Last updated: December 6, 2025

1. INFORMATION WE COLLECT

Information You Provide

When you use colten.app, we may collect:

• Account Information: Name, email address, company name, billing address

• Payment Information: Credit card details, billing information (processed securely through our payment provider)

• Product Data: Images, product descriptions, and style preferences you upload

• Integration Data: Shopify store information, Meta Ads account details (when you connect these services)

• Usage Data: How you interact with our platform, features used, and generation history

Automatically Collected Information

• Technical Data: IP address, browser type, device information, operating system

• Cookies and Tracking: Session data, preferences, and analytics information

• API Usage: Logs of AI generation requests, image processing data, and Meta Ads API interactions

2. HOW WE USE YOUR INFORMATION

We use collected information to:

• Provide Services: Generate AI images, manage style libraries, integrate with Shopify and Meta Ads

• Process Transactions: Handle payments and subscription management

• Improve Our Platform: Analyze usage patterns to enhance features and user experience

• Customer Support: Respond to inquiries and provide technical assistance

• Service Updates: Send important notifications about your account and our services

• AI Model Training: Aggregate and anonymize data to improve our image generation algorithms (only with your explicit consent)

• Legal Compliance: Meet regulatory requirements and enforce our terms

3. DATA SHARING AND THIRD-PARTY SERVICES

We Do Not Sell Your Data

colten.app does not sell your personal information to third parties.

Service Providers We Work With

We share data with trusted partners who help us operate:

• Payment Processors: Stripe or similar services for secure payment handling

• Cloud Infrastructure: AWS, Google Cloud, or Azure for hosting and data storage

• AI Services: OpenAI, ByteDance (Seedream-4), or similar providers for image generation

• Analytics: Tools to understand platform usage and improve services

• Integrations: Shopify and Meta (Facebook) APIs when you connect these services

Legal Requirements

We may disclose information when required by law, legal process, or to protect rights and safety.

Your Product Images

Images you upload remain your property. We process them to provide our service but do not use them for any other purpose without your explicit permission.

4. DATA SECURITY

We implement industry-standard security measures including:

• Encryption of data in transit and at rest

• Secure API authentication and authorization

• Regular security audits and monitoring

• Restricted access to personal data

• Secure cloud infrastructure with redundancy

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

5. YOUR RIGHTS (GDPR COMPLIANCE)

Under EU law (GDPR/RGPD), you have the right to:

• Access: Request a copy of your personal data

• Rectification: Correct inaccurate or incomplete data

• Erasure: Request deletion of your data ("right to be forgotten")

• Restriction: Limit how we process your data

• Portability: Receive your data in a structured, machine-readable format

• Object: Oppose certain types of data processing

• Withdraw Consent: Revoke consent for data processing at any time

To exercise these rights, contact us at contact.coltenai@gmail.com.

6. DATA RETENTION

We retain your data for as long as:

• Your account is active

• Needed to provide services you've requested

• Required by legal or regulatory obligations

• Necessary for legitimate business purposes

When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

7. COOKIES AND TRACKING

Types of Cookies We Use

• Essential Cookies: Required for platform functionality

• Analytics Cookies: Help us understand usage patterns

• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. Disabling certain cookies may limit platform functionality.

8. AI-GENERATED CONTENT

Your Rights to Generated Images

• Images generated through colten.app belong to you

• You have full commercial rights to use generated images in your advertising

• We do not claim ownership of your generated content

• We may retain anonymized metadata about generations for platform improvement

AI Model Usage

• We use third-party AI services (like ByteDance Seedream-4) to generate images

• These services process your images according to their own privacy policies

• We do not share your proprietary product images with other users

9. SHOPIFY AND META INTEGRATIONS

When you connect your Shopify store or Meta Ads account:

• We only access data necessary to provide our service

• You can revoke access at any time through your account settings

• We comply with Shopify's and Meta's data protection requirements

• Integration data is encrypted and securely stored

10. INTERNATIONAL DATA TRANSFERS

Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place, including:

• Standard contractual clauses

• Adequacy decisions by relevant authorities

• Other legally approved transfer mechanisms

11. CHILDREN'S PRIVACY

colten.app is a business tool not intended for individuals under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal information, please contact us immediately.

12. CALIFORNIA PRIVACY RIGHTS (CCPA)

California residents have additional rights:

• Know what personal information is collected

• Know if personal information is sold or disclosed

• Opt-out of the sale of personal information (we don't sell data)

• Request deletion of personal information

• Non-discrimination for exercising privacy rights

13. CHANGES TO THIS POLICY

We may update this privacy policy periodically. We will notify you of material changes via:

• Email notification to your registered address

• Prominent notice on our platform

• Updated "Last modified" date at the top of this policy

Continued use of colten.app after changes constitutes acceptance of the updated policy.

14. CONTACT FOR PRIVACY MATTERS

Data Controller: colten.app (operated by Joshua Christl)
UStIdNr: DE361376284
Address: Schlierseestraße 54, 81539 München

For privacy-related inquiries, data requests, or to exercise your rights:

• Email: contact.coltenai@gmail.com

Data Protection Officer: Not required at current scale. As a small SaaS operation processing non-sensitive product images, colten.app does not meet the GDPR threshold requiring mandatory DPO appointment. Should our processing activities expand to require a DPO, we will appoint one and update this policy accordingly.

For immediate assistance with data deletion or access requests, please include "Privacy Request" in your email subject line.

This privacy policy is designed to comply with GDPR, CCPA, and other applicable data protection regulations. For specific legal advice regarding your jurisdiction, please consult with legal counsel.