Privacy Policy

1. Introduction

Belula Art ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website belula.art (the "Service"), use our mobile application, or make a purchase from us.

Please read this Privacy Policy carefully. By accessing or using our Service, you agree to be bound by the terms and conditions of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

2.1 Information You Provide to Us

We collect information that you provide directly to us, including:

• Account Information: Name, email address, phone number, and password when you create an account or sign in using Google authentication
• Order Information: Shipping address, billing address, payment information (processed securely through Stripe), and order history
• Artwork Information: Images you upload for custom artwork creation, style preferences, and artwork configurations
• Communication Data: Information you provide when you contact us for customer support, feedback, or inquiries
• Preferences: Newsletter subscriptions, notification preferences, and communication preferences

2.2 Information We Collect Automatically

When you use our Service, we automatically collect certain information, including:

• Usage Data: Pages visited, time spent on pages, click patterns, and navigation paths
• Device Information: Device type, operating system, browser type, IP address, and unique device identifiers
• Location Data: General location information based on IP address (used for tax calculation and shipping)
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to enhance your experience and analyze usage patterns

2.3 Information from Third Parties

We may receive information from third-party services:

• Google: When you sign in with Google, we receive your name, email address, and profile picture
• Stripe: Payment processing information and transaction details (we do not store full credit card numbers)
• Firebase: Authentication and user data stored in our Firebase database

3. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide and Maintain Our Service: Process orders, fulfill purchases, manage your account, and provide customer support
• To Process Payments: Process transactions through Stripe, calculate taxes, and handle refunds
• To Create Custom Artwork: Process your uploaded images using AI-powered tools (Google Gemini API) to create custom artwork
• To Communicate with You: Send order confirmations, shipping updates, respond to inquiries, and send marketing communications (with your consent)
• To Improve Our Service: Analyze usage patterns, conduct research, and enhance user experience
• To Ensure Security: Detect and prevent fraud, unauthorized access, and other security threats
• To Comply with Legal Obligations: Meet legal requirements, respond to legal requests, and protect our rights

4. How We Share Your Information

We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

• Stripe: Payment processing and transaction management
• Firebase (Google): Cloud infrastructure, authentication, database, and storage services
• Google Gemini API: AI-powered artwork generation and image processing
• Shipping Carriers: Delivery services for order fulfillment
• Analytics Providers: Google Analytics for website analytics and performance monitoring

4.2 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests, such as:

• Court orders, subpoenas, or other legal processes
• To comply with applicable laws and regulations
• To protect our rights, property, or safety, or that of our users or others
• To investigate fraud or security issues

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security assessments and updates
• Secure payment processing through Stripe (we do not store full credit card numbers)
• Firebase security rules and access controls

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

6. Your Privacy Rights (US Residents)

Depending on your location, you may have certain rights regarding your personal information:

6.1 California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know: Request disclosure of the categories and specific pieces of personal information we collect
• Delete: Request deletion of your personal information (subject to certain exceptions)
• Opt-Out: Opt-out of the sale of personal information (we do not sell your personal information)
• Non-Discrimination: We will not discriminate against you for exercising your privacy rights

6.2 General Privacy Rights

You have the right to:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal and contractual obligations)
• Portability: Request a copy of your data in a portable format
• Opt-Out: Unsubscribe from marketing communications at any time

To exercise these rights, please contact us at the information provided in the "Contact Us" section below.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and store certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier.

Types of cookies we use:

• Essential Cookies: Required for the Service to function properly (authentication, shopping cart)
• Analytics Cookies: Help us understand how visitors interact with our Service (Google Analytics)
• Functional Cookies: Remember your preferences and settings

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

8. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.

9. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. We will delete or anonymize your personal information when it is no longer needed for these purposes.

Retention periods:

• Account Information: Retained while your account is active and for a reasonable period after account closure
• Order Information: Retained for at least 7 years to comply with tax and accounting requirements
• Artwork Images: Retained to fulfill orders and for customer service purposes
• Marketing Data: Retained until you opt-out or request deletion

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using our Service, you consent to the transfer of your information to these countries.

We use service providers (Firebase, Stripe, Google) that may process your data in various locations. These providers are required to maintain appropriate safeguards for your information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

Material changes to this Privacy Policy will be communicated through email or a prominent notice on our Service.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

For California residents: You may also contact us to request information about our data sharing practices or to exercise your CCPA rights.