Privacy Policy

1. Data Controller & Contact

For privacy questions, data requests, or account-related issues, contact us at service@happyhorse.blog. This mailbox is actively monitored, and we aim to respond to support, privacy, and billing inquiries within 3 business days.

2. Information We Collect

• Account information: email address, display name, avatar, and authentication metadata from supported sign-in methods.
• Payment and subscription metadata: billing plan, subscription status, transaction identifiers, and credit balance records. We do not store full card numbers.
• User content: prompts, uploaded images, and generated result metadata needed to process requests and display generation history.
• Usage and technical data: request logs, device/browser information, IP address, and security telemetry used for abuse prevention and service reliability.

3. How We Use Information

• Provide account login, credits, payments, and AI generation features.
• Detect fraud, abuse, and suspicious activity, and enforce platform safety rules.
• Maintain performance, debug incidents, and improve product quality.
• Provide customer support, billing support, and compliance communications.

4. Legal Bases

Where applicable, we process personal data based on one or more of the following:

• Performance of a contract (to deliver requested services).
• Legitimate interests (security, fraud prevention, service operations).
• Compliance with legal obligations (tax, accounting, and regulatory requirements).
• Consent, where required by law.

5. Sharing of Information

We share information only when necessary to run and secure the service:

• Infrastructure and data processing providers (hosting, database, storage, analytics, support tooling).
• Payment and merchant-of-record partners for checkout, invoices, tax, and subscriptions.
• AI model or media processing partners for generation requests.
• Law enforcement or regulators when legally required.

6. Retention

• Generation history is retained for up to 30 days in product views unless longer retention is required for security or legal reasons.
• Billing and transaction records may be retained for legal, tax, and accounting obligations.
• Security logs may be retained as needed to prevent fraud and investigate incidents.

7. Your Rights

Depending on your location, you may request access, correction, deletion, or export of your personal data. You may also request account deletion by contacting service@happyhorse.blog.

8. Security

We use technical and organizational safeguards, including encryption in transit, restricted access controls, and auditing mechanisms. No method of transmission or storage is completely secure, but we continuously improve our safeguards.

9. Children's Privacy

Our services are not directed to children under 13 (or a higher age where required by local law). If you believe a child submitted personal data, contact us to remove it.

10. Policy Updates

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last Updated" date and, where appropriate, by additional notice.