1. Introduction

ChomokAI ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit or use our website and AI creative engine.

2. Information We Collect

We collect information that you provide directly to us when creating an account, subscribing, or using the Service:

• Account Information: When you sign up via our authentication provider (Clerk), we collect your name, email address, profile picture, and user ID.
• Creative Content & Uploads: We collect and process the text scripts, titles, outlines, and reference images you upload to generate design concepts and thumbnails.
• Transaction Data: Payments are processed securely by our reseller and Merchant of Record, Paddle.com. We do not store your credit card or billing credentials. We only receive payment status confirmations, invoice history metadata, and subscription details from Paddle.

3. How We Use Your Information

We use the collected information for the following business purposes:

• To provide, operate, maintain, and optimize our AI generation service.
• To manage your account, subscription plans, and calculate credit balances.
• To process transaction status updates and prevent fraudulent activities.
• To improve user experience, application layout, and overall AI output relevance.
• To send service notifications, security updates, and customer support communications.

4. Sharing Your Information

We do not sell your personal data. We only share information with third-party service providers who assist us in operating our platform:

• Clerk: For secure authentication and user management.
• Paddle.com: For payment processing, invoice generation, tax compliance, and billing management.
• Google Cloud/Firebase: For cloud hosting, document storage, and database management.
• AI API Providers: We send prompts and reference images to AI services (like Google Gemini or OpenRouter) to generate your design outputs. No personally identifying information is sent to these APIs.

5. Data Retention & Deletion

We retain your personal data and creative generations for as long as your account is active. You have the right to request deletion of your account and all associated personal data at any time. To request data deletion, please contact us at `delete-data@chomokai.com` or through our support channel.

6. Security of Your Data

We use appropriate technical and organizational security measures to protect the security of your personal data. However, please remember that no transmission of data over the internet is 100% secure. You use the Service at your own risk.

7. Your GDPR & CCPA Rights

Depending on your location, you may have the following rights regarding your personal information:

• The right to access and receive a copy of your personal data.
• The right to rectify inaccurate personal data.
• The right to request the erasure of your personal data.
• The right to restrict or object to the processing of your data.
• The right to data portability.