GDPR Policy

2.1 Contractual Necessity

We process your data to perform our contract with you, including:

• Creating and managing your account
• Processing your artwork generations
• Processing purchases and payments
• Fulfilling print orders
• Processing artist commissions and payouts

2.2 Legitimate Interests

We process data for our legitimate business interests, including:

• Improving and optimizing our platform
• Preventing fraud and ensuring security
• Analyzing usage patterns
• Sending important service notifications

2.3 Consent

Where we rely on consent, you have the right to withdraw it at any time. This includes:

• Marketing communications (if applicable)
• Optional profile information
• Cookie preferences

2.4 Legal Obligations

We may process data to comply with legal obligations, such as:

• Tax and accounting requirements
• Financial record keeping
• Responding to legal requests

3.1 Right to Be Informed

You have the right to be informed about how we collect and use your personal data. This information is provided in our Privacy Policy and this GDPR Policy.

3.2 Right of Access

You have the right to request a copy of the personal data we hold about you (a "data subject access request"). This includes:

• What personal data we hold
• Why we are processing it
• Who we share it with
• How long we keep it

We will respond to your request within one month. If your request is complex, we may extend this by a further two months, and we will inform you of this.

3.3 Right to Rectification

You have the right to have inaccurate personal data corrected and incomplete data completed. You can update most of your information directly through your account settings, or you can contact us to request corrections.

3.4 Right to Erasure ("Right to Be Forgotten")

You have the right to request deletion of your personal data in certain circumstances, including when:

• The data is no longer necessary for the purpose it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed
• The data must be erased to comply with a legal obligation

Note: We may not be able to delete all data if we have a legal obligation to retain it (e.g., financial records for tax purposes).

3.5 Right to Restrict Processing

You have the right to request that we restrict processing of your personal data in certain circumstances, such as:

• You contest the accuracy of the data
• Processing is unlawful and you oppose erasure
• We no longer need the data but you need it for legal claims
• You have objected to processing pending verification

3.6 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller. This applies to:

• Data you provided to us
• Data processed by automated means
• Data processed based on consent or contract

3.7 Right to Object

You have the right to object to processing of your personal data when:

• Processing is based on legitimate interests
• Processing is for direct marketing purposes
• Processing is for scientific/historical research or statistical purposes

If you object, we will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

3.8 Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. Currently, we do not use automated decision-making that would fall under this category.

6.1 Account Data

Retained while your account is active. Deleted or anonymized within 30 days of account deletion, except where legal obligations require longer retention.

6.2 Financial Records

Retained for 7 years as required by UK tax and accounting laws.

6.3 Generated Artwork

Retained while your account is active. You can request deletion of specific generations, subject to any purchase obligations.

6.4 Purchase Records

Retained for 7 years for accounting and legal purposes.