Privacy Policy

1. Introduction

Halloween Spooktacular ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI portrait generation service (the "Service").

By using our Service, you consent to the data practices described in this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide when registering for an account or using our Service:

Name and email address
Account credentials (encrypted password)
Payment information (processed securely through Stripe; we do not store credit card details)
Profile information you choose to provide

2.2 User Content

When you use our Service, we collect and process:

Photographs you upload for portrait generation
AI-generated portraits and preview images
User preferences and style selections

2.3 Automatically Collected Information

We automatically collect certain technical information when you access our Service:

IP address and geolocation data
Browser type and version
Device information and operating system
Usage data (pages visited, features used, time spent)
Cookies and similar tracking technologies

3. How We Use Your Information

We use the collected information for the following purposes:

Service Provision: To provide, maintain, and improve our AI portrait generation services
Account Management: To create and manage your user account
Payment Processing: To process transactions and send purchase confirmations
Communication: To send service-related notifications, updates, and marketing communications (with your consent)
Personalization: To customize your experience and recommend styles
Analytics: To analyze usage patterns and improve our Service
Security: To detect, prevent, and address fraud, security issues, and technical problems
Legal Compliance: To comply with legal obligations and enforce our Terms of Service

4. AI Processing and Machine Learning

Important: Your uploaded photographs are processed by our AI algorithms to generate artistic portraits. We want to be transparent about this process:

Your photographs are used exclusively to generate your requested portraits
We do not use your photographs to train or improve our AI models without explicit consent
Generated portraits may exhibit similarities if created from similar source images, as this is inherent to AI technology
Your original photographs and generated portraits remain private and are not publicly accessible

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

5.1 Service Providers

We may share information with trusted third-party service providers who assist in operating our Service:

Payment processors (Stripe) for transaction processing
Cloud storage providers for secure data storage
Analytics services for usage analysis
Email service providers for communications

These service providers are contractually obligated to protect your information and use it only for the specified purposes.

5.2 Legal Requirements

We may disclose your information when required by law, such as:

To comply with legal processes, court orders, or government requests
To enforce our Terms of Service and protect our rights
To protect the safety and security of our users or the public
To prevent fraud or illegal activities

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change in ownership.

6. Data Security

We implement industry-standard security measures to protect your information:

Encryption of data in transit (SSL/TLS) and at rest
Secure authentication and password hashing
Regular security audits and vulnerability assessments
Access controls limiting employee access to personal data
Secure cloud infrastructure with redundancy and backups

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as necessary to provide our Service and fulfill the purposes outlined in this Privacy Policy:

Account information: Retained until you delete your account, plus 30 days for recovery
Uploaded photographs: Retained as long as your account is active
Generated portraits: Retained permanently for purchased downloads; previews deleted after 90 days of inactivity
Transaction records: Retained for 7 years for tax and accounting purposes
Usage logs: Retained for 2 years for analytics and security purposes

8. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

8.1 Access and Portability

You have the right to access your personal information and request a copy in a portable format.

8.2 Correction

You may update or correct your personal information through your account settings.

8.3 Deletion

You may request deletion of your account and personal data. Please note that some information may be retained for legal or legitimate business purposes.

8.4 Opt-Out

You may opt out of marketing communications by using the unsubscribe link in emails or adjusting your account preferences.

8.5 GDPR Rights (EU Users)

If you are located in the European Union, you have additional rights under GDPR, including the right to object to processing, restrict processing, and lodge complaints with supervisory authorities.

8.6 CCPA Rights (California Users)

California residents have rights under CCPA, including the right to know what personal information is collected, to delete personal information, and to opt-out of the sale of personal information (we do not sell personal information).

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

Essential Cookies: Required for basic site functionality and security
Functional Cookies: Remember your preferences and settings
Analytics Cookies: Help us understand how you use our Service
Marketing Cookies: Used to deliver relevant advertisements (with consent)

You can control cookie settings through your browser preferences. However, disabling certain cookies may limit Service functionality.

10. Children's Privacy

Our Service is not intended for children under 13 years of age (or 16 in the EU). We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately, and we will take steps to delete such information.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Service, you consent to such transfers. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

12. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of the Service after changes indicates your acceptance of the updated policy.