Privacy Policy

1. Introduction

Paintepedia ("we", "our", or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at paintepedia.com (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

When you create an account or use our Service, we collect information that you provide directly:

• Account Information: Name, email address, and password (encrypted)
• Payment Information: Processed securely through Stripe (we do not store credit card numbers)
• Profile Information: Any additional information you choose to provide

2.2 OAuth Authentication

If you sign in using Google OAuth, we receive:

• Your name as provided by Google
• Your email address
• Your Google profile picture (optional)
• A unique identifier from Google (not your password)

2.3 Automatically Collected Information

When you use the Service, we automatically collect certain information:

• Usage Data: Pages viewed, features used, search queries, and time spent on the Service
• Device Information: Browser type, operating system, IP address, and device identifiers
• Log Data: Server logs including access times, error reports, and system activity
• Cookies and Similar Technologies: Session cookies, authentication tokens, and preferences

3. How We Use Your Information

We use the information we collect to:

• Provide the Service: Create and manage your account, process subscriptions, and deliver content
• Improve the Service: Analyze usage patterns, develop new features, and enhance user experience
• Communicate with You: Send account notifications, subscription updates, and respond to inquiries
• Process Payments: Handle billing and subscription management through Stripe
• Ensure Security: Detect fraud, prevent abuse, and protect against security threats
• Legal Compliance: Comply with legal obligations and enforce our Terms of Service
• Analytics: Understand how users interact with the Service to improve performance and features

4. Information Sharing and Disclosure

4.1 Third-Party Service Providers

We share information with trusted third-party service providers who assist in operating our Service:

• Stripe: Payment processing and subscription management
• Vercel: Hosting and infrastructure services
• Neon (PostgreSQL): Database hosting and storage
• Google: OAuth authentication services

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal processes (subpoenas, court orders)
• Government or regulatory requests
• Protection of our rights, property, or safety
• Investigation of fraud or security issues

4.3 Business Transfers

If Paintepedia is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different Privacy Policy.

4.4 No Selling of Personal Information

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5. Data Storage and Security

5.1 Data Storage

Your data is stored on secure servers provided by Neon (PostgreSQL) and Vercel. Our infrastructure is located in the United States and complies with industry-standard security practices.

5.2 Security Measures

We implement appropriate technical and organizational measures to protect your information:

• Passwords are encrypted using industry-standard hashing (bcrypt)
• Data transmission is secured using SSL/TLS encryption
• Access to personal data is restricted to authorized personnel only
• Regular security audits and monitoring
• Secure payment processing through PCI-compliant Stripe

5.3 Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you cancel your account, we may retain certain information for:

• Legal compliance and tax purposes (typically 7 years)
• Fraud prevention and dispute resolution
• Enforcing our Terms of Service

6. Cookies and Tracking Technologies

6.1 Types of Cookies We Use

• Essential Cookies: Required for authentication and basic functionality
• Session Cookies: Temporary cookies that expire when you close your browser
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand how users interact with the Service

6.2 Managing Cookies

You can control cookies through your browser settings. However, disabling certain cookies may limit your ability to use some features of the Service. Essential authentication cookies are required for the Service to function.

7. Your Privacy Rights

7.1 Access and Update

You can access and update your account information at any time through your account settings page.

7.2 Data Portability

You have the right to request a copy of your personal data in a structured, machine-readable format.

7.3 Deletion

You can request deletion of your account and associated data by contacting us at support@paintepedia.com. We will delete your information within 30 days, except where we are required to retain it for legal purposes.

7.4 Marketing Communications

You can opt out of marketing emails by clicking the "unsubscribe" link in any marketing email. Note that you will still receive transactional emails related to your account and subscription.

7.5 Do Not Track

Our Service does not currently respond to "Do Not Track" browser signals, but we provide you with options to control cookies and tracking as described above.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about the personal data we collect, use, and disclose
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do not sell personal information, so opt-out does not apply
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise these rights, contact us at support@paintepedia.com with "CCPA Request" in the subject line.

9. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing of your data
• Right to Withdraw Consent: Withdraw consent for data processing

To exercise these rights, contact us at support@paintepedia.com. You also have the right to lodge a complaint with your local data protection authority.

10. Children's Privacy

Our Service is intended for professional painters and is not directed to children under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately and we will delete it.

11. Third-Party Links

Our Service may contain links to third-party websites or services (such as paint manufacturer websites). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

12. International Data Transfers

Your information may be transferred to and processed in the United States, where our servers are located. By using the Service, you consent to the transfer of your information to the United States. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the updated Privacy Policy on this page
• Updating the "Last updated" date at the top of this page
• Sending an email notification for significant changes

Your continued use of the Service after changes are posted constitutes acceptance of the updated Privacy Policy.

14. Data Breach Notification

In the unlikely event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law, typically within 72 hours of becoming aware of the breach.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us: