Privacy Policy

1. Introduction

Welcome to Gallery Egg (“we,” “our,” or “us”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered art generation platform. We are committed to protecting your privacy and ensuring the security of your personal information.

By using Gallery Egg, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Personal Information

• Email address (through Google OAuth authentication)
• Name and profile information from your Google account
• Account preferences and settings
• Payment information (processed securely through Stripe)

2.2 Content and Usage Data

• Images you upload for AI processing
• Generated artwork and modifications
• Prompts, style preferences, and generation settings
• Usage patterns and interaction data with our platform
• Device information and browser data

2.3 Technical Data

• IP address and location data
• Browser type and version
• Operating system and device information
• Cookies and similar tracking technologies

3. How We Use Your Information

• Provide and maintain our AI art generation services
• Process your images using FLUX and SDXL AI models through Replicate API
• Generate high-quality, print-ready artwork based on your inputs
• Process payments and manage your subscription
• Improve our AI models and service quality
• Send you service-related communications
• Provide customer support and respond to inquiries
• Detect and prevent fraud or security issues
• Comply with legal obligations

4. AI Processing and Third-Party Services

4.1 Replicate AI Processing

We use Replicate's API to process your images through state-of-the-art AI models including FLUX (Schnell, Dev, Pro) and SDXL. Your uploaded images are temporarily processed by these services to generate your personalized artwork. Replicate has their own privacy policy governing the processing of your data.

4.2 Data Storage

Your account data and generated images are stored securely using Supabase, which provides enterprise-grade security and compliance. All data is encrypted both in transit and at rest.

4.3 Payment Processing

Payment information is processed by Stripe, a PCI DSS compliant payment processor. We do not store your credit card information on our servers.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party services (Replicate, Supabase, Stripe) necessary to provide our services
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Consent: With your explicit consent for other purposes

6. Data Security

We implement industry-standard security measures to protect your information:

• End-to-end encryption for data transmission
• Secure data storage with row-level security (RLS)
• Regular security audits and monitoring
• Access controls and authentication protocols
• Compliance with data protection regulations

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request copies of your personal data
• Rectification: Request correction of inaccurate information
• Erasure: Request deletion of your personal data
• Portability: Request transfer of your data in a structured format
• Objection: Object to processing of your personal data
• Withdrawal: Withdraw consent at any time

8. Data Retention

We retain your personal information only as long as necessary to provide our services and fulfill legal obligations. Generated artwork and account data are retained while your account is active and for a reasonable period afterward for backup and legal purposes. You may request deletion of your data at any time.

9. Cookies and Tracking

We use cookies and similar technologies to enhance your experience, analyze usage, and provide personalized content. You can control cookie settings through your browser preferences.

10. Children's Privacy

Gallery Egg is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will delete it immediately.

11. International Data Transfers

Your information may be transferred and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the “Last updated” date. Your continued use of our services after any changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: