Privacy Policy

1. Information We Collect

We collect information you provide directly to us, information collected automatically when you use the Services, and information from third parties.

• Account & Contact. Name, email (e.g., hello@varnz.ai), password (hashed), and optional profile details.
• Billing & Payments. Limited payment info (handled by payment processors). We store transaction metadata (plan, currency, last 4 digits via tokenized refs).
• Content & Prompts. Text prompts, generated pages, edits, files you upload, and feedback.
• Usage & Device. Log data, pages visited, timestamps, approximate location (from IP), device/browser type, language, referrer/UTM.
• Support. Messages, attachments, and context you share with our team.
• Third-party SSO. If you sign in with Google or similar, we receive your name, email, and auth tokens as permitted by your settings.

2. How We Use Information

• Provide, operate, and maintain the Services (including AI-driven page generation and editing).
• Process transactions, manage credits, invoicing, and account changes.
• Personalize experiences, remember preferences, and improve quality.
• Monitor performance, debug, secure, and prevent abuse or fraud.
• Communicate with you about service updates, security, support, and marketing (you can opt-out of non-essential emails).
• Research and develop new features, including model quality and UX improvements.
• Comply with legal obligations and enforce our Terms.

3. Legal Bases (EEA/UK users)

We process personal data under these legal bases: performance of a contract, legitimate interests, consent (where required), and legal obligations.

4. Sharing & Disclosures

We do not sell your personal information. We may share information with:

• Service providers (e.g., cloud hosting, analytics, email, payment processors) under contract and confidentiality.
• SSO/Identity providers when you choose to authenticate via those services.
• Professional advisors (legal, accounting) where necessary.
• Business transfers (merger, acquisition, restructuring).
• Legal & safety (to comply with law, protect rights, investigate misuse).

5. Cookies & Similar Technologies

We use cookies, local storage, and similar technologies to keep you signed in, remember preferences (including theme), analyze usage, and improve the Services. You can control cookies via your browser settings. Some features may not work without essential cookies.

6. AI Processing & Generated Content

• Your prompts and content may be processed by AI models to generate, improve, or edit web pages.
• We may retain prompts and outputs to provide the service, troubleshoot, prevent abuse, and improve model quality (where permitted).
• Do not submit sensitive personal data in prompts unless necessary and permitted by law.
• You are responsible for reviewing generated content for accuracy and compliance before publishing.

7. Data Retention

We retain information for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion (subject to certain exceptions) as described in “Your Rights”.

8. Security

We implement administrative, technical, and physical safeguards designed to protect information. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

9. Your Rights & Choices

• Access, correction, deletion. You may request a copy, correction, or deletion of your personal data.
• Opt-out of marketing. Use unsubscribe links or contact us.
• Data portability & restriction. Where applicable by law.
• Consent withdrawal. Where processing is based on consent.
• CCPA/CPRA (California). Rights to know, delete, correct, and opt-out of “selling”/“sharing” personal information (we do not sell). Non-discrimination for exercising rights.
• GDPR (EEA/UK). Rights include access, rectification, erasure, portability, restriction/objection, and lodging a complaint with a supervisory authority.

To exercise rights, email: hello@varnz.ai. We may need to verify your identity.

10. Children’s Privacy

The Services are not directed to children under 13 (or under 16 where applicable). We do not knowingly collect personal information from children. If you believe a child has provided us personal data, contact us to request deletion.

11. International Data Transfers

We may process and store information in countries outside your own. Where required, we use appropriate safeguards (e.g., standard contractual clauses) to protect transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date will reflect the most recent changes. If changes are material, we will provide additional notice as required by law.

13. Contact Us

If you have questions about this Policy or your data, contact us at: