Privacy Policy

1. General Provisions

This Privacy Policy describes what data Cardyfy processes, how it is used and protected.

By using the service, you agree to the terms of this policy.

2. Data Controller

The data controller for personal data is Cardyfy. We determine the purposes and methods of processing the personal data of our users.

3. Data We Process

3.1 Data provided by the user:

• email address
• account information
• information provided by the user while using the service

3.2 Automatically processed data:

We do not continuously collect or store technical data from users, such as IP address, device type, or service usage history, except when necessary for the operation, security, and stability of the service.

When using content generation features, user images and other materials may be temporarily transferred to third-party AI services solely to process the user request and provide the result. Transferred materials and processing results are stored for no more than 24 hours and are automatically deleted at least once a day.

Cookies and similar technologies may be used only to the extent necessary for authentication and the basic functionality of the service.

3.3 User content:

Users may upload or create content, including text, images, and other materials required to use the service's functionality.

4. Legal Basis for Data Processing (GDPR)

We process personal data on the following grounds:

• performance of a contract (providing access to the service)
• legitimate interests (ensuring security and stable operation of the service)
• user consent (if applicable)

5. Use of Data

We use the data to:

• provide and support the operation of the service
• manage user accounts
• process payments through third-party payment systems
• enable the operation of AI features
• prevent fraud and abuse

6. Use of AI

The service uses artificial intelligence technologies to generate content. Data entered or uploaded by the user is processed exclusively to provide the results of the service.

We do not use user content to train models without explicit notification to the user, unless stated otherwise.

7. Data Transfer to Third Parties

We may transfer data to:

• payment providers for transaction processing
• AI providers for content generation
• cloud and hosting providers that support the service

Data is transferred only to the extent necessary for the service to function.

8. International Data Transfer

Data may be processed outside of the user's country, including countries with a different level of data protection.

9. Data Retention

We store data only for as long as necessary to provide the service and perform technical tasks. Materials submitted for AI processing, including images and generation results, are stored temporarily and are automatically deleted within 24 hours.

10. Data Protection

We apply reasonable technical and organizational measures to protect data; however, we cannot guarantee absolute security.

11. Cookies

We may use cookies and similar technologies exclusively for:

• user authentication
• ensuring the correct operation of the service
• saving user settings

Users can manage cookies through their browser settings.

12. User Rights

Users have the right to:

• access their data
• request correction of data
• request deletion of data
• restrict data processing

To exercise these rights, users can contact us.

13. Data Processor Role

In certain cases, we may act as a Data Processor, processing data on behalf of the user. In such cases, processing is carried out exclusively within the framework of providing the service.

14. Policy Changes

We may update this Privacy Policy. Updates take effect from the moment the new version is published.

15. Contacts

For privacy-related inquiries: Email: [email protected]