PRIVACY POLICY

1. Who we are

Press Pilot Pro (the "Service") is operated by [Your Company Name] ("we", "us"). This policy explains what personal data we collect, why we collect it, and what choices you have. Questions: [support email].

Two groups are covered here: operators (photo-booth and event businesses with an account) and guests (people who upload photos or place orders at an operator's event).

2. Data we collect from operators

Account data: name, business name, email address, and authentication details. If you sign in with Google, we receive your name, email address, and profile image from Google.

Billing data: subscription status, plan, and payment records. Card details are entered directly with Stripe; we never see or store full card numbers.

Content you create: events, magnet sheet designs, presets, uploaded logos and overlays, AI-generated images, price lists, and orders.

Usage data: feature and export counts, log data, IP address, browser type, and timestamps, used to operate the Service and enforce plan limits.

3. Data we collect from event guests

Photos and any text guests submit through an operator's upload page.

Optional contact details — name, email address, and mobile number — when a guest chooses to provide them for order updates or to opt in to an operator's marketing.

Basic technical data such as IP address and device type, used for security and abuse prevention.

Guests submit this data to the operator running the event. The operator decides how it is used; we process it on the operator's behalf.

4. How we use data

To provide the Service: store and display photos, build and export magnet sheets, run guest upload and display pages, process orders, and generate reports.

To bill and support accounts, prevent fraud and abuse, and comply with legal obligations.

To improve the Service through aggregated, non-identifying usage analysis.

We do not sell personal data, and we do not use guest photos to train AI models.

5. Marketing communications

Contact details captured at an event belong to the operator running that event. Operators are responsible for obtaining consent and for complying with applicable email and SMS marketing laws, including providing an opt-out in any message they send.

We may send operators service and account emails. Marketing emails from us, if any, always include an unsubscribe link.

6. Service providers

We share data only with providers that help us run the Service: Lovable Cloud / Supabase (database, file storage, authentication), Stripe (payments), Shopify (store checkout, where an operator connects a store), Google (optional sign-in), and AI image providers used by AI Studio for prompts an operator submits.

These providers process data under their own terms and only as needed to deliver their part of the Service.

7. Retention

Event photos and guest contact details are retained while the operator's account is active, so operators can reprint and re-export past events.

Operators can delete individual photos, events, contacts, and AI images from inside the app at any time; deletion removes the file from storage.

If an account is closed, its data is deleted within 30 days, except records we must keep for tax, accounting, or legal reasons.

8. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing.

Operators can exercise most of these rights directly in the app. Guests should contact the operator who ran their event first; if you cannot reach them, contact us at [support email] and we will assist.

9. Security

Data is transmitted over encrypted connections and stored with per-account access rules so one account cannot read another account's data. Access to production data is limited to staff who need it for support.

No system is perfectly secure. If a breach affects your data, we will notify affected users as required by law.

10. Cookies

We use cookies and local storage only for essential purposes: keeping you signed in, remembering interface preferences, and securing the Service. We do not use third-party advertising cookies.

11. Children

The Service is not directed to children under 13, and operators must not create accounts on their behalf. Guest photos may include minors when captured at an event; operators are responsible for obtaining any parental consent required in their jurisdiction.

12. International transfers

Our providers may process and store data in the United States and other countries. Where required, transfers rely on standard contractual clauses or equivalent safeguards.

13. Changes and contact

We may update this policy. Material changes will be announced in the app or by email. Continued use after changes take effect constitutes acceptance.

Contact: [support email], [Your Company Name], [mailing address].