Privacy Policy

1. Introduction

Advertflair LLC ("we," "us," or "our") operates the advertflair.ai website and AI-powered product photography platform (the "Service"). This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

We are committed to protecting your privacy and maintaining the security of your information in compliance with applicable data protection laws, including GDPR, CCPA, and ISO 27001 standards.

2. Information We Collect

2.1 Personal Information

We collect several types of information for various purposes to provide and improve our Service to you:

• Contact Information: Name, email address, company name, phone number
• Account Information: Username, password (encrypted), profile preferences
• Business Information: Company details, billing address, tax identification
• Payment Information: Credit card details, billing information (processed securely through third-party payment processors)

2.2 Usage Data

We automatically collect information about how you access and use the Service:

• IP address, browser type, and version
• Pages visited, time spent on pages, and navigation paths
• Device information, operating system
• Referring/exit pages and clickstream data
• Date and time stamps of access

2.3 Project and Content Data

When you use our AI photography platform, we collect:

• Images and visual content you upload
• Project specifications, style preferences, and creative direction
• AI-generated outputs and derivatives
• Feedback, comments, and approval workflows

2.4 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to track activity on our Service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

3. How We Use Your Information

Advertflair LLC uses the collected data for various purposes:

• To provide, operate, and maintain our AI photography Service
• To process your transactions and manage your account
• To improve, personalize, and expand our Service offerings
• To train and improve our AI models (using anonymized data only)
• To communicate with you about updates, support, and marketing
• To monitor usage and analyze trends for business intelligence
• To detect, prevent, and address technical issues or fraud
• To comply with legal obligations and enforce our Terms of Service

4. Data Security

The security of your data is important to us. We are ISO 27001 certified and implement industry-standard security measures:

• End-to-end encryption for data in transit (TLS/SSL)
• AES-256 encryption for data at rest
• Multi-factor authentication (MFA) for account access
• Regular security audits and penetration testing
• Role-based access controls and principle of least privilege
• Automated backup systems with disaster recovery protocols
• SOC 2 Type II compliance (in progress)

Note: While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but maintain best-in-class practices.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

5.1 Service Providers

We engage trusted third-party companies to perform services on our behalf:

• Cloud infrastructure providers (AWS, Google Cloud)
• Payment processors (Stripe)
• Email service providers
• Analytics platforms (Google Analytics)
• Customer support tools

All service providers are bound by Data Processing Agreements (DPAs) and GDPR compliance requirements.

5.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. You will be notified of any such change.

6. Your Data Protection Rights

Depending on your location, you have certain rights regarding your personal data:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restriction: Request limitation of processing
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing for direct marketing
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at privacy@advertflair.com