1. Introduction

At Plushy.app ("we," "our," or "us"), we value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile applications, or any other services we offer (collectively, the "Services").

Please read this Privacy Policy carefully. By using our Services, you agree to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not access or use our Services.

2. Information We Collect

2.1 Information You Provide to Us

We collect information that you voluntarily provide to us, including:

Account Information: When you register for an account, we collect your name, email address, username, and password.
Profile Information: You may choose to provide additional information for your profile, such as a profile picture or biographical information.
User Content: We collect photos and images that you upload for transformation through our Services.
Payment Information: If you make a purchase, we collect payment information, which may include your credit card details, billing address, and other financial information. This information is processed by our payment processor and we do not store complete credit card information on our servers.
Communications: We collect information you provide when you contact us for customer support or communicate with us in any way.

2.2 Information We Collect Automatically

When you use our Services, we may automatically collect certain information, including:

Device Information: We collect information about the device you use to access our Services, including device type, operating system, unique device identifiers, and mobile network information.
Log Information: We collect log information when you use our Services, including access times, pages viewed, IP address, and the page you visited before navigating to our Services.
Usage Information: We collect information about your interactions with our Services, such as the features you use and the actions you take.
Location Information: We may collect information about your location if you give us permission to do so.
Cookies and Similar Technologies: We use cookies and similar technologies to collect information about your browsing behavior and preferences.

2.3 Cookies and Tracking Technologies

We use the following cookies and tracking technologies:

Essential Cookies: Required for authentication and session management (e.g., login sessions via Firebase Auth).
Analytics Cookies: Google Analytics (GA4, measurement ID: G-CGGSTHJY3R) to understand how visitors use our site, including pages visited, time on site, and traffic sources. Google Analytics may set cookies such as _ga and _ga_*.
Product Analytics: Mixpanel to track feature usage and improve our product experience.
Security Cookies: Google reCAPTCHA to protect against spam and abuse.
Advertising Cookies: If you arrive at our site through a paid advertisement, Meta (Facebook) Pixel or similar tracking technologies may be used to measure ad effectiveness. These technologies may collect information about your activity on our site and share it with the advertising platform.

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, blocking essential cookies may prevent you from using certain features of our Services.

2.4 Third-Party Services

Our Services integrate with the following third-party platforms:

Firebase (Google): Authentication, database, and file storage
Stripe: Payment processing
OpenAI: Image transformation (uploaded images are sent to OpenAI's API for processing)
Google (Vertex AI): Image transformation (uploaded images may be sent to Google's Gemini API for processing)
Meta (Facebook): Login authentication (if you sign in via Facebook) and advertising measurement

Each of these services has its own privacy policy governing how they handle your data.

3. How We Use Your Information

We use the information we collect for various purposes, including to:

Provide, maintain, and improve our Services
Process and complete transactions, and send you related information
Transform your uploaded photos into plushy-style images
Respond to your comments, questions, and requests
Communicate with you about products, services, offers, promotions, and events
Monitor and analyze trends, usage, and activities in connection with our Services
Detect, investigate, and prevent fraudulent transactions and other illegal activities
Personalize and improve your experience with our Services
Develop new products and services

4. How We Share Your Information

We may share your information in the following circumstances:

With Service Providers: We may share your information with third-party vendors, consultants, and other service providers who need access to such information to carry out work on our behalf.
For Legal Reasons: We may disclose your information if we believe it is necessary to comply with a legal obligation, protect and defend our rights or property, protect the safety of our users or the public, or prevent fraud or illegal activity.
With Your Consent: We may share your information when you give us permission to do so.
Business Transfers: If we are involved in a merger, acquisition, financing, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.

We do not sell your personal information to third parties.

5. Data Retention

We will retain your information for as long as your account is active or as needed to provide you with our Services. We will also retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

You can request the deletion of your account and associated data at any time. See our Data Deletion page for detailed instructions, or contact us at chloe@plushy.app.

6. Security

We take reasonable measures to help protect your personal information from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. However, no internet or email transmission is ever fully secure or error-free, so you should take special care in deciding what information you send to us electronically.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information, including:

The right to access personal information we hold about you
The right to request that we update or correct inaccurate personal information
The right to request that we delete your personal information
The right to opt out of marketing communications

To exercise these rights, please contact us at chloe@plushy.app.

8. Children's Privacy

Our Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will promptly delete that information.

9. International Data Transfers

We may transfer your personal information to countries other than the country in which you initially provided the information for the purposes described in this Privacy Policy. If we transfer your personal information to other countries, we will protect that information as described in this Privacy Policy.

10. European Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

Legal Basis: We process your personal data based on: (a) your consent, (b) the performance of a contract with you, (c) our legitimate business interests, or (d) compliance with legal obligations.
Right of Access: You can request a copy of all personal data we hold about you.
Right to Rectification: You can request that we correct inaccurate or incomplete data.
Right to Erasure: You can request that we delete your personal data. See our Data Deletion page.
Right to Restrict Processing: You can request that we limit how we use your data.
Right to Data Portability: You can request a machine-readable copy of the data you provided to us.
Right to Object: You can object to our processing of your data for direct marketing purposes.
Right to Withdraw Consent: Where we rely on your consent, you can withdraw it at any time.

To exercise any of these rights, contact us at chloe@plushy.app. We will respond within 30 days.

11. California Users (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to Know: You can request details about the categories and specific pieces of personal information we have collected about you.
Right to Delete: You can request deletion of your personal information. See our Data Deletion page.
Right to Opt-Out of Sale: We do not sell your personal information to third parties.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise your CCPA rights, contact us at chloe@plushy.app.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice to you by email, through our Services, or by other means. Your continued use of our Services after the effective date of any update to the Privacy Policy will constitute your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us at chloe@plushy.app.