Privacy Policy

Last updated: 02 May 2025

  1. Who We Are

    Benja SAS ("we/us"), based in Uruguay, is the controller of personal data collected via the Italian Brainrot Generator webapp.

  2. What We Collect

    DataPurposeRetention
    Name, email, password hashAccount creation & loginKept until you request deletion
    Google OAuth ID (if used)AuthenticationSame as above
    Prompt text & generated imagesProvide service, improve model, marketing showcasesIndefinite
    PayPal transaction ID (no card data)Payment & fraud preventionLegal/finance retention period
    IP address & basic device dataSecurity & abuse prevention1 year

  3. How We Use Data

    • Operate and secure the Service
    • Process payments and manage credit balance
    • Improve and market the Service (using de‑identified snippets or thumbnails)
    • Comply with legal obligations

  4. Third‑Party Sharing

    We share data only with service providers essential to run the app:

    • Supabase (hosting/auth/database)
    • PayPal (payments)
    • OpenAI API & Google Cloud (image generation)
    • Vercel (frontend hosting)

    All vendors are bound by confidentiality agreements.

  5. Your Choices

    • Account deletion: email benja.apps@outlook.com to close your account.
    • Marketing opt‑out: use the unsubscribe link in any marketing email.

    (We currently do not offer additional GDPR/CCPA rights; the app is intended for adult users only.)

  6. Security

    We use HTTPS, salted password hashes, and role‑based access controls. No system is 100% secure; use the Service at your own risk.

  7. International Transfers

    Your data may be stored or processed on servers outside Uruguay. We use reputable cloud providers and standard contractual clauses where required.

  8. Changes to This Policy

    We will post any changes on this page and update the "Last updated" date. Material changes take effect 14 days after posting.

  9. Contact

    For privacy inquiries, email benja.apps@outlook.com.