Privacy Policy

1. Introduction

Pink Spade ("we," "our," or "us") is operated by Pink Spade Inc.. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered creative asset generation service (the "Service").

By accessing or using Pink Spade, you agree to this Privacy Policy. If you do not agree with the terms of this policy, please do not access the Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Name and email address (via Google OAuth or email signup)
• Profile picture (if provided through OAuth)
• Account preferences and settings

2.2 Usage Data

We automatically collect:

• Service usage logs (features used, generation requests, credit consumption)
• Device information (browser type, operating system, screen resolution)
• IP address and approximate geographic location
• Cookies and similar tracking technologies

2.3 Content Data

When you use the Service, we process:

• Text prompts and creative direction inputs
• Uploaded images (product photos, brand assets)
• Brand DNA data (colors, typography, tone extracted from websites)
• Generated images and creative assets

2.4 Payment Information

Payment processing is handled by Polar.sh ("Polar"), our third-party payment processor. We do not store your full credit card number. We receive transaction confirmation, plan type, and billing history from Polar.

3. How We Use Your Information

We use the collected information to:

• Provide, operate, and maintain the Service
• Process your image generation requests using AI models
• Manage your account, credits, and subscription
• Improve and personalize the user experience
• Communicate with you about updates, support, and promotional offers
• Monitor usage patterns and prevent abuse
• Comply with legal obligations

4. Third-Party Services

We share data with the following third-party service providers:

• Fal.ai — AI model hosting and image generation. Your prompts and uploaded images are sent to Fal.ai for processing.
• Supabase — Authentication, database, and file storage.
• Polar.sh — Payment processing and subscription management.
• Vercel — Application hosting and edge network delivery.

Each third-party service has its own privacy policy governing the use of your information. We encourage you to review their respective policies.

5. Data Retention

We retain your account information for as long as your account is active. Generated images are stored temporarily for delivery and may be cached for up to 30 days. You may delete your account and associated data at any time by contacting us.

Usage logs and analytics data are retained for up to 24 months for service improvement purposes, after which they are anonymized or deleted.

6. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing activities
• Data portability (receive your data in a structured format)
• Withdraw consent at any time

To exercise any of these rights, please contact us at jsagi2000@gmail.com.

8. Cookies

We use essential cookies for authentication and session management. We may also use analytics cookies to understand how the Service is used. You can control cookie preferences through your browser settings.

9. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 16, we will promptly delete it.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States, where our servers and third-party providers are located. We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us: