Privacy Policy

1. Introduction

Welcome to BetterGen ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our image generation platform.

2. Information We Collect

2.1 Personal Information

When you create an account, we collect:

• Email address
• Full name
• Profile avatar (optional)
• Authentication credentials (password for email/password accounts, or OAuth2 tokens from Google - we do not collect your Google password)

2.2 Usage Data

We collect information about how you use our service:

• Image generation prompts and parameters
• Generated images and input images
• Templates created, favorited, and used
• Credit transactions and balance history
• Withdrawal requests and payment information
• Share link clicks and conversions

2.3 Analytics Data

For share link tracking, we collect:

• Hashed IP addresses (SHA-256 for privacy protection)
• User agent information
• Referrer information
• Click timestamps (retained for 3 months)

3. How We Use Your Information

We use your information to:

• Provide and maintain our image generation service
• Process your image generation requests
• Manage your credit balance and transaction history
• Process withdrawal requests and distribute rewards
• Track template usage and attribute rewards to creators and referrers
• Improve our service and develop new features
• Send you important service notifications and updates
• Prevent fraud and ensure platform security
• Comply with legal obligations

4. Third-Party Services

4.1 Image Generation Service

We use third-party services to generate images. Your prompts and images are processed through these providers' APIs. Please review our third-party providers' privacy policies for information on how they handle data.

4.2 Supabase

We use Supabase for authentication, database storage, and file storage. Your data is stored securely in Supabase's infrastructure with industry-standard encryption and security measures.

4.3 OAuth Providers

If you sign in using Google OAuth, we receive basic profile information from Google according to their privacy policy. We only collect OAuth2 tokens, not your Google password.

5. Data Storage and Security

We implement appropriate security measures to protect your personal information:

• Row Level Security (RLS) policies to prevent unauthorized database access
• Encrypted data transmission using HTTPS
• Secure authentication with JWT tokens
• Hashed IP addresses for analytics (GDPR compliant)
• Regular security audits and updates

Your images are stored in secure cloud storage buckets with appropriate access controls.

6. Data Retention

We retain your data as follows:

• Account data: Retained while your account is active
• Generated images: Stored indefinitely or until you delete them
• Transaction history: Retained for accounting and legal purposes
• Analytics data: Share link click data retained for 3 months

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and data
• Portability: Request your data in a portable format
• Objection: Object to certain data processing activities
• Withdrawal: Withdraw consent for data processing

To exercise these rights, please contact us using the information provided below.

8. Children's Privacy

Our service is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

12. GDPR Compliance

For users in the European Economic Area (EEA):

• We process your data based on your consent, contractual necessity, or legitimate interests
• You have the right to lodge a complaint with your local data protection authority
• We use IP address hashing to ensure GDPR compliance in our analytics
• Data retention periods are limited and clearly defined

13. California Privacy Rights (CCPA)

For California residents:

• You have the right to know what personal information we collect
• You have the right to request deletion of your personal information
• You have the right to opt-out of the sale of your personal information (we do not sell personal information)
• You have the right to non-discrimination for exercising your privacy rights