Privacy Policy

Palette (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered product photography service (“the Service”).

By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with the practices described in this policy, please do not use the Service.

We collect information that you provide directly to us and information that is automatically collected when you use the Service:

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your image generation requests
• Authenticate your identity and manage your account
• Send you service-related communications (account updates, security alerts)
• Enforce our Terms of Service and prevent fraud or abuse
• Comply with legal obligations
• Analyze usage patterns to improve the Service

We do not sell your personal information to third parties. We do not use your uploaded images or generated images for training AI models or for any purpose other than providing the Service to you.

We use third-party service providers to help us operate the Service and manage your data. These third parties may collect, process, or store your information in the course of providing their services to us:

We require all third-party service providers to maintain appropriate security measures and to use your information only for the purposes of providing services to us. However, we are not responsible for the privacy practices of these third-party services, and we encourage you to review their privacy policies.

Your data is stored securely using industry-standard security measures:

• Private storage: Your uploaded images and generated images are stored in private, authenticated-access-only buckets
• Encryption: Data is encrypted in transit and at rest
• Access controls: Only you can access your images through authenticated sessions
• Secure authentication: We use secure authentication methods (OAuth and password hashing)

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

We retain your information for as long as your account is active or as needed to provide you with the Service. Specifically:

• Account information is retained while your account is active
• Uploaded images and generated images are retained until you delete them or delete your account
• Usage data may be retained for analytical purposes

When you delete your account, all associated data, including uploaded images and generated images, is permanently deleted from our systems within a reasonable timeframe.

You have the following rights regarding your personal information:

We use minimal cookies and tracking technologies:

• Session cookies: Used to maintain your authenticated session
• Essential cookies: Required for the Service to function properly

We do not use third-party advertising cookies or tracking pixels. We do not share your information with advertising networks or data brokers.

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete such information.

If you are between the ages of 13 and 18, you represent that you have your parent's or guardian's permission to use the Service.

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using the Service, you consent to the transfer of your information to these countries.

We take appropriate safeguards to ensure that your information receives an adequate level of protection regardless of where it is processed.

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, and disclose
• The right to delete your personal information
• The right to opt out of the sale of personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

To exercise these rights, please use the account deletion feature in your account settings or contact us.

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the “Last updated” date at the top of this page and, if the changes are significant, we may provide additional notice through the Service or by email.

Your continued use of the Service after such changes constitutes acceptance of the updated Privacy Policy.

If you have questions about this Privacy Policy or our data practices, please review your account settings where you can manage your data and delete your account.

For additional privacy-related inquiries, you may contact us through the Service.