Privacy Policy

1. Introduction

At RTST.ai ("we," "our," or "us"), operated by DDT FZCO, we are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered image and video generation platform, including our website, mobile applications, and related services (collectively, the "Service").

By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

2. Information We Collect

2.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us when you:

• Create an Account: Name, email address, password
• Make a Purchase: Billing information (processed securely through Stripe - we do not store complete credit card details)
• Upload Content: Photos, images, or other media files you upload for AI processing
• Contact Us: Any information you provide when contacting customer support
• Participate in Surveys: Feedback, preferences, and opinions

2.2 Automatically Collected Information

When you access or use the Service, we automatically collect certain information:

• Usage Data: Generated images and videos, prompts, styles selected, filters applied, AI models used
• Device Information: IP address, browser type, operating system, device identifiers
• Log Data: Access times, pages viewed, clickstream data, referral URLs
• Location Information: Approximate geographic location based on IP address
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, and similar technologies

2.3 Information from Third Parties

We may receive information about you from:

• Payment Processors (Stripe): Payment transaction details, billing information
• Analytics Providers: Aggregated usage statistics and demographic information
• Social Media Platforms: If you link your social media accounts (profile information, public posts)

3. How We Use Your Information

We use your information for the following purposes:

3.1 Providing the Service

• Create and manage your account
• Process your AI image and video generation requests
• Deliver generated content to you
• Process payments and manage subscriptions
• Provide customer support and respond to your inquiries

3.2 Improving the Service

• Train and improve our AI models using uploaded content and generated outputs
• Analyze usage patterns and user behavior
• Develop new features and functionality
• Conduct research and testing
• Monitor and analyze trends and performance

3.3 Communications

• Send transactional emails (account notifications, payment confirmations)
• Provide service updates and technical notices
• Send promotional communications (with your consent, where required)
• Respond to your comments, questions, and requests

3.4 Security and Compliance

• Detect, prevent, and address fraud, security issues, and technical problems
• Enforce our Terms and Conditions
• Comply with legal obligations and respond to legal requests
• Protect our rights, privacy, safety, or property

3.5 Marketing and Analytics

• Personalize your experience and deliver targeted content
• Measure the effectiveness of our marketing campaigns
• Conduct market research and analyze user demographics

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide the Service you've subscribed to
• Consent: You have given explicit consent for specific processing activities
• Legitimate Interests: Processing necessary for our legitimate business interests (improving our service, security, fraud prevention)
• Legal Obligation: Processing required to comply with applicable laws

5. How We Share Your Information

We may share your information in the following circumstances:

5.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

• Stripe: Payment processing and subscription management
• Google Analytics: Website and app analytics
• Facebook Pixel: Advertising and conversion tracking
• Snapchat Pixel: Advertising analytics
• TikTok Pixel: Advertising performance measurement
• Microsoft Clarity: User behavior analytics and session recording
• Cloud Hosting Providers: Data storage and server infrastructure
• Email Service Providers: Sending transactional and marketing emails

These service providers have access to your information only to perform tasks on our behalf and are obligated not to disclose or use it for other purposes.

5.2 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal processes (subpoenas, court orders, warrants)
• Requests from government authorities or law enforcement
• Protection of our rights, property, or safety
• Investigation of fraud or security issues

5.4 With Your Consent

We may share your information for any other purpose with your explicit consent.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store information about your use of the Service:

6.1 Types of Cookies We Use

• Essential Cookies: Required for the Service to function (authentication, security)
• Analytics Cookies: Help us understand how users interact with the Service (Google Analytics)
• Advertising Cookies: Track your browsing activity to deliver targeted ads (Facebook Pixel, TikTok Pixel, Snapchat Pixel)
• Preference Cookies: Remember your settings and preferences

6.2 Managing Cookies

You can control and manage cookies through your browser settings. However, disabling certain cookies may limit your ability to use some features of the Service.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption: Data transmitted between your device and our servers is encrypted using SSL/TLS
• Access Controls: Restricted access to personal data on a need-to-know basis
• Secure Payment Processing: Credit card information is processed through PCI-DSS compliant payment processor (Stripe)
• Regular Security Audits: We regularly review and update our security practices
• Data Backups: Regular backups to prevent data loss

8. Data Retention

We retain your personal information for as long as necessary to:

• Provide the Service and maintain your account
• Comply with legal, tax, or accounting requirements
• Resolve disputes and enforce our agreements
• Improve our AI models and Service

Specific Retention Periods:

• Account Data: Retained while your account is active, plus up to 90 days after account deletion
• Payment Records: Retained for 7 years for tax and accounting purposes
• Generated Content: Retained based on your account settings; deleted upon account termination or upon request
• Uploaded Photos: Deleted after processing unless saved to your account; permanently deleted upon account termination
• Analytics Data: Aggregated and anonymized after 26 months

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

9.1 General Rights

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Portability: Request a copy of your data in a machine-readable format
• Objection: Object to certain processing of your personal information
• Restriction: Request restriction of processing in certain circumstances
• Withdraw Consent: Withdraw consent for processing where consent was the legal basis

9.2 GDPR Rights (EEA Residents)

If you are located in the European Economic Area, you have additional rights under GDPR:

• Right to lodge a complaint with your local data protection authority
• Right to object to automated decision-making and profiling
• Right to know the categories of personal data processed

9.3 California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose
• Request deletion of your personal information
• Opt-out of the sale or sharing of personal information (we do not sell personal information)
• Non-discrimination for exercising your privacy rights

9.4 How to Exercise Your Rights

To exercise any of these rights, please contact us at support@rtst.ai. We will respond to your request within 30 days (or as required by applicable law).

10. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16.

If we become aware that we have collected personal information from a child under 16 without parental consent, we will take steps to delete that information as soon as possible.

If you believe we have collected information from a child under 16, please contact us immediately at support@rtst.ai.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

When we transfer your data internationally, we implement appropriate safeguards to protect your information:

• Standard Contractual Clauses approved by the European Commission
• Privacy Shield Framework (where applicable)
• Other legally approved transfer mechanisms

12. Third-Party Links and Services

The Service may contain links to third-party websites, applications, or services that are not operated by us. This Privacy Policy does not apply to third-party services.

We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services you visit or use.

13. Do Not Track Signals

Some web browsers have "Do Not Track" (DNT) features that allow you to tell websites not to track your online activities. We currently do not respond to DNT signals because there is no industry standard for how to respond to them.

14. Marketing Communications

With your consent (where required by law), we may send you promotional emails about new features, special offers, and other updates.

You can opt-out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Adjusting your account notification settings
• Contacting us at support@rtst.ai

Please note that even if you opt-out of marketing emails, we will still send you transactional emails related to your account and subscriptions.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

We will notify you of material changes by:

• Posting the updated Privacy Policy on our website
• Sending an email notification to your registered email address
• Displaying a prominent notice in the Service

The "Last Updated" date at the top of this Privacy Policy indicates when it was last revised. Your continued use of the Service after changes become effective constitutes your acceptance of the updated Privacy Policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

17. Supervisory Authority (EEA Residents)

If you are located in the European Economic Area and believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with your local data protection supervisory authority.

You can find contact information for your local supervisory authority at: https://edpb.europa.eu/about-edpb/board/members_en