PRIVACY POLICY
Last updated November 5, 2026
What this policy covers
This policy explains how GeneratePosters handles information used to create accounts, generate artwork, sell prints, provide support, send requested emails and measure advertising when permitted. For privacy questions or requests, contact [email protected].
Information you provide
We collect account information such as email, password credentials stored as a hash, display name and optional creator username, biography and profile image. We process generation prompts, uploaded or generated images, saved edits, favorites, reviews and reports. Purchases involve your order details, recipient name, email, delivery address, selected products and payment references. Support messages, newsletter choices and affiliate application or payout references are also recorded.
Technical and consent information
We use necessary sessions and security records to keep you signed in, protect forms, prevent abuse and maintain your cart. Server logs may contain technical information such as IP address, browser details and request times. If you allow optional advertising measurement, we may record advertising click IDs, campaign parameters, a pseudonymous browser identifier, browser details and conversion events. Hashed identifiers are still treated as personal information where applicable law requires it.
Why we use information
We use information to perform your requested services and orders, maintain accounts and credits, prevent fraud and abuse, support customers, comply with recordkeeping obligations and improve operation. Optional marketing email depends on your signup or preference. Optional advertising measurement depends on your consent where required; declining it does not prevent shopping or generation.
Service providers
Relevant providers include OpenAI for generation, SEO and lifestyle-image processing; Stripe for payments and payout onboarding; Gelato for printing and delivery coordination; Mailgun for email; and the hosting, storage and delivery providers needed to operate the service. When enabled and permitted, Meta, TikTok and Google receive advertising or analytics events. We share the information needed for each function, not your full account indiscriminately. Stripe handles payment-card entry; we do not store your full card number or security code.
Public and unlisted artwork
Your chosen public profile, published artwork, listing text and approved review display name can be visible to other visitors. Unlisted listings can be accessed by people who have their link and should not be treated as confidential. Original private artwork downloads require account authorization. Guest order links are private access credentials: anyone possessing a valid link may see its limited order details, so do not publish it.
Email and advertising choices
Footer newsletter signup sends a confirmation email. After you confirm, we send a welcome message and may send inspiration, collection news and offers. Use the unsubscribe link or account email preferences to stop marketing. Necessary account, security and order messages are separate. Advertising controls appear when optional advertising integrations are enabled. You can manage privacy choices here; withdrawing consent prevents future queued advertising events from being sent. Data already sent to a provider may require a separate rights request.
Disclosure, sale and sharing
We do not sell personal information for money. Optional disclosures to advertising platforms can be considered “sharing,” targeted advertising or a “sale” under some privacy laws even without a cash payment. Where applicable, you may opt out of those uses. We may also disclose information when reasonably necessary to comply with law, protect rights and security, or complete a business transfer subject to appropriate protections.
Retention and security
We retain account and artwork data while needed to provide the service, and keep transaction, fraud and support records for applicable business and legal needs. Expiring authentication and guest-access links have limited lifetimes. Backups can retain copies until their normal retirement. We use access controls, credential encryption, password hashing and private file storage, but no system can guarantee absolute security. Public production access should use HTTPS; the local development site is a private test environment.
Your rights and requests
Depending on where you live, you may request access, correction, deletion, a copy of your data, or restriction or objection to certain processing. You may withdraw optional consent without affecting prior lawful processing. Send requests from your registered email or through support; we may verify identity and retain information that law or legitimate recordkeeping requires. We do not charge for ordinary rights requests where the law prohibits it. You may also complain to your local data-protection or consumer authority.
International processing and children
Providers may process data in countries other than your own, subject to applicable safeguards and their service terms. The service is intended for adults and is not directed to children under 13. If you believe a child has supplied personal data without authorization, contact us so we can investigate and take appropriate action.
Updates
We will update this page when our practices change and provide any notice or renewed choice required for a material change. The date above identifies the current version.
YOUR ADVERTISING CHOICE
This controls optional advertising measurement. Necessary account, cart and security functions continue to work.