Privacy Policy – Areze AI Creative Studio

4. Data Retention and Deletion Policy

We retain personal data as long as necessary to provide our Services, and as required for legal, regulatory, or tax obligations. User-generated content will be retained as long as the user maintains an active account.

Specific Retention Periods:

• Account data: Until account deletion + 1 year for recovery
• Payment records: 7 years for tax/legal compliance
• Usage logs: Until account deletion + 30 days
• Marketing communications: Until unsubscribe

Your Rights: You may request deletion of your personal data or user-generated content at any time. Users have the option to delete content directly via the platform, or they can request deletion by contacting support@areze.com. We will respond to your request within 30 days. Please note that deletion may result in permanent loss of access to your account and associated content.

Retention of Non-Personal Metadata: Aggregated or anonymized usage data may be retained indefinitely for analytics, research, or statistical purposes.

5. User Rights (GDPR & CCPA)

• Access & Portability: Request a copy of your personal data in a portable format.
• Correction: Update inaccurate or incomplete information.
• Deletion: Request deletion of personal data.
• Opt-Out of Sale (CCPA): Users in California may opt-out of data sharing for advertising purposes.
• Object to Processing: Users may object to processing based on legitimate interests or direct marketing.
• Restrict Processing: Request limitation of processing in certain circumstances.
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
• Automated Decision-Making / Profiling: Users have the right to know if automated processing significantly affects them and to request human review.

To exercise these rights, contact us at support@areze.com. We may need to verify your identity before processing your request.

6. Security of Your Information

We implement reasonable administrative, technical, and physical measures to protect your information against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Employee training on data protection

However, no system is completely secure, and we cannot guarantee absolute security.

Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant supervisory authorities within the timeframes required by applicable law (typically within 72 hours of discovery).

7. Business Transfers

In the event of a merger, acquisition, or sale of assets, we will notify you via email and update our Privacy Policy. Your personal data will be treated in accordance with applicable data protection laws, and you will have the same rights with respect to the new entity.

8. Children's Privacy

Our platform is not intended for children under 13 (or the applicable age in your jurisdiction - 16 in the EU). We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will delete it promptly and may suspend the associated account.

9. Marketing Communications

You may choose to receive marketing communications from us. You can opt-out at any time via:

• The unsubscribe link in promotional emails
• Your account settings on our platform
• Contacting support@areze.com

Please note that even if you opt-out of marketing communications, we may still send you service-related notices.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. We will notify you of significant changes by email or via a prominent notice on our platform before the changes take effect. Your continued use of Areze after changes are made constitutes your acceptance of the updated Privacy Policy.