Privacy Policy

Last updated: March 29, 2026

1. Introduction

Welcome to Presto Flyer ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered flyer generation service.

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide to us when you:

  • Register for an account
  • Make a purchase
  • Contact us for support
  • Subscribe to our communications

This information may include:

  • Name and email address
  • Account credentials (username and password)
  • Payment information (processed securely through third-party payment processors)
  • Business information you provide for flyer generation

2.2 Automatically Collected Information

When you access our Service, we automatically collect certain information, including:

  • Log data (IP address, browser type, operating system, pages visited)
  • Device information (device type, unique device identifiers)
  • Usage data (how you interact with our Service)
  • Cookies and similar tracking technologies

2.3 Content and Files

We collect the content you provide when creating flyers, including:

  • Text prompts and descriptions
  • Business details and promotional information
  • Generated flyer images and content

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain our Service
  • Process your transactions and manage your credits
  • Generate AI-powered flyers based on your inputs
  • Improve, personalize, and expand our Service
  • Understand and analyze how you use our Service
  • Develop new products, services, features, and functionality
  • Communicate with you for customer service, updates, and marketing purposes
  • Send you technical notices, security alerts, and support messages
  • Prevent fraud and enhance security
  • Comply with legal obligations

4. How We Share Your Information

We may share your information in the following situations:

4.1 Service Providers

We share your information with third-party service providers who perform services on our behalf, including:

  • Payment processors (Stripe)
  • Authentication services (Supabase)
  • AI model providers (Hugging Face)
  • Cloud hosting and storage providers
  • Analytics providers

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

4.3 Business Transfers

In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business, your information may be transferred to the acquiring entity.

4.4 With Your Consent

We may share your information with your consent or at your direction.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will securely delete or anonymize it.

Generated flyers and associated content are retained in your account until you delete them or close your account.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit and at rest
  • Secure authentication systems
  • Regular security assessments
  • Access controls and authentication
  • Secure payment processing through PCI-compliant providers

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

7. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

7.1 Access and Portability

You have the right to request access to the personal information we hold about you and receive a copy of that information.

7.2 Correction

You have the right to request that we correct any inaccurate or incomplete personal information.

7.3 Deletion

You have the right to request that we delete your personal information, subject to certain exceptions.

7.4 Object to Processing

You have the right to object to our processing of your personal information under certain circumstances.

7.5 Restrict Processing

You have the right to request that we restrict the processing of your personal information under certain circumstances.

To exercise these rights, please contact us through our support channels. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and store certain information. Cookies are files with a small amount of data that are sent to your browser from a website and stored on your device.

We use the following types of cookies:

  • Essential Cookies: Required for the Service to function properly
  • Authentication Cookies: To keep you logged in
  • Preference Cookies: To remember your settings and preferences
  • Analytics Cookies: To understand how you use our Service

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

9. Third-Party Services

Our Service integrates with third-party services, including:

  • Supabase: For authentication and database services
  • Stripe: For payment processing
  • Hugging Face: For AI model processing

These third-party services have their own privacy policies. We encourage you to review their privacy policies to understand how they collect, use, and share your information.

10. Children's Privacy

Our Service is not intended for children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information from our systems.

11. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction.

If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including personal information, to the United States and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

12. California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

  • The right to know what personal information we collect, use, and disclose
  • The right to request deletion of your personal information
  • The right to opt-out of the sale of your personal information (we do not sell personal information)
  • The right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us through our support channels.

13. GDPR Privacy Rights

If you are a resident of the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR). We aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your personal information.

If you wish to exercise your GDPR rights, please contact us. You also have the right to lodge a complaint with a data protection authority.

14. Do Not Track Signals

We do not currently respond to Do Not Track (DNT) signals because there is no industry standard for how to respond to them. We may adopt a DNT standard in the future if one becomes widely accepted.

15. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

16. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us through our website support channels or email us directly.

We will respond to your inquiries and concerns as promptly as possible.