Privacy Policy

This Privacy Policy explains how Schedulo ("we", "us", "our") collects, uses, discloses, and safeguards your information when you use our websites, applications, and related services (collectively, the "Services"). By using the Services, you agree to the terms of this Policy.

1. Information We Collect

• Account Information: First name, last name, email address, password (hashed), and optional profile details.
• Generated Content: Inputs (prompts) you provide for AI generation and the resulting outputs (images/text), which are processed by our AI providers.
• Security Data: Two-factor authentication (2FA) setup details and security logs to protect your account.
• Usage Data: Log data, device/browser information, IP address, timestamps, and pages or features you interact with.

2. Legal Bases (EEA/UK)

• Performance of a contract (to provide the Services).
• Legitimate interests (e.g., to secure and improve the Services).
• Consent (e.g., marketing communications where required).
• Compliance with legal obligations.

3. How We Use Information

• Operate, maintain, and improve the Services.
• Generate content using Artificial Intelligence models (e.g., Replicate).
• Authenticate users and secure accounts, detect/prevent fraud or abuse.
• Communicate service announcements and respond to inquiries.
• Comply with applicable laws and enforce our terms and policies.

4. Sharing and Disclosure

• AI Service Providers: We share prompts with providers like Replicate to generate content on your behalf.
• Service Providers: We share data with vetted vendors (e.g., Resend for emails, database providers) who process it on our behalf.
• Legal & Safety: We may disclose information to comply with law, protect rights, safety, or prevent fraud.

5. International Transfers

Your data may be processed in countries other than your own. Where required, we implement safeguards such as Standard Contractual Clauses or equivalent mechanisms.

6. Data Retention & Deletion

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Policy.

Account Deletion: When you request to delete your account, we use a "soft deletion" mechanism. This means your account is marked as inactive and inaccessible, but your email address and basic identifier remain in our system to prevent fraud, abuse of free trials, and to enforce our Terms of Service.

7. Security

We use administrative, technical, and physical safeguards (including 2FA support) designed to protect your information. However, no method of transmission or storage is completely secure.

8. Your Rights

• Access, rectification, and portability of your data.
• Request deletion (subject to our retention policies for fraud prevention).
• Withdrawal of consent where processing is based on consent.

9. Children's Privacy

Our Services are not directed to children under 13. We do not knowingly collect personal information from children.

10. Changes to this Policy

We may update this Policy from time to time. Continued use of the Services after an update constitutes acceptance of the revised Policy.

11. Contact Us

For questions or requests regarding this Policy or your data, contact us at [email protected].