Privacy Policy

1. Introduction

At Campagne (operated by BDCOM LLC, "we," "us," or "our"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, web application, and mobile applications (collectively, the "Service").

By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with this policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

We collect information that you provide directly to us:

• Account Information: Name, email address, password, and billing information when you create an account
• User Content: Images, photographs, product descriptions, and other materials you upload to the Service
• Profile Information: Preferences, settings, and other profile data
• Payment Information: Payment card details (processed securely by our payment provider)
• Communications: Information you provide when contacting support or communicating with us

2.2 Automatically Collected Information

When you use the Service, we automatically collect:

• Usage Data: Pages viewed, features used, time spent, and click patterns
• Device Information: Device type, operating system, browser type, IP address, and unique device identifiers
• Log Data: Server logs including access times, errors, and system activity
• Analytics Data: Aggregated usage statistics and performance metrics

2.3 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to collect information and improve your experience. You can control cookies through your browser settings, but some features may not function properly if you disable cookies.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Provision: To provide, operate, and maintain the Service
• AI Processing: To process your images using AI models and generate variations
• Account Management: To create and manage your account
• Payment Processing: To process subscriptions and payments
• Communication: To send you service updates, security alerts, and support messages
• Improvements: To analyze usage patterns and improve the Service
• Security: To detect, prevent, and address fraud, abuse, and security issues
• Legal Compliance: To comply with legal obligations and enforce our Terms of Service
• Analytics: To generate aggregated, anonymized analytics about service usage

4. AI Processing and Your Images

4.1 How We Process Your Images

When you upload images to the Service:

• Images are transmitted securely to our servers via HTTPS encryption
• Images are processed using third-party AI services (Replicate, OpenAI)
• Generated variations are created based on your input and stored for your access
• Processing occurs on secure servers with access controls

4.2 No AI Training Use

Important: We do NOT use your uploaded images or generated content to train AI models. Your images are used solely to provide the Service to you. We may use anonymized, aggregated usage statistics (without images) to improve service performance.

4.3 Third-Party AI Providers

We use third-party AI services to power image generation. These providers process your images according to their own privacy policies and security practices. We select providers with strong privacy and security commitments. Current providers include:

• Replicate (image generation models)
• OpenAI (image analysis and prompt generation)

5. Data Storage and Retention

5.1 Where We Store Your Data

Your data is stored on secure cloud infrastructure:

• Images: Stored in Cloudflare R2 (distributed globally)
• Database: Hosted on Cloudflare D1 (edge database)
• Infrastructure: Powered by Cloudflare Workers (serverless platform)

5.2 How Long We Retain Data

We retain your information for different periods:

• Account Data: Retained while your account is active
• Uploaded Images: Stored indefinitely for your continued access until you delete them or close your account
• Generated Images: Stored indefinitely for your continued access until you delete them or close your account
• Billing Records: Retained for 7 years for tax and legal compliance
• Log Data: Retained for 90 days
• Analytics Data: Aggregated data retained indefinitely

5.3 Data Deletion

You can delete your images and generated content at any time through the Service. Upon account deletion, we will permanently delete your User Content within 30 days, except where we are required to retain data for legal or regulatory compliance.

6. How We Protect Your Data

6.1 Security Measures

We implement industry-standard security measures to protect your information:

• Encryption in Transit: All data transmitted between your device and our servers is encrypted using HTTPS/TLS 1.3
• Encryption at Rest: Stored images and sensitive data are encrypted at rest
• Access Controls: Role-based access controls limit who can access your data
• Authentication: Secure authentication mechanisms protect account access
• API Keys: Secure API key management with rotation policies
• Infrastructure Security: Cloudflare's enterprise-grade security protections
• Monitoring: Continuous monitoring for suspicious activity and security threats
• Incident Response: Established procedures for security incident response

6.2 Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law, typically within 72 hours of discovery.

6.3 Limitations

While we implement strong security measures, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your information. You acknowledge and accept the inherent security risks of internet-based services.

7. How We Share Your Information

7.1 We Do NOT Share Your Images

Important: We do NOT sell, rent, or share your uploaded images or generated content with third parties for their marketing purposes. Your images are yours and yours alone.

7.2 Service Providers

We may share information with trusted service providers who assist us in operating the Service:

• Cloud Infrastructure: Cloudflare (hosting, storage, CDN)
• AI Processing: Replicate, OpenAI (image generation and analysis)
• Payment Processing: Stripe (payment processing)
• Analytics: Privacy-focused analytics providers

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

7.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal process (subpoenas, court orders, search warrants)
• Government or law enforcement requests
• National security requirements
• Protection of our legal rights or safety of others

7.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice and ensure the acquiring party honors this Privacy Policy.

8. Your Privacy Rights

8.1 Access and Control

You have the following rights regarding your information:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal information and content
• Portability: Request your data in a portable format
• Objection: Object to certain processing of your information
• Restriction: Request restriction of processing
• Withdraw Consent: Withdraw consent for processing based on consent

8.2 California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of sale of personal information (we do not sell your data)
• Right to deletion of personal information
• Right to non-discrimination for exercising privacy rights

8.3 European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with supervisory authority

8.4 Exercising Your Rights

To exercise any of these rights, contact us at privacy@campagne.ai. We will respond to your request within 30 days.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your jurisdiction.

We use Cloudflare's global network, which stores data in multiple regions for performance and reliability. When we transfer data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the European Commission.

10. Children's Privacy

The Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

If we learn that we have collected information from a child under 18, we will delete that information promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page
• Updating the "Last Updated" date
• Sending you an email notification (for material changes)
• Displaying a prominent notice in the Service

Your continued use of the Service after changes take effect constitutes acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: