Cookies: Essential for the Service to function (authentication, security)
• Performance Cookies: Collect information about how you use the Service (analytics)
• Functionality Cookies: Remember your preferences and settings
• Targeting Cookies: Track your browsing to show relevant content (with consent)

7.2 Third-Party Cookies

We use third-party cookies from:

• Google (authentication and analytics)
• Vercel (analytics and performance monitoring)
• Polar (payment processing)

7.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling cookies may affect your ability to use certain features of the Service. For more information about managing cookies, visit www.allaboutcookies.org.

7.4 Do Not Track

Some browsers have a "Do Not Track" feature that signals to websites that you do not want your online activities tracked. We currently do not respond to Do Not Track signals, as there is no industry standard for how to respond to such signals.

8. Third-Party Services and Links

Our Service integrates with and may contain links to third-party services, websites, and applications. These third parties have their own privacy policies and terms of service:

8.1 Third-Party Services We Use

• Google OAuth: Authentication services (see Google Privacy Policy)
• Vercel: Hosting and analytics (see Vercel Privacy Policy)
• Supabase: Database and authentication (see Supabase Privacy Policy)
• Polar: Payment processing (see Polar Privacy Policy)
• Replicate: AI model hosting (see Replicate Privacy Policy)

8.2 Third-Party Links

We are not responsible for the privacy practices or content of third-party websites or services. We encourage you to read the privacy policies of any third-party services you access through our Service.

9. Children's Privacy

Our Service is not intended for users under 13 years of age (or 16 in the EEA). We do not knowingly collect personal information from children under these ages. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at info@tastyinteriors.com.

If we become aware that we have collected personal information from a child under the applicable age without parental consent, we will take steps to delete that information as quickly as possible.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

10.1 Data Transfer Mechanisms

When we transfer personal data from the EEA to other countries, we use appropriate safeguards such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Privacy Shield certification (where applicable)
• Other legally approved transfer mechanisms

10.2 Your Consent

By using our Service, you consent to the transfer of your information to countries outside your country of residence, including the United States, which may have different data protection rules than your country.

11. Data Retention

We retain your personal data for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

11.1 Retention Periods

• Account Data: Retained while your account is active and for a reasonable period after deletion
• Generated Designs: Retained while your account is active; deleted upon account deletion
• Payment Records: Retained for 7 years for tax and accounting purposes
• Usage Logs: Retained for 90 days for security and analytics purposes
• Marketing Data: Retained until you opt-out or request deletion

11.2 Account Deletion

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes. Some information may remain in backup systems for a limited period.

12. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

12.1 Your CCPA Rights

• Right to Know: Request information about personal data we collect, use, and share
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the sale of personal information (we do not sell personal information)
• Right to Non-Discrimination: Not be discriminated against for exercising your CCPA rights

12.2 Categories of Information

We collect the following categories of personal information:

• Identifiers (name, email, IP address)
• Commercial information (subscription data, payment history)
• Internet activity (usage data, browsing history)
• Visual information (uploaded images)
• Inferences (preferences, characteristics)

12.3 Exercising CCPA Rights

To exercise your CCPA rights, contact us at info@tastyinteriors.com or call us at [phone number]. We will verify your identity before processing your request and respond within 45 days.

13. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have specific rights under the General Data Protection Regulation (GDPR):

13.1 Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide the Service
• Legitimate Interests: Improving our Service, fraud prevention, security
• Consent: Marketing communications, optional features
• Legal Obligations: Compliance with laws and regulations

13.2 Your GDPR Rights

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent
• Lodge a complaint with a supervisory authority

13.3 Data Protection Officer

For GDPR-related inquiries, you can contact our Data Protection Officer at info@tastyinteriors.com.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes via email or through a prominent notice on the Service at least 30 days before the changes take effect.

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically. The "Last updated" date at the top of this page indicates when this Privacy Policy was last revised.

If we make material changes that significantly affect your privacy rights, we will obtain your consent where required by applicable law.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

We will respond to all legitimate privacy inquiries within 30 days (or as required by applicable law). For urgent privacy concerns, please mark your email as "URGENT - Privacy Request."