Privacy Policy

Last Updated: October 4, 2025

SuperImages Inc. ("we", "us", or "our") operates the superimages.app website (the "Service"). This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

We collect information that you provide directly to us, including:

• Account Information: Email address, username, and password when you create an account
• Profile Information: Display name, avatar, and other profile details you choose to provide
• Content: Text prompts, images you upload, and images generated through our Service
• Communication: Information you provide when you contact us for support or feedback

1.2 Payment Information

Payment processing is handled by Stripe. We do not store your complete credit card information. Stripe collects and processes:

• Credit card number and expiration date
• Billing address
• Payment transaction details

For more information about how Stripe handles your payment information, please see Stripe's Privacy Policy.

1.3 Automatically Collected Information

When you access our Service, we automatically collect certain information:

• Usage Data: Pages visited, features used, time spent on the Service, and interaction patterns
• Device Information: Browser type, operating system, device identifiers, and IP address
• Log Data: Server logs including IP address, browser type, pages visited, and timestamps
• Cookies and Similar Technologies: We use cookies and similar tracking technologies to track activity and store certain information

2. How We Use Your Information

We use the collected information for various purposes:

• To provide, maintain, and improve our Service
• To process your transactions and manage your subscription
• To send you technical notices, updates, security alerts, and support messages
• To respond to your comments, questions, and customer service requests
• To monitor and analyze trends, usage, and activities in connection with our Service
• To detect, prevent, and address technical issues and fraudulent activities
• To train and improve our AI models (using anonymized data)
• To send you marketing communications about new features, services, or promotions (with your consent where required)
• To comply with legal obligations

3. Data Sharing and Disclosure

3.1 Third-Party Service Providers

We may share your information with third-party service providers who perform services on our behalf:

• Stripe: Payment processing
• Supabase: Database and authentication services
• Google Cloud: AI image generation (Gemini API)
• Redis: Caching and rate limiting
• Analytics Providers: To understand how users interact with our Service

These providers are contractually obligated to use your information only for the purposes of providing their services to us.

3.2 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal process (subpoenas, court orders, etc.)
• Requests from government authorities
• Protection of our rights, property, or safety, or that of others
• Investigation of fraud or security issues

3.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

3.4 With Your Consent

We may share your information for other purposes with your explicit consent.

4. Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy. Specifically:

• Account Information: Retained until you delete your account, plus 90 days for backup purposes
• Generated Images: Stored for the duration specified in your account settings or until deletion
• Payment Records: Retained for 7 years to comply with tax and accounting requirements
• Usage Logs: Retained for 12 months for security and analytics purposes

We may also retain anonymized or aggregated data indefinitely for analytical and service improvement purposes.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Secure payment processing through Stripe

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

6. Your Rights and Choices

6.1 Account Information

You may update, correct, or delete your account information at any time by logging into your account settings.

6.2 Data Access and Portability

You have the right to request a copy of your personal information in a structured, commonly used, and machine-readable format. Contact us at [email protected] to make such a request.

6.3 Data Deletion

You may delete your account at any time through your account settings. Upon deletion:

• Your account information will be permanently deleted within 90 days
• Generated images will be deleted according to your settings
• Some information may be retained as required by law or for legitimate business purposes

6.4 Marketing Communications

You may opt out of receiving promotional emails by clicking the "unsubscribe" link in such emails or by adjusting your account settings. Note that we may still send you transactional or administrative messages.

6.5 Cookies

Most web browsers are set to accept cookies by default. You can choose to set your browser to remove or reject cookies. Please note that if you choose to disable cookies, some features of our Service may not function properly.

6.6 Do Not Track

Some browsers have a "Do Not Track" feature. At this time, we do not respond to Do Not Track signals.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country.

We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy when transferred internationally.

8. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected], and we will delete such information from our systems.

9. California Privacy Rights

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You have the right to request information about the personal information we have collected about you
• Right to Delete: You have the right to request deletion of your personal information
• Right to Opt-Out: You have the right to opt out of the sale of your personal information (we do not sell personal information)
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, please contact us at [email protected].

10. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR):

• Right of Access: Request access to your personal data
• Right to Rectification: Request correction of inaccurate personal data
• Right to Erasure: Request deletion of your personal data
• Right to Restriction: Request restriction of processing your personal data
• Right to Data Portability: Request transfer of your data to another service
• Right to Object: Object to processing of your personal data
• Right to Withdraw Consent: Withdraw consent at any time where we rely on consent

To exercise these rights, please contact us at [email protected]. You also have the right to lodge a complaint with a supervisory authority.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date at the top of this Privacy Policy
• Sending you an email notification for material changes (if you have an account)

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the new Privacy Policy.

12. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at: