Privacy Policy

1.1 Personal Information You Provide

• Account Information: Name, email address, username, password
• Profile Information: Profile picture, bio, preferences
• Communication Data: Messages, feedback, support requests
• Payment Information: Billing address, payment method details (processed securely by third-party providers)
• Content Data: Text prompts, images uploaded, generated content

1.2 Automatically Collected Information

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, time spent, click patterns
• Technical Data: Log files, error reports, performance metrics
• Location Data: General geographic location based on IP address

1.3 Third-Party Information

• Social Media: Information from social media platforms when you connect accounts
• Analytics: Data from analytics providers about your interactions
• AI Processing: Data processed through third-party AI services (Google Gemini API, etc.)

2.1 Service Provision

• Provide, operate, and maintain our AI-powered services
• Process your requests and generate AI responses
• Manage your account and provide customer support
• Process payments and manage subscriptions

2.2 Service Improvement

• Analyze usage patterns to improve our services
• Develop new features and functionality
• Train and improve our AI models (with anonymized data)
• Conduct research and development

2.3 Communication

• Send service-related notifications and updates
• Respond to your inquiries and provide support
• Send marketing communications (with your consent)
• Notify you about changes to our services or policies

2.4 Legal and Security

• Comply with legal obligations and regulations
• Protect against fraud, abuse, and security threats
• Enforce our terms of service and policies
• Resolve disputes and investigate violations

3.1 Service Providers

We may share your information with trusted third-party service providers who assist us in:

• AI Processing: Google Gemini API for AI-powered responses
• Cloud Services: Hosting, storage, and computing services
• Payment Processing: Secure payment and billing services
• Analytics: Website and application analytics
• Customer Support: Help desk and support services

3.2 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal processes, court orders, or government requests
• Protect our rights, property, or safety
• Protect the rights, property, or safety of our users
• Investigate fraud, security issues, or violations of our terms

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction, subject to the same privacy protections.

4.1 Security Measures

• Encryption: Data encrypted in transit and at rest using industry-standard protocols
• Access Controls: Strict access controls and authentication mechanisms
• Regular Audits: Regular security audits and vulnerability assessments
• Secure Infrastructure: Secure cloud infrastructure with enterprise-grade security
• Employee Training: Regular security training for all personnel

4.2 Data Retention

• Account Data: Retained while your account is active and for a reasonable period after deletion
• Usage Data: Typically retained for 2-3 years for analytics and improvement purposes
• Content Data: User-generated content may be retained as specified in our terms of service
• Legal Requirements: Some data may be retained longer to comply with legal obligations

4.3 Data Deletion

When you delete your account or request data deletion, we will:

• Delete your personal information within 30 days
• Anonymize or aggregate remaining data
• Notify third-party processors to delete your data
• Retain only what is legally required

5.1 Universal Rights

• Access: Request access to your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a portable format
• Opt-out: Opt-out of marketing communications

5.2 GDPR Rights (EU Residents)

• Right to Object: Object to processing based on legitimate interests
• Right to Restrict: Restrict processing in certain circumstances
• Right to Withdraw Consent: Withdraw consent for consent-based processing
• Right to Lodge Complaints: File complaints with supervisory authorities

5.3 CCPA Rights (California Residents)

• Right to Know: Know what personal information is collected and how it's used
• Right to Delete: Request deletion of personal information
• Right to Opt-out: Opt-out of the sale of personal information
• Right to Non-discrimination: Not be discriminated against for exercising rights

5.4 How to Exercise Your Rights

To exercise your privacy rights, you can:

• Email us at: privacy@alexzo.com
• Use our online privacy request form
• Contact us through your account settings
• Write to us at our mailing address (see contact section)

6.1 Types of Cookies We Use

• Essential Cookies: Required for basic website functionality
• Performance Cookies: Help us understand how visitors use our site
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used to deliver relevant advertisements

6.2 Third-Party Tracking

We use third-party services that may track your activity:

• Google Analytics: Website analytics and performance tracking
• Social Media Pixels: Track interactions with social media content
• Advertising Networks: Deliver targeted advertisements

6.3 Managing Cookies

You can control cookies through:

• Browser settings to block or delete cookies
• Our cookie consent banner
• Opt-out tools provided by advertising networks
• Privacy settings in your account

9.1 AI Service Providers

• Google Gemini API: Powers our AI responses and content generation
• OpenAI Services: Additional AI capabilities and processing
• Other AI Providers: Various specialized AI services as needed

9.2 Infrastructure Providers

• Vercel: Website hosting and deployment
• Supabase: Database and authentication services
• Cloudinary: Image and media processing

9.3 Analytics and Marketing

• Google Analytics: Website analytics and user behavior
• Social Media Platforms: Social sharing and authentication
• Email Services: Transactional and marketing emails

Data Protection Officer

Company Information

Response Time

We aim to respond to all privacy-related inquiries within:

• General Inquiries: 48 hours
• Data Subject Requests: 30 days (as required by law)
• Urgent Security Issues: 24 hours

12.1 Contractual Necessity

Processing necessary for the performance of our contract with you, including:

• Providing our AI services
• Managing your account
• Processing payments

12.2 Legitimate Interests

Processing based on our legitimate interests, including:

• Improving our services
• Security and fraud prevention
• Analytics and research

12.3 Consent

Processing based on your explicit consent for:

• Marketing communications
• Optional features
• Cookies and tracking

12.4 Legal Compliance

Processing necessary to comply with legal obligations, including:

• Tax and accounting requirements
• Law enforcement requests
• Regulatory compliance