https://altvision.se/privacy

Privacy Policy
Last updated: February 1, 2025

This privacy notice explains how Altvision collects and protects your information.

Table of Contents
1. What Information Do We Collect?
2. How Do We Process Your Information?
3. Data Sharing and Third Parties
4. International Data Transfers
5. Security Measures
6. Your Privacy Rights
7. Data Retention
8. Children's Privacy
9. Changes to Privacy Policy

1. What Information Do We Collect?
   Personal Information You Provide
   When you use our Services, you may voluntarily provide:

Name and email address (when signing in with Google, Apple, or other providers)
Profile information and preferences
Collaboration settings and shared content
Payment information for premium features
Communications with our support team
Information Automatically Collected
When you use our Services, we automatically collect:

Device identifiers (type, model, OS version)
IP address and network information
Browser type and settings
App usage statistics and interaction data
Performance metrics and crash reports
Approximate location (based on IP address)
Cookies and Tracking
We use cookies and similar technologies to:

Maintain your session and preferences
Analyze service usage and performance
Enhance security and prevent fraud
Provide personalized features
Remember your login status

1. How Do We Process Your Information?
   Core Services
   We process your information to:

Provide and improve our image generator services
Power AI features and smart suggestions
Enable collaboration and sharing features
Process payments and subscriptions
Authenticate users and maintain security
Send important service notifications
Legal Bases for Processing
We process your data under these legal bases:

Performance of our contract with you
Your consent where required
Our legitimate business interests
Legal obligations we must comply with
Protection of vital interests

1. Data Sharing and Third Parties
   Third-Party Service Providers
   We share data with these trusted providers:

Cloud storage providers (AWS, Google Cloud)
Analytics services (Google Analytics, PostHog)
Payment processors (Stripe)
Authentication providers (Auth0)
Customer support tools (Zendesk)
Email service providers (SendGrid)
Data Protection Requirements
All third-party providers must:

Sign data processing agreements
Maintain strict security standards
Process data only for specified purposes
Comply with privacy laws and regulations
Support data subject rights

1. International Data Transfers
   Data Transfer Mechanisms
   We protect international transfers through:

Standard Contractual Clauses (SCCs)
Binding Corporate Rules
Privacy Shield certification where applicable
Data Transfer Impact Assessments
Additional safeguards as required
Storage Locations
Your data may be processed in:

United States
European Union
United Kingdom
Other countries with adequate protection

1. Security Measures
   Technical Safeguards
   We protect your data using:

End-to-end encryption for sensitive data
Multi-factor authentication
Regular security audits and testing
Intrusion detection systems
Automated backup systems
Data Breach Procedures
In case of a data breach, we will:

Notify affected users within 72 hours
Investigate and remediate the breach
Inform relevant authorities
Provide guidance on protecting your data
Take steps to prevent future incidents

1. Your Privacy Rights
   GDPR Rights (EU/UK Users)
   You have the right to:

Access your personal data
Request data correction or deletion
Restrict or object to processing
Data portability
Withdraw consent
Lodge complaints with authorities
CCPA Rights (California Users)
California residents can:

Request data access and deletion
Opt-out of data sales
Non-discrimination protection
Designate authorized agents
Request data disclosure reports

1. Data Retention
   Retention Periods
   We retain your data for:

Active accounts: As long as account is active
Deleted accounts: 30 days after deletion
Backups: Up to 90 days
Legal requirements: As required by law
Analytics: In anonymized form for up to 2 years

1. Children's Privacy
   Age Restrictions
   Our service is not intended for children:

Minimum age requirement: 16 years
No intentional collection of children's data
Immediate deletion if discovered
Parental consent requirements
Special protections for young users

1. Changes to Privacy Policy
   Update Procedures
   When we update this policy:

Notice of material changes
Email notifications for significant updates
30-day notice period when possible
Version history maintained
User consent for material changes
Contact Us About Privacy
If you have any questions about this Privacy Policy, please contact us:

• Email: privacy@cstate.se
• Support: support@cstate.se