Privacy Policy

1. Introduction

Welcome to GallerieAI (“we,” “our,” or “us”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered art generation platform. We are committed to protecting your privacy and ensuring the security of your personal information.

By using GallerieAI, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Personal Information

• Email address (through Google OAuth)
• Name and profile information from your authentication provider
• Avatar URL (from OAuth providers)
• Bio and personal description (optional)
• Account preferences and settings
• Art preferences and style selections
• Notification preferences (email updates, project completion, marketing)
• Payment information (processed securely through Stripe)
• Credit balance (standard and premium credits)
• Subscription tier (free/basic/premium) and status
• Onboarding completion status

2.2 Content and Usage Data

• Images you upload for AI processing and personalization
• Generated artwork and modifications
• Prompts, style preferences, and generation settings
• Art requests including type, questionnaire responses, and special requests
• Art projects with titles, descriptions, and initial vision
• “Surprise me” preferences
• Reference images and uploaded file metadata
• Email addresses for art delivery
• Generation history and model selection
• Image processing settings (mode, positioning, strength values)
• Usage patterns and interaction data with our platform
• Total projects created count
• Device information and browser data

2.3 Technical Data

• IP address and location data
• Browser type and version
• Operating system and device information
• Cookies and similar tracking technologies

3. How We Use Your Information

• Provide and maintain our AI art generation services
• Process your images using AI models through Replicate API
• Generate high-quality, print-ready artwork based on your inputs
• Process payments and manage your subscription
• Improve our AI models and service quality
• Send you service-related communications
• Provide customer support and respond to inquiries
• Detect and prevent fraud or security issues
• Comply with legal obligations

4. AI Processing and Third-Party Services

4.1 Replicate AI Processing

We use Replicate's API to process your images through state-of-the-art AI models. Your uploaded images are temporarily processed by these services to generate your personalized artwork. Replicate has their own privacy policy governing the processing of your data.

4.2 Data Storage

Your account data and generated images are stored securely using Supabase, which provides enterprise-grade security and compliance. All data is encrypted both in transit and at rest.

4.3 Payment Processing

Payment information is processed by Stripe, a PCI DSS compliant payment processor. We do not store your credit card information on our servers.

4.4 Email Services

We use Resend for transactional email delivery, including new user notifications and art request confirmations. Your email address is shared with Resend solely for delivery purposes.

4.5 Analytics and Performance

We use Vercel Analytics and Speed Insights to understand usage patterns and improve performance. These services collect anonymous usage data and do not track personally identifiable information.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party services necessary to provide our services:
  • Replicate (AI image processing)
  • Supabase (data storage and authentication)
  • Stripe (payment processing)
  • Resend (email delivery)
  • Vercel (hosting and analytics)
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Consent: With your explicit consent for other purposes

6. Data Security

We implement industry-standard security measures to protect your information:

• End-to-end encryption for data transmission
• Secure data storage with row-level security (RLS)
• Regular security audits and monitoring
• Access controls and authentication protocols
• Compliance with data protection regulations

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request copies of your personal data
• Rectification: Request correction of inaccurate information
• Erasure: Request deletion of your personal data
• Portability: Request transfer of your data in a structured format
• Objection: Object to processing of your personal data
• Withdrawal: Withdraw consent at any time

8. Data Retention

We retain your personal information only as long as necessary to provide our services and fulfill legal obligations. Generated artwork and account data are retained while your account is active and for a reasonable period afterward for backup and legal purposes. You may request deletion of your data at any time.

9. Cookies and Tracking

We use cookies and similar technologies to enhance your experience, analyze usage, and provide personalized content. You can control cookie settings through your browser preferences.

10. Children's Privacy

GallerieAI is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will delete it immediately.

11. International Data Transfers

Your information may be transferred and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the “Last updated” date. Your continued use of our services after any changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: