Privacy Policy

Last updated: April 30, 2025

1. Who We Are

BafanTattoo ("we", "our", "us") operates the website bafantattoo.com, an AI-powered tattoo design generator. We are committed to protecting your personal information and being transparent about what we collect and why.

2. Information We Collect

When you sign in, we receive the following from your identity provider (Google):

• Email address
• First and last name
• Profile picture URL

We also store the tattoo designs you generate (prompts and resulting images) and your credit balance. If you make a payment, the transaction is processed by PayPal — we do not store your card or payment details.

3. How We Use Your Information

• To create and manage your account
• To provide the tattoo generation service
• To track and manage your credit balance
• To display your generated designs in the gallery (if you choose to share them)
• To respond to support requests

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Google Sign-In

We use Google OAuth 2.0 to allow you to sign in with your Google account. When you choose this option, Google shares your name, email address, and profile picture with us. We only request the minimum permissions needed to identify you. We do not access your Google Drive, Gmail, or any other Google services.

5. Cookies and Sessions

We use a single session cookie to keep you logged in. This cookie is essential for the service to function and does not track you across other websites. We do not use advertising or analytics cookies.

6. Data Retention

Your account data is retained for as long as your account is active. Generated designs are stored indefinitely to power the gallery. You may contact us at any time to request deletion of your account and associated data.

7. Security

We use industry-standard practices to protect your data, including HTTPS encryption, secure session management, and a private database. We never store passwords — all authentication is handled through trusted identity providers (Google).

8. Your Rights

You have the right to access, correct, or delete your personal data at any time. To exercise these rights, please contact us using the details below.

9. Changes to This Policy

We may update this privacy policy from time to time. When we do, we will update the date at the top of this page. Continued use of the service after changes constitutes your acceptance of the updated policy.

10. Contact

If you have any questions about this privacy policy or how we handle your data, please reach out via our contact page.