Privacy Policy

We process your personal data based on the following legal grounds under GDPR:

• Contract Performance (Art. 6(1)(b) GDPR): To provide our AI image generation services
• Legitimate Interest (Art. 6(1)(f) GDPR): For service improvement, fraud prevention, and analytics
• Consent (Art. 6(1)(a) GDPR): For marketing communications and optional features
• Legal Obligation (Art. 6(1)(c) GDPR): For tax and accounting requirements

As a data subject under GDPR, you have the following rights:

• Right of Access (Art. 15): Request information about your personal data
• Right to Rectification (Art. 16): Correct inaccurate personal data
• Right to Erasure (Art. 17): Request deletion of your personal data
• Right to Restrict Processing (Art. 18): Limit how we process your data
• Right to Data Portability (Art. 20): Receive your data in a portable format
• Right to Object (Art. 21): Object to processing based on legitimate interest
• Right to Withdraw Consent: Withdraw consent for consent-based processing

To exercise these rights, contact us at privacy@genprofile.ai. We will respond within 30 days.

We implement comprehensive security measures to protect your personal data:

• Encryption: Data in transit and at rest is encrypted using industry-standard protocols
• Access Control: Strict access controls and authentication for all systems
• Regular Audits: Security assessments and vulnerability testing
• Incident Response: Procedures for data breach detection and response
• Staff Training: Regular data protection training for all personnel

When we transfer personal data outside the European Economic Area (EEA), we ensure adequate protection through:

• European Commission adequacy decisions
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules where applicable
• Additional safeguards as required by GDPR

Our service is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on our website and, where required by law, by sending you a notification. Your continued use of our service after such changes constitutes acceptance of the updated policy.