Privacy Policy

1. Introduction

AI Contender ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and services.

We comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address and password when you register
• Payment Information: Billing details processed securely through Stripe
• Content: Website URLs, design briefs, and generated content you create
• Communications: Messages you send to our support team
• Marketing Preferences: Your consent to receive marketing communications

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, and actions taken
• Device Information: Browser type, operating system, and device identifiers
• Log Data: IP address, access times, and referring URLs

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send technical notices and support messages
• Respond to your comments and questions
• Send marketing communications (with your consent)
• Monitor and analyze usage patterns
• Detect and prevent fraud and abuse

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your data based on:

• Contract: Processing necessary to provide our services to you
• Consent: Where you have given explicit consent (e.g., marketing emails)
• Legitimate Interests: For fraud prevention, security, and service improvement
• Legal Obligation: To comply with applicable laws

5. Third-Party Service Providers

We share your data with trusted third-party processors who assist in operating our service. Each processor is bound by data protection agreements and GDPR compliance requirements.

5.1 Our Data Processors

• Stripe, Inc. (USA) — Payment processing.Privacy Policy
• SuperTokens, Inc. (USA) — Authentication services.Privacy Policy
• Cloudflare, Inc. (USA) — Content delivery and media storage (R2).Privacy Policy
• Neon, Inc. (USA) — Database hosting.Privacy Policy
• Vercel, Inc. (USA) — Application hosting and analytics.Privacy Policy
• Google LLC (USA) — AI/ML APIs for content generation (Gemini API).Privacy Policy

These providers are located in the United States. We rely on Standard Contractual Clauses (SCCs) and/or the EU-U.S. Data Privacy Framework for lawful data transfers.

6. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

• Account Data: Until you delete your account
• Payment Records: 7 years (legal/tax requirements)
• Generated Content: Until you delete it or your account
• Usage Logs: 90 days

7. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Revoke consent at any time

To exercise these rights, contact us at support@aicontender.pro.

8. Cookies

We use essential cookies required for authentication and security. We do not use tracking or advertising cookies.

9. Security

We implement industry-standard security measures including encryption in transit (TLS), secure authentication, and regular security assessments. However, no method of transmission over the Internet is 100% secure.

10. Children's Privacy

Our service is not intended for users under 16 years of age. We do not knowingly collect personal data from children. If we learn we have collected data from a child, we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on our service. Your continued use after changes constitutes acceptance of the updated policy.