Privacy Policy

1. Information We Collect

1.1 Personal Information You Provide

• Account Information: Name, email address, and password when you create an account
• Content Data: Photos, images, child's name, age, storyline prompts, and any other personalization details you provide
• Payment Information: Billing address and payment details (processed securely through third-party payment processors; we do not store full credit card numbers)
• Communication Data: Messages, feedback, and support requests you send to us
• Shipping Information: Delivery address for physical book orders

1.2 Information Automatically Collected

• Usage Data: Pages viewed, features used, time spent, click patterns, and interaction data
• Device Information: IP address, browser type, operating system, device identifiers, and mobile network information
• Cookies and Tracking: We use cookies, web beacons, and similar technologies to enhance user experience and analyze usage patterns

1.3 AI-Generated Content

Our Service uses artificial intelligence to generate personalized storybook content based on your inputs. The AI processes your photos and text to create unique illustrations and narratives.

2. How We Use Your Information

We use collected information for the following purposes:

• Service Delivery: To create, process, and deliver your personalized storybooks
• Account Management: To create and manage your account, authenticate users, and provide customer support
• Payment Processing: To process transactions and send receipts
• Tax and Compliance: To calculate taxes, validate addresses, and comply with legal obligations based on billing or shipping location
• Communication: To send order confirmations, delivery updates, and respond to inquiries
• Service Improvement: To analyze usage patterns, improve AI algorithms, enhance features, and optimize user experience
• Security: To detect, prevent, and address fraud, abuse, security issues, and technical problems
• Legal Compliance: To comply with legal obligations and enforce our Terms of Service
• Marketing: With your consent, to send promotional communications about new features, products, and special offers (you can opt out anytime)

3. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), we process your personal data based on:

• Contractual Necessity: Processing necessary to fulfill our contract with you (creating and delivering your storybook)
• Consent: You have given explicit consent for specific processing activities (e.g., marketing emails)
• Legitimate Interests: Processing necessary for our legitimate business interests (e.g., fraud prevention, service improvement) that do not override your rights
• Legal Obligation: Processing required to comply with legal requirements

4. Data Retention

We retain your information only as long as necessary for the purposes outlined in this policy:

• Uploaded Photos: Deleted within 30 days after your storybook is generated, unless you request earlier deletion
• Generated Storybooks: Retained for 12 months to allow re-downloads and reprints
• Account Information: Retained until you request account deletion
• Transaction Records: Retained for 7 years for tax and accounting purposes as required by law
• Usage Analytics: Aggregated and anonymized data may be retained indefinitely for statistical purposes

You can request deletion of your data at any time by contacting us at team@img2x.com.

5. How We Share Your Information

We do not sell your personal information. We may share your information with:

• Service Providers: Third-party vendors who perform services on our behalf (payment processing, cloud hosting, email delivery, printing services). These providers are contractually obligated to protect your data.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity
• Legal Requirements: When required by law, court order, or government request, or to protect our rights, property, or safety
• With Your Consent: We may share information for other purposes with your explicit consent

We never sell, rent, or trade your personal information to third parties for their marketing purposes.

6. Your Privacy Rights

6.1 General Rights

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Opt-Out: Unsubscribe from marketing emails using the link in any promotional email
• Data Portability: Request a copy of your data in a structured, machine-readable format

6.2 GDPR Rights (EEA Residents)

If you are in the EEA, you have additional rights:

• Right to withdraw consent at any time
• Right to restrict processing of your data
• Right to object to processing based on legitimate interests
• Right to lodge a complaint with your local data protection authority

6.3 CCPA Rights (California Residents)

California residents have the right to:

• Know what personal information is collected, used, shared, or sold
• Delete personal information held by us
• Opt-out of the sale of personal information (we do not sell personal information)
• Non-discrimination for exercising CCPA rights

6.4 Other U.S. State Privacy Rights

Residents of Indiana, Kentucky, Rhode Island, and other states with comprehensive privacy laws have similar rights to access, correct, delete, and port their data. Contact us to exercise these rights.

To exercise any of these rights, contact us at team@img2x.com. We will respond within 30 days (or as required by applicable law).

7. Children's Privacy (COPPA Compliance)

Our Service is intended for use by adults creating storybooks for children. We do not knowingly collect personal information directly from children under 13 without parental consent.

• Users must be 18 years or older to create an account and place orders
• Parents/guardians provide children's information (name, age, photo) for storybook personalization only
• We do not use children's information for marketing or advertising purposes
• Parents can request deletion of their child's information at any time
• If we learn we have collected information from a child under 13 without parental consent, we will delete it immediately

8. Data Security

We implement industry-standard security measures to protect your information:

• Encryption of data in transit (SSL/TLS) and at rest
• Secure authentication and access controls
• Regular security audits and vulnerability assessments
• Employee training on data protection practices
• Secure data centers with physical and network security

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions recognizing equivalent data protection
• Your explicit consent for the transfer

10. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Essential Cookies: Required for the Service to function (authentication, security)
• Analytics Cookies: Help us understand how users interact with the Service
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Track effectiveness of advertising campaigns (with your consent)

You can control cookies through your browser settings. Note that disabling certain cookies may limit Service functionality.

11. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending an email notification to your registered email address
• Displaying a prominent notice on our website

Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: