Privacy Policy

1. Introduction

Lay Flatly ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered fashion photography platform (the "Service").

By using Lay Flatly, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Account Information

When you create an account, we collect:

• Full name
• Email address
• Password (securely hashed)
• Profile preferences

Payment Information

If you subscribe to a paid plan, our payment processor (Stripe) collects:

• Credit/debit card details
• Billing address
• Transaction history

We do not store your full payment card details on our servers.

User-Generated Content

We collect and store content you create or upload:

• Uploaded Images: Product photos and clothing images you upload for AI processing
• Generated Images: AI-generated fashion photography saved to your gallery
• Saved Models: Model presets you save for reuse
• Saved Assets: Clothing, backdrops, accessories, and other items saved to My Assets
• Generated Videos: 360° spin animations and other video content

Usage Information

We automatically collect the following, in part through Google Analytics (see Section 10):

• Device type and browser information
• IP address
• Feature usage and generation history
• Credit consumption and subscription status
• Pages viewed and general site activity

3. How We Use Your Information

We use the collected information to:

• Provide AI-powered image and video generation services
• Maintain your gallery and saved models
• Process payments and manage subscriptions
• Track credit usage and enforce usage limits
• Send account-related communications
• Improve our AI prompts and service quality
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. Third-Party AI Services

To provide our AI-powered features, we transmit your uploaded images to the following third-party services:

• Google Gemini AI: Powers our image generation features including Model Studio, Clothing Swap, Editorial Shots, Lay Flat, Jewelry Photo, Ghost Mannequin, and Accessories. Images are sent to Google's servers for processing.
• Kling AI: Powers our 360° Spin Animation feature. Images are sent to Kling's servers for video generation.

These services process your images to generate output and may retain data according to their own privacy policies. We encourage you to review Google's Privacy Policy and Kling AI's terms.

Important: We do not use your uploaded or generated images to train AI models. However, third-party AI providers may have their own data usage policies.

5. AI-Generated and Synthetic Content

Consistent with Federal Trade Commission (FTC) guidance on artificial intelligence, we want to be transparent about the nature of the content this Service produces:

• Synthetic output: Images and videos created with the Service are generated or substantially altered by AI. Models, garments, and settings may be wholly or partially synthetic and may not depict real people, products, or events.
• No real-person data in generated models: AI-generated models do not represent real individuals and are not derived from identifiable people in our records.
• Your disclosure responsibility: You are responsible for disclosing the use of AI-generated or AI-altered imagery to your own customers and audiences where required by law or to avoid deceiving consumers. See our Terms of Service for the full AI-Generated Content Disclosure and your obligations.

6. Information Sharing

We may share your information with:

• AI Providers: Google Gemini and Kling AI for image/video generation (see Section 4)
• Cloud Infrastructure: Supabase for database and file storage
• Payment Processor: Stripe for payment processing
• Analytics: Google Analytics for measuring and understanding Service usage (see Section 10)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties for marketing purposes.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time.

• Generated images and videos: Stored until you delete them or close your account
• Saved models and assets: Stored until you delete them or close your account
• Uploaded source images: Automatically deleted from our servers within seconds after AI processing completes
• Account data: Retained while your account is active; deleted within 30 days of account closure
• Billing records: Retained as required by law (typically 7 years)

8. Data Security

We implement appropriate technical and organizational measures to protect your information:

• HTTPS encryption for all data in transit
• Encrypted storage for sensitive data
• JWT-based authentication with secure session management
• Row-level security (RLS) ensuring users can only access their own data
• Secure cloud infrastructure (Supabase/AWS)

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

9. Your Rights

Depending on your location, you may have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information and account
• Portability: Download your generated images from your gallery
• Opt-out: Unsubscribe from marketing communications
• Withdraw consent: Stop using the Service at any time

To exercise these rights, please contact us at kenwood@layflatly.com.

California Residents (CCPA)

California residents have additional rights including the right to know what personal information is collected and how it is used, and the right to opt-out of the sale of personal information. We do not sell personal information.

European Residents (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation including data portability, the right to lodge a complaint with a supervisory authority, and the right to object to processing based on legitimate interests.

10. Cookies and Local Storage

We use cookies and browser local storage to:

• Maintain your authenticated session
• Remember your preferences and settings
• Store authentication tokens securely

Analytics Cookies

We use Google Analytics, a web analytics service provided by Google, to understand how visitors use the Service. Google Analytics uses cookies and similar technologies to collect information such as your device and browser type, pages viewed, IP address (which may be truncated/anonymized), and general usage patterns. This information helps us measure traffic and improve the Service.

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on, or by controlling cookies through your browser settings. For more information, see Google's Privacy Policy and how Google uses data.

We do not use third-party advertising cookies. You can control cookies through your browser settings, but disabling them may affect Service functionality.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States where our AI service providers operate. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

12. Children's Privacy

The Service is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn we have collected such information, we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Service. The "Last updated" date at the top indicates when the policy was last revised. Your continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: kenwood@layflatly.com
Address: Lay Flatly, Inc.