securityPrivacy Policy

1. Introduction

Altimage ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered image description service.

By using our Service, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Account Information

• Personal Details: Name, email address, company information
• Payment Information: Credit card details (processed securely by Stripe)
• Account Credentials: Username, encrypted password

2.2 Service Usage Data

• API Usage: Number of requests, response times, error rates
• Billing Events: Created and retrieved description counts
• Technical Logs: IP addresses, user agents, timestamps

2.3 Content Data

• Images: Product images you submit for description generation
• Generated Descriptions: AI-created text descriptions
• Metadata: Image specifications, processing parameters

2.4 Automatically Collected Information

• Device Information: Browser type, operating system, device identifiers
• Usage Analytics: Pages visited, features used, session duration
• Cookies: Session management, preferences, analytics

3. How We Use Your Information

3.1 Service Provision

• Generate AI-powered image descriptions
• Process API requests and deliver responses
• Manage user accounts and authentication
• Provide customer support and technical assistance

3.2 Billing and Payment

• Calculate usage-based charges
• Generate and send invoices
• Process payments through Stripe
• Maintain billing history and records

3.3 Service Improvement

• Analyze usage patterns to improve AI models
• Monitor system performance and reliability
• Develop new features and capabilities
• Conduct security monitoring and threat detection

3.4 Legal Compliance

• Comply with applicable laws and regulations
• Respond to legal requests and court orders
• Protect our rights and prevent fraud
• Enforce our Terms of Service

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties.

4.1 Service Providers

We may share information with trusted third-party service providers:

• Stripe: Payment processing and billing
• Cloud Infrastructure: Hosting and data storage
• Analytics Providers: Service usage analysis
• Support Tools: Customer service platforms

4.2 Legal Requirements

We may disclose information when required by law or to:

• Comply with legal process or government requests
• Protect our rights, property, or safety
• Prevent fraud or security threats
• Enforce our Terms of Service

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to this Privacy Policy.

5. Data Security

5.1 Security Measures

• Encryption: All data in transit and at rest is encrypted
• Access Controls: Role-based access with multi-factor authentication
• Regular Audits: Security assessments and penetration testing
• Monitoring: 24/7 security monitoring and incident response

5.2 Image Processing Security

• Images are processed in secure, isolated environments
• Temporary processing files are immediately deleted
• No unauthorized access to your image content
• Secure API endpoints with authentication

6. Data Retention

6.1 Retention Periods

• Account Data: Retained while your account is active
• Images: Deleted immediately after processing (not stored)
• Generated Descriptions: Retained for service provision
• Billing Records: Retained for 7 years for legal compliance
• Usage Logs: Retained for 2 years for analytics

6.2 Data Deletion

Upon account termination, we will:

• Delete your account data within 30 days
• Retain billing records as required by law
• Remove personal identifiers from analytics data
• Securely dispose of all associated data

7. Your Privacy Rights

7.1 Access and Portability

• Request a copy of your personal data
• Export your generated descriptions
• Download your usage and billing history

7.2 Correction and Updates

• Update your account information
• Correct inaccurate personal data
• Modify communication preferences

7.3 Deletion and Restriction

• Request deletion of your account and data
• Restrict processing of your information
• Object to certain data processing activities

7.4 GDPR Rights (EU Residents)

If you are in the European Union, you have additional rights including:

• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge complaints with supervisory authorities

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses for EU data transfers
• Adequacy decisions where applicable
• Vendor certifications and compliance programs

9. Cookies and Tracking

9.1 Types of Cookies

• Essential Cookies: Required for basic site functionality
• Analytics Cookies: Help us understand site usage
• Preference Cookies: Remember your settings and preferences

9.2 Cookie Management

You can control cookies through your browser settings. Note that disabling essential cookies may affect site functionality.

10. Children's Privacy

Our Service is not intended for children under 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will delete it immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be:

• Posted on this page with an updated date
• Communicated via email for material changes
• Effective immediately upon posting unless otherwise stated

We encourage you to review this policy regularly.

12. Contact Information

For privacy-related questions or to exercise your rights, contact us:

13. Legal Basis for Processing (GDPR)

We process your personal data based on:

• Contract Performance: To provide our services
• Legitimate Interests: For analytics and service improvement
• Legal Obligation: For compliance and record-keeping
• Consent: For marketing communications (where required)