Privacy Policy

We collect information that you provide directly to us, including:

• Account information (name, email address, password)
• Profile information (profile picture, bio, preferences)
• Design projects and files you create or upload
• Communications with us
• Payment information (processed securely through third-party providers)

We also automatically collect certain information about your device and how you interact with our Service, including IP address, browser type, operating system, and usage data.

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process transactions and send related information
• Send technical notices, updates, security alerts, and support messages
• Respond to your comments, questions, and customer service requests
• Communicate with you about products, services, offers, and events
• Monitor and analyze trends, usage, and activities
• Detect, prevent, and address technical issues and fraudulent activity
• Personalize and improve your experience

We do not sell your personal information. We may share your information in the following circumstances:

• With your consent or at your direction
• With service providers who perform services on our behalf
• To comply with laws or respond to legal requests
• To protect the rights and safety of Ijodly, our users, and the public
• In connection with a merger, sale, or acquisition of all or part of our company

When you share or publish content through our Service, that information may be visible to other users in accordance with your privacy settings.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

These measures include encryption of data in transit and at rest, regular security assessments, and access controls. However, no method of transmission over the Internet or electronic storage is 100% secure.

We cannot guarantee absolute security, but we continuously work to improve our security practices.

We retain your personal information for as long as necessary to provide our Service and fulfill the purposes outlined in this Privacy Policy.

We may also retain and use your information to comply with legal obligations, resolve disputes, and enforce our agreements.

When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it by law.

Depending on your location, you may have certain rights regarding your personal information:

• Access: You can request access to the personal information we hold about you
• Correction: You can request that we correct inaccurate information
• Deletion: You can request deletion of your personal information
• Portability: You can request a copy of your information in a portable format
• Objection: You can object to certain processing of your information
• Restriction: You can request that we limit the processing of your information

You can exercise these rights through your account settings or by contacting us. You can also opt out of promotional communications at any time.

We use cookies and similar tracking technologies to collect information about your browsing activities. Cookies are small data files stored on your device.

We use cookies for:

• Authentication and security
• Preferences and settings
• Analytics and performance
• Advertising and marketing

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our Service.

Our Service may contain links to third-party websites and services. We are not responsible for the privacy practices of these third parties.

We encourage you to read the privacy policies of any third-party services you interact with. We integrate with third-party services for authentication, payment processing, and analytics.

These third parties have their own privacy policies governing their use of your information.

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13.

If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.

If you believe we have collected information from a child under 13, please contact us immediately.

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from your country.

We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy.

By using our Service, you consent to the transfer of your information to other countries.

We use the following third-party services to operate the Service. Each processor receives only the data necessary for the function it performs and is contractually obliged to protect that data:

• DigitalOcean Spaces / Amazon S3 — object storage for user uploads, designs, and template assets
• Google Identity Services — authentication when you choose "Continue with Google"
• Meta / Facebook Login — authentication when you choose "Continue with Facebook"
• Google Gemini — AI text generation (prompts and outputs only; no profile data)
• fal.ai — AI image generation and editing (prompts and seed images only; no profile data)
• Click and Payme — local Uzbek payment processing for paid plans
• MongoDB Atlas / self-hosted MongoDB — primary database
• Redis — short-lived cache layer (session tokens, AI response cache)
• Telegram — operational alerts and encrypted database backups to a private channel

A current list of subprocessors is available on request. We notify users of material changes to this list in advance via the same channel as Policy updates.

If you are a California resident, the California Consumer Privacy Act and California Privacy Rights Act grant you specific rights regarding your personal information. These are in addition to the general rights described elsewhere in this Policy.

You have the right to:

• Know what personal information we collect, use, disclose, and sell or share
• Delete personal information we collected from you, subject to limited exceptions
• Correct inaccurate personal information
• Opt-out of the sale or sharing of personal information — we do not sell personal information for monetary consideration; we do not share it for cross-context behavioural advertising
• Limit the use and disclosure of sensitive personal information — we do not collect sensitive personal information beyond what is necessary to provide the Service
• Non-discrimination for exercising any of the rights above

To exercise any of these rights, contact ijodly@protonmail.com from the email address associated with your account, or submit a request through your account settings. We will verify your identity before fulfilling the request and respond within 45 days, with one possible 45-day extension.

You may also designate an authorised agent to make a request on your behalf. We require a signed written authorisation and may verify the agent's identity.

If you are located in the EEA, the United Kingdom, Switzerland, or another jurisdiction with a comprehensive data-protection regime, you have the right to:

• Access the personal data we hold about you
• Request rectification of inaccurate or incomplete data
• Request erasure (the "right to be forgotten") subject to legal retention requirements
• Request restriction of processing
• Data portability — receive your data in a structured, commonly used machine-readable format
• Object to processing based on legitimate interests
• Withdraw consent at any time where processing is based on consent
• Lodge a complaint with your local supervisory authority

The legal basis for our processing is either (i) performance of the contract with you, (ii) our legitimate interests in operating and improving the Service, or (iii) your consent (e.g. for non-essential cookies).

The data controller is the Ijodly operator (contact: ijodly@protonmail.com). Where we transfer personal data outside the EEA, we rely on Standard Contractual Clauses or an adequacy decision.

The Service is not directed to children under the age of 13 (or under 16 in jurisdictions where that is the relevant threshold for digital consent). We do not knowingly collect personal information from children below the applicable age.

If you believe a child has provided us with personal information, please contact ijodly@protonmail.com and we will promptly delete the information and terminate any associated account.

Parents and guardians may contact us to review, modify, or delete the personal information of their minor child.

We retain personal information only for as long as necessary to fulfil the purposes set out in this Policy, unless a longer retention period is required or permitted by law. Indicative retention periods:

• Account profile (email, name, hashed password) — for the lifetime of the account, plus 30 days after deletion to allow recovery
• Designs and uploaded assets — for the lifetime of the account; soft-deleted items kept for 30 days before permanent deletion
• Auth and session logs — 90 days
• Application error logs (no personal content) — 30 days
• Audit logs (admin actions, security events) — 12 months
• Payment records and invoices — 7 years (regulatory requirement)
• Encrypted backups — rolling 30-day window

After the applicable retention period, data is either anonymised or permanently deleted in line with our backup rotation schedule.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes indicates your acceptance of the updated policy.

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

Email: ijodly@protonmail.com