Privacy Policy

1. Scope and Platform Mission

Smart Flex ("we", "our", or "us") operates the website and creative mobile platform located at smartflex.io (the "Service"). This Privacy Policy explains how we collect, process, store, and safeguard the information you provide when using our event poster creation and AI design generation tools.

By registering for an account or using our event design generator, you acknowledge and agree to the practices described in this Privacy Policy. If you do not agree with this policy, please discontinue use of the Service.

2. Strict Non-Political Use Policy

3. Information We Collect

We only collect the minimum information required to authenticate your account and render the event posters you request:

• Account & Identity Data: Your mobile phone number (used for secure one-time password verification), full name, optional email address, and optional business or studio name.
• Event Prompts & Creative Inputs: Text prompts describing your celebration (e.g. "Grand Opening Celebration for bakery on December 5" or "Golden Jubilee Wedding Anniversary Poster"), selected color themes, canvas aspect ratios, and event categories.
• User-Supplied Reference Photos: Photographs of yourself, family members, or event honorees uploaded voluntarily for the sole purpose of rendering their likeness into the event poster design.
• Generated Artwork & Design Archives: High-resolution posters generated through the platform, saved temporarily or permanently to your personal library ("My Designs") for your download.
• Technical & Log Data: Internet Protocol (IP) address, browser type, device operating system, access timestamps, and error diagnostic logs to maintain platform stability and protect against fraud.

4. How We Use and Process User Photos

We recognize that personal photographs are sensitive. We adhere to the highest industry standards regarding biometric likeness and user-uploaded media:

• Single-Purpose Processing: Uploaded reference photos are processed solely by secure visual processing engines (such as OpenAI's enterprise image APIs) strictly to compose the requested event poster.
• Zero Model Training: Your private photos, faces, and creative prompts are NEVER used to train, retrain, or improve public foundation artificial intelligence models.
• Private Media Vault: Uploaded images are stored in protected cloud object storage accessible only to your authenticated user session. They are never made publicly searchable or indexable by search engines.

5. How We Share Information

We do not sell, rent, monetize, or trade your personal data. We disclose data strictly in the following limited situations:

• Infrastructure & AI Providers: Trusted enterprise service providers (e.g. OpenAI Enterprise API for visual composition, SMS gateway providers for OTP authentication, and secure cloud hosting facilities) bound by strict confidentiality and data protection agreements.
• Legal Compliance: When required by enforceable subpoena, court order, or applicable statutory law, or to investigate violations of our Terms of Service.
• Business Transfers: In the event of a merger, acquisition, or sale of company assets, where the receiving party agrees to uphold the commitments of this Privacy Policy.

6. Data Retention and Deletion

We retain personal information and generated event posters only for as long as your account remains active or as needed to provide our services:

• Generated posters remain available in your private dashboard for easy re-download until you delete them.
• You can permanently delete any saved poster at any time directly through the "My Designs" section.
• You have the absolute right to delete your entire account, profile, and all associated media by submitting a request via our dedicated Data Deletion Request Page. Account deletions are processed within 30 days.

7. Security Measures

We implement enterprise-grade technical and organizational safeguards to protect your personal information against unauthorized access, loss, or misuse:

• End-to-end Transport Layer Security (TLS 1.3 / HTTPS encryption) for all data in transit.
• Cryptographic hashing (SHA-256) for authentication tokens and verification codes.
• Strict object-level access controls ensuring users cannot view or download other customers' generated posters.
• Automated session invalidation upon password reset, logout, or account suspension.

8. Children's Privacy

Smart Flex is not targeted at children under the age of 13. We do not knowingly collect personal data from minors. Parents or guardians uploading photos of children for family celebration posters (such as 1st birthday party invitations) maintain full legal authority and responsibility for such imagery. For comprehensive details on our child protection protocols, please read our Child Safety Policy.

9. Your Legal Rights

Depending on your jurisdiction (including India's Digital Personal Data Protection Act, the EU General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA)), you hold the following rights:

• Right to Access: Request a copy of the personal information we hold about you.
• Right to Rectification: Update or correct inaccurate profile details in your Profile Settings.
• Right to Erasure ("Right to Be Forgotten"): Request the complete deletion of your account, media uploads, and generation logs.
• Right to Withdraw Consent: Revoke consent for processing at any time by closing your account.

10. Contact Us & Grievance Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact our Data Protection and Grievance Officer: