1. Introduction
Graylight Creative ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered marketing platform and services.
By accessing or using our services, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access our services.
2. Information We Collect
2.1 Information You Provide
- Account Information: Email address, password, name, and billing information
- Profile Data: Business information, brand assets (logos, colors, fonts), brand voice documents
- Payment Information: Credit card details processed securely through Stripe (we do not store full card numbers)
- Content Data: Marketing content you create, audit results, AI-generated content, social media posts
- Communications: Support tickets, emails, and feedback you send us
2.2 Information Collected Automatically
- Usage Data: Pages visited, features used, time spent, click patterns
- Device Information: IP address, browser type, operating system, device identifiers
- Cookies: Authentication tokens, preferences, analytics data
- API Logs: API calls, timestamps, response codes
2.3 Information from Third Parties
- OAuth Providers: Basic profile information from Google, Facebook, LinkedIn, Apple if you use social login
- Social Media Platforms: Account connections, permissions, post data when you integrate social accounts
- Payment Processors: Transaction status and payment confirmations from Stripe
3. How We Use Your Information
We use the information we collect for the following purposes:
- Providing, operating, and maintaining our services
- Processing transactions and sending transaction notifications
- Generating AI-powered marketing content and recommendations
- Analyzing your marketing effectiveness and providing audit reports
- Sending you technical notices, updates, security alerts, and support messages
- Responding to your comments, questions, and customer service requests
- Communicating with you about products, services, offers, and events
- Monitoring and analyzing trends, usage, and activities
- Detecting, preventing, and addressing technical issues and fraudulent activity
- Improving and personalizing our services
4. How We Share Your Information
We may share your information in the following situations:
4.1 Service Providers
We share your information with third-party service providers who perform services on our behalf:
- AI Providers: Google (Gemini AI), OpenAI, xAI (Grok) for content generation
- Payment Processing: Stripe for payment processing
- Email Services: SMTP providers for transactional emails
- Email Marketing: Mailchimp for newsletters (if you subscribe)
- Analytics: Usage analytics and monitoring services
- Social Media: Meta, LinkedIn, Twitter for social media posting features
4.2 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities.
4.3 Business Transfers
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
4.4 With Your Consent
We may share your information for any other purpose disclosed to you and with your consent.
5. Data Security
We implement appropriate technical and organizational security measures to protect your information:
- Encryption of data in transit using SSL/TLS
- Secure password hashing using industry-standard algorithms
- Regular security audits and vulnerability assessments
- Access controls and authentication requirements
- Rate limiting to prevent abuse
- CSRF protection on all forms
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.
6. Data Retention
We retain your information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.
- Account Data: Retained until account deletion
- Content Data: Retained according to your subscription plan
- Payment Records: Retained for 7 years for tax and accounting purposes
- Audit Logs: Retained for 90 days
7. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request access to your personal information
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information
- Portability: Request a copy of your data in a machine-readable format
- Objection: Object to processing of your personal information
- Restriction: Request restriction of processing
- Withdrawal: Withdraw consent where processing is based on consent
To exercise these rights, please contact us at privacy@graylightcreative.com. We will respond to your request within 30 days.
8. Cookies and Tracking Technologies
We use cookies and similar tracking technologies:
- Essential Cookies: Required for authentication and security (session cookies, CSRF tokens)
- Functional Cookies: Remember your preferences and settings
- Analytics Cookies: Help us understand how you use our services
You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our services.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We ensure appropriate safeguards are in place for such transfers.
10. Children's Privacy
Our services are not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us.
11. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected, used, shared, or sold
- Right to delete personal information
- Right to opt-out of sale of personal information (we do not sell your information)
- Right to non-discrimination for exercising your rights
12. GDPR Rights (European Users)
If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including the rights listed in Section 7, as well as the right to lodge a complaint with a supervisory authority.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.
14. Contact Us
If you have questions or concerns about this Privacy Policy, please contact us: