Overview
VintageBackgrounds.com ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our AI vintage product background generation services for e-commerce platforms. Please read this privacy policy carefully.
Information We Collect
Personal Information
We may collect personal information that you voluntarily provide to us when you:
- Create an account using Google OAuth authentication
- Subscribe to our vintage background generation services (Starter, Pro, or Team plans)
- Make pay-per-use purchases ($0.99/image) through Stripe
- Make subscription payments (from $9.99/month) through Stripe
- Contact us with inquiries or support requests
- Participate in surveys or promotional activities
Automatically Collected Information
When you visit our website, we automatically collect certain information about your device:
- IP address and location data
- Browser type and version
- Operating system
- Referring website
- Pages visited and time spent
- Device identifiers
Product Images
When you upload product images for vintage background generation:
- Your images are securely uploaded to Cloudflare R2 for cloud storage and CDN delivery
- Images are processed using Replicate API (Stable Diffusion XL + custom LoRA models) to generate vintage backgrounds
- We support 1950s-1990s era styles for e-commerce platforms (Amazon, eBay, Etsy, Shopify)
- We do not use your uploaded images for training AI models or improving our services
- Uploaded images are automatically deleted after 24 hours unless saved to your account
- Generated backgrounds are available for 30 days and then deleted unless saved to your account
How We Use Your Information
We use the information we collect for various purposes, including:
- Providing and maintaining our AI vintage product background generation services
- Processing your product images and generating custom vintage backgrounds (1950s-1990s styles)
- Managing your account, credits, pay-per-use purchases, and subscription status
- Processing payments through Stripe for pay-per-use ($0.99/image) and subscription plans (Starter $9.99/month, Pro $19.99/month, Team $29.99/month)
- Sending you technical notices, updates, security alerts, and support messages via SendGrid
- Responding to your inquiries and providing customer support
- Providing access to your processing history and generated backgrounds
- Implementing rate limiting (3 free generations/day) and IP-based usage tracking to prevent abuse
- Providing e-commerce platform size presets (Amazon, eBay, Etsy, Shopify)
- Complying with legal obligations and regulatory requirements
Information Sharing and Disclosure
We Do Not Sell Your Data
We do not sell, trade, or rent your personal information to third parties.
Service Providers
We may share your information with trusted third-party service providers who assist us in:
- AI Processing: Replicate API for generating vintage backgrounds using Stable Diffusion XL with custom LoRA models for 1950s-1990s styles
- Payment Processing: Stripe for secure credit card payments and subscription management (pay-per-use, Starter, Pro, Team plans)
- Authentication: Google OAuth for user account creation and login
- Cloud Storage & CDN: Cloudflare R2 for secure image storage and fast CDN delivery
- Analytics: Google Analytics for understanding user behavior and improving our services
- Email Services: SendGrid for transactional emails (receipts, notifications) and marketing communications
Legal Requirements
We may disclose your information if required by law or in response to valid legal process.
Data Security
We implement appropriate security measures to protect your personal information:
- SSL/TLS encryption for data transmission
- Encrypted storage of sensitive data
- Regular security audits and monitoring
- Access controls and authentication
- Secure data centers with physical security
Your Privacy Rights
GDPR Rights (EU Users)
If you are located in the EU, you have the following rights:
- Right to access: Request copies of your personal data
- Right to rectification: Request correction of inaccurate data
- Right to erasure: Request deletion of your data
- Right to restrict processing: Limit how we use your data
- Right to data portability: Receive your data in a portable format
- Right to object: Object to certain types of processing
CCPA Rights (California Users)
California residents have additional rights under the CCPA:
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of the sale of personal information
- Right to non-discrimination for exercising these rights
Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience:
- Essential cookies: Required for basic website functionality
- Analytics cookies: Help us understand how you use our site
- Preference cookies: Remember your settings and preferences
- Marketing cookies: Used to deliver relevant advertisements
You can control cookies through your browser settings. See our Cookie Policy for more details.
Data Retention
We retain your information for as long as necessary to provide our services:
- Account data: Until you delete your account (includes email, Google profile data, account settings)
- Transaction records: 7 years for tax and legal purposes (Stripe payment records)
- Uploaded product images: Automatically deleted after 24 hours from Cloudflare R2 unless saved to your account
- Generated vintage backgrounds: Available for 30 days via shareable links, then deleted from our servers unless saved to your account
- Processing history: Retained for 90 days (Free tier) or 30 days (Starter) or 90 days (Pro/Team) to allow re-downloads and support requests
- Saved templates: Retained until you delete your account or remove the template
- Analytics data: 26 months (Google Analytics default retention period)
- Support communications: 3 years via SendGrid
- Rate limiting data: IP-based usage logs (3 free generations/day) retained for 7 days for abuse prevention
- Credits and purchases: Pay-per-use credits retained for 1 year from purchase date
Children's Privacy
Our services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us immediately.
Important: If you are a parent or guardian and believe your child has provided us with personal information, please contact us at javajia@gmail.com to request deletion of that information.
International Data Transfers
Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws than your country of residence.
We take appropriate safeguards to ensure your personal information receives an adequate level of protection:
- Using standard contractual clauses approved by the European Commission
- Ensuring data is encrypted in transit and at rest
- Limiting data processing to the minimum necessary
- Complying with applicable data protection regulations
Third-Party Links
Our service may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to review their privacy policies before providing any personal information.
Data Breach Notification
In the unlikely event of a data breach that compromises your personal information, we will:
- Notify you immediately via email if we have your contact information
- Report to authorities within 72 hours as required by GDPR
- Provide details about what information was affected
- Offer guidance on steps you can take to protect yourself
- Post a public notice on our website for transparency
We take data security seriously and have never experienced a significant data breach. However, we are prepared to respond quickly and responsibly if one were to occur.
Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
- Posting the new policy on this page with an updated "Last updated" date
- Sending an email notification to registered users for significant changes
- Displaying a prominent notice on our website for major policy updates
Your continued use of our services after changes are posted constitutes acceptance of the updated policy. If you do not agree with the changes, you may close your account or discontinue use of our services.
Legal Basis for Processing (GDPR)
Under GDPR, we process your personal data based on the following legal grounds:
- Consent: When you provide explicit consent for specific processing activities
- Contract: To fulfill our contractual obligations to provide services
- Legal obligation: To comply with applicable laws and regulations
- Legitimate interests: For business operations, security, and service improvement (balanced against your rights)
You have the right to withdraw consent at any time, though this will not affect the lawfulness of processing before withdrawal.
Data Controller
VintageBackgrounds.com is the data controller responsible for your personal information. Our contact details are:
Company: VintageBackgrounds.com
Email: javajia@gmail.com
Data Protection Officer: javajia@gmail.com
Contact Us About Privacy
If you have questions about this privacy policy or want to exercise your rights, contact us:
Email: javajia@gmail.com
Data Protection Officer: javajia@gmail.com