Varyant ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (the "Service").

Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

We collect information you directly provide to us, including:

Account Information: Name, email address, and profile information when you create an account via Google OAuth
Payment Information: Billing address and payment details (processed by our third-party payment processor)
User Content: Images you upload for processing
Communications: Information you provide when contacting support or providing feedback

1.2 Information Collected Automatically

When you use our Service, we automatically collect certain information:

Device Information: Browser type, operating system, device identifiers
Usage Data: Pages visited, features used, time spent on the Service
Log Data: IP address, access times, referring URLs
Cookies: Session and persistent cookies for authentication and analytics

2. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the Service
Process transactions and send related information
Send technical notices, updates, and support messages
Respond to your comments, questions, and requests
Monitor and analyze trends, usage, and activities
Detect, investigate, and prevent fraudulent or unauthorized activities
Personalize and improve your experience
Comply with legal obligations

3. How We Share Your Information

We may share your information in the following circumstances:

Service Providers: With third-party vendors who perform services on our behalf (hosting, payment processing, analytics)
Legal Requirements: If required by law or in response to valid legal requests
Business Transfers: In connection with a merger, acquisition, or sale of assets
Protection: To protect the rights, property, and safety of Varyant, our users, or others
With Consent: With your explicit consent for any other purpose

We do not sell your personal information. We do not share your User Content (images) with third parties except as necessary to provide the Service.

4. Data Storage and Security

4.1 Storage. Your data is stored on secure servers provided by Google Cloud Platform. We store data in the United States, but may process data in other locations where our service providers operate.

4.2 Security Measures. We implement industry-standard security measures including:

Encryption of data in transit (TLS/SSL)
Encryption of data at rest
Regular security assessments
Access controls and authentication
Secure coding practices

4.3 Data Breach. In the event of a data breach affecting your personal information, we will notify you and relevant authorities as required by applicable law.

5. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law.

Account Data: Retained while your account is active
User Content (Free Tier): Retained for 30 days
User Content (Paid Plans): Retained according to your plan terms
Usage Data: Retained for up to 24 months for analytics
Legal Records: Retained as required by law

6. Your Rights and Choices

6.1 Access and Portability

You have the right to request access to the personal information we hold about you and to receive a copy in a portable format.

6.2 Correction

You have the right to request correction of inaccurate personal information.

6.3 Deletion

You have the right to request deletion of your personal information, subject to certain legal exceptions. You can delete your account at any time through your account settings.

6.4 Opt-Out

You may opt out of receiving promotional communications by following the unsubscribe instructions in those messages.

6.5 Cookie Preferences

Most web browsers allow you to manage cookie preferences. Note that disabling cookies may affect the functionality of the Service.

7. International Data Transfers

Your information may be transferred to, and processed in, countries other than your country of residence. These countries may have different data protection laws. When we transfer your information internationally, we implement appropriate safeguards to protect your information in accordance with this Privacy Policy.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to Know: You can request information about the categories and specific pieces of personal information we've collected about you
Right to Delete: You can request deletion of your personal information
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
Right to Opt-Out: You have the right to opt out of the "sale" of your personal information (we do not sell personal information)

To exercise these rights, please contact us at privacy@varyant.ai.

9. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

Legal Basis: We process your data based on: (a) your consent, (b) performance of a contract, (c) legitimate interests, or (d) legal obligations
Right to Access: Request a copy of your personal data
Right to Rectification: Request correction of inaccurate data
Right to Erasure: Request deletion of your data ("right to be forgotten")
Right to Restrict Processing: Request limitation of processing
Right to Data Portability: Receive your data in a structured, machine-readable format
Right to Object: Object to processing based on legitimate interests
Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, please contact us at privacy@varyant.ai. You also have the right to lodge a complaint with your local data protection authority.

10. Children's Privacy

The Service is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If we learn we have collected personal information from a child under 18, we will delete that information promptly. If you believe we have collected information from a child under 18, please contact us immediately.

11. Third-Party Services

Our Service may contain links to third-party websites and services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any information.

We use the following third-party services:

Google Cloud Platform: Infrastructure and storage
Google OAuth: Authentication
Stripe: Payment processing
Vercel: Hosting and deployment

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: privacy@varyant.ai
Website: https://www.varyant.ai
Data Protection Inquiries: privacy@varyant.ai