Privacy Policy - Coverlabs Studios

1. Introduction

Coverlabs Studios ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our movie poster design service.

Please read this policy carefully. By using Coverlabs Studios, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

When you create an account, we collect:

Email address (required for account creation and verification)
Password (stored securely using bcrypt hashing)
Name (optional, for personalization)
Username (auto-generated or user-provided)
Profile picture (optional)

2.2 Usage Information

We automatically collect information about your use of the Service:

IP address and device information
Browser type and version
Pages visited and features used
Time and date of visits
Referring website addresses
Session duration and interaction data

2.3 User-Generated Content

We store content you create using the Service:

Poster designs and customizations
Uploaded images and assets
Design preferences and settings
Saved templates and favorites

2.4 Cookies and Tracking Technologies

We use cookies and similar technologies to:

Maintain your session and authentication state
Remember your preferences (e.g., theme settings)
Analyze usage patterns and improve the Service
Provide personalized content and features

3. How We Use Your Information

We use collected information for the following purposes:

Service Delivery: To provide, maintain, and improve the poster design service
Account Management: To create and manage user accounts, authenticate users, and maintain security
Communication: To send verification emails, password resets, service updates, and support responses
Personalization: To customize your experience and remember your preferences
Analytics: To understand how users interact with the Service and identify areas for improvement
Security: To detect, prevent, and respond to fraud, abuse, security risks, and technical issues
Legal Compliance: To comply with legal obligations and enforce our Terms of Service
Feature Development: To develop new features and improve existing functionality

4. Data Storage and Security

4.1 Storage Infrastructure

Database: User account data is stored in PostgreSQL databases hosted by Neon.

File Storage: User-created designs and uploaded assets are stored on Cloudflare R2 cloud storage.

Email Service: Email verification and notifications are handled by Resend.

4.2 Security Measures

We implement industry-standard security measures:

Passwords are hashed using bcrypt encryption
Data transmission is encrypted using HTTPS/TLS
Session tokens are securely managed and automatically expire
Email verification is required for account activation
Regular security audits and updates
Access controls and authentication mechanisms

While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

4.3 Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. If you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

5. Third-Party Services

We integrate with the following third-party services, each with their own privacy policies:

The Movie Database (TMDB)

Provides movie data, posters, and metadata. When you search for movies, requests are sent to TMDB's API.

Cloudflare R2

Cloud storage for user-created designs and uploaded assets.

Neon Database

Database hosting for user account information.

Resend

Email delivery service for verification emails and notifications.

We do not control these third-party services and are not responsible for their privacy practices. We encourage you to review their privacy policies.

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers: With third-party vendors who provide services on our behalf (hosting, email delivery, analytics)
Legal Requirements: When required by law, court order, or government request
Protection: To protect our rights, privacy, safety, or property, and that of our users
Business Transfers: In connection with a merger, acquisition, or sale of assets
Consent: With your explicit consent for specific purposes

7. Your Rights and Choices

7.1 Access and Portability

You have the right to access and export your personal data. You can view your account information in the settings page and download your designs at any time.

7.2 Correction and Update

You can update your account information (name, email, profile picture) through the settings page. For assistance, contact our support team.

7.3 Deletion

You can delete your account at any time through the settings page. This will permanently delete your personal information and designs within 30 days.

7.4 Cookie Management

You can manage cookie preferences through your browser settings. Note that disabling cookies may limit your ability to use certain features of the Service.

7.5 Marketing Communications

You can opt out of marketing emails by clicking the unsubscribe link in any email or updating your preferences in settings. Note that you will still receive essential service-related emails.

8. GDPR Compliance (EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under GDPR:

Right to Access: Request a copy of your personal data
Right to Rectification: Correct inaccurate or incomplete data
Right to Erasure: Request deletion of your data ("right to be forgotten")
Right to Restriction: Limit how we process your data
Right to Portability: Receive your data in a structured, machine-readable format
Right to Object: Object to certain types of processing
Right to Withdraw Consent: Withdraw consent for data processing

To exercise these rights, contact us at privacy@coverlabs.studio

9. CCPA Compliance (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

Right to Know: Request information about data we collect, use, and share
Right to Delete: Request deletion of your personal information
Right to Opt-Out: Opt out of the sale of personal information (we do not sell personal information)
Right to Non-Discrimination: Equal service regardless of exercising privacy rights

10. Children's Privacy

Coverlabs Studio is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately and we will delete the information.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using the Service, you consent to the transfer of your information to our facilities and service providers.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice on the Service. Changes become effective when posted. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law, typically within 72 hours of discovery.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Coverlabs Studio
Support: support@coverlabs.studio

We will respond to your inquiry within 30 days.

By using Coverlabs Studio, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.