Privacy Policy

1. Information We Collect

We collect information you provide directly to us when you create an account or otherwise interact with the Site. This may include:

• Account Information: Your name, email address, and password.
• Card Message Content: The text and image you include in the card.
• Payment Information: If you make a purchase, we use a third-party payment processor Stripe. We do not store your credit card information on our servers.

Our site uses essential data for the website to function. All analytics and performance tracking is handled according to your personal consent preferences.

2. How We Use Your Information and Lawful Basis

Lawful Basis: We process your data based on Contractual Necessity (to provide the service) and Legitimate Interests (to secure the platform).

We use the information we collect for the following purposes:

• To Provide and Maintain the Service: To store the e-cards you create and to operate and maintain the Site.
• To Improve Our Service: To analyze usage trends, and improve our card design features, and overall user experience.
• To Communicate With You: To send you service-related messages, such as account confirmations, password resets, and updates. We may also send you promotional emails about new features or offers if you have consented to receive them.
• For Security and Fraud Prevention: To protect our service and users from unauthorized access, fraud, and other illegal activities.

3. Sharing Your Information

We will not sell, rent, or trade your personal information. We may share your information with third parties only in the following limited circumstances:

• Generative AI and Photo Processing: To provide our service, we use Google Gemini AI models. When you upload a photo, it is transmitted to Google Gemini for the sole purpose of generating your card. We do not store your original uploaded photo on our servers. We utilize enterprise-grade AI processing, your personal photos or any other information provided by you are not used to train the global Gemini AI models.
• Service Providers: We may share information with third-party vendors, consultants, and other service providers who perform services on our behalf and need access to this information to carry out their work for us (e.g., our email delivery service or payment processor).
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or subpoena).
• To Protect Our Rights: To enforce our Terms and Conditions, or to protect the rights, property, and safety of Bebeh Cards, our users, or others.
• Recipient Information: We do not collect or store information regarding your card recipients.

4. Data Storage and Retention

Data Storage and Retention

• We use Google Cloud Platform (GCP) to provide our services globally. Your data is primarily stored in the United States. To protect your information and comply with GDPR, we rely on the EU-U.S. Data Privacy Framework and Standard Contractual Clauses (SCCs). All data is automatically encrypted at rest and in transit by Google's infrastructure.
• We do not store individual photos uploaded during card creation, only the output of the card is saved.

Third-Party Sub-processors

We share limited data with the following categories of providers:

• Cloud Infrastructure: Google Cloud Platform (Hosting and AI).
• Authentication: Google OAuth (Sign-in).
• Payments: Stripe (We do not store credit card details).

Retention

• We store your account information for as long as your account and bebehcards.com is active.
• We do not store individual photos uploaded during card creation, only the output of the card is saved.
• You can delete specific cards directly from your gallery at any time. To request the complete removal of this content from our active servers, please contact support@bebehcards.com.

5. Your Rights and Choices

You have the right to access, update, or delete your account information at any time.

• Right to Access and Portability: Request a copy of your account data.
• Right to Rectification: Update inaccurate information.
• Right to Erasure ("Right to be Forgotten"): You may request that we delete your account and all associated data.

How to exercise your rights: To delete your account or request your data, please contact support@bebehcards.com. We will respond to and fulfill all valid requests within 30 days.

6. Children's Privacy

Our service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under this age. If we become aware that we have collected information from a child without parental consent, we will take steps to delete that information.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date at the top. We encourage you to review this policy periodically.

8. Contact Us

If you have any questions about this Privacy Policy, please contact us at: support@bebehcards.com