LOOMERA

LOOMERA (“we”, “us”, “our”) respects your privacy. This Privacy Policy explains what data we collect, how we use it, how we share it, and your rights regarding your personal information. By using LOOMERA, you consent to the practices described in this policy.

We collect the following types of information when you use LOOMERA:

• Account information: email address, name (if provided), and authentication data
• Photos: images you upload for editing, processed and stored temporarily
• AI-generated images: content created through the service
• Usage data: features used, number of edits, and credit transactions
• Device information: browser type, operating system, and device identifiers (for fraud prevention)
• IP address: collected for security, fraud prevention, and rate limiting
• Payment information: processed by Stripe — we do NOT store credit card numbers
• Referral data: referral codes and referral relationships
• Cookies: session cookies for authentication and preference cookies

We use the information we collect for the following purposes:

• To provide and operate the LOOMERA service
• To process your photos through third-party AI services (Google Gemini)
• To process payments through Stripe
• To prevent fraud, abuse, and unauthorized access
• To enforce our Terms of Service
• To communicate with you about your account, purchases, and service updates
• To improve our service and develop new features

We share your information only with the following third-party service providers, and only as necessary to operate the service:

• Google Gemini: Your photos are sent to Google’s AI for processing. Google’s privacy policy applies to their handling of this data.
• Supabase: Account and usage data is stored on Supabase servers. Supabase’s privacy policy applies.
• Stripe: Payment data is processed by Stripe. Stripe’s privacy policy applies.
• Vercel: The website is hosted on Vercel.
• Law enforcement: We may disclose information if required by law, subpoena, or court order.

We will NEVER sell, rent, or trade your personal information or photos.

Photos are uploaded to secure cloud storage for processing and sent to Google Gemini’s API for AI editing. Google may process this data according to their API terms.

AI-generated images are stored in your account until you delete them or your account is terminated. We do not use your photos for marketing, training, or any purpose other than providing the service to you.

We recommend not uploading sensitive, confidential, or highly private photos. AI-generated images may contain invisible SynthID watermarks applied by Google’s AI.

• Account data: Retained while your account is active and for 30 days after termination.
• Photos and AI outputs: Retained while your account is active. Deleted within 30 days of account termination.
• Payment records: Retained for 7 years for tax and legal compliance.
• Usage logs: Retained for 12 months for security and fraud prevention.

You may request deletion of your data at any time by contacting us at support@loomera.app.

We use industry-standard security measures including HTTPS encryption, secure authentication, and access controls to protect your data.

Despite our efforts, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data. You are responsible for maintaining the security of your account credentials.

LOOMERA is not intended for children under 18 (or the applicable age of majority in your jurisdiction). We do not knowingly collect personal information from children.

If we learn we have collected information from a child, we will delete it promptly. If you are a parent or guardian and believe your child has provided us with personal information, contact us immediately at support@loomera.app.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to access: You may request a copy of your personal data.
• Right to correction: You may request correction of inaccurate data.
• Right to deletion: You may request deletion of your personal data (“right to be forgotten”).
• Right to portability: You may request your data in a portable format.
• Right to object: You may object to certain processing of your data.
• Right to opt out of sale: We do not sell your data, but you may exercise this right under CCPA.

California residents: Under CCPA, you have additional rights including the right to know what data we collect and the right to non-discrimination for exercising your rights.

EU/EEA residents: Under GDPR, you have additional rights including the right to lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us at support@loomera.app.

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.

You may disable cookies in your browser settings, but some features of LOOMERA may not function properly without them.

Your data may be transferred to and processed in the United States and other countries where our service providers operate. By using LOOMERA, you consent to this transfer. We take reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy.

We may update this Privacy Policy at any time. Changes will be posted on this page with an updated effective date. Continued use of LOOMERA after changes constitutes your acceptance of the revised policy.

For privacy questions, data requests, or concerns, contact us at support@loomera.app.