This Privacy Policy explains how BannerKraft collects, uses, stores, and shares personal information when you visit the website, create an account, use the app, generate poster concepts, pay for a plan, or contact support.
If you do not agree with this Privacy Policy, do not use BannerKraft.
Who we are
BannerKraft is operated from Vancouver, Canada. You can contact us at [email protected].
Information we collect
We collect information you provide directly, information created by your use of the service, and limited technical information needed to run the service.
Account information includes your email address, password authentication data, account identifiers, session data, and account settings.
Project information includes poster titles, briefs, occasion details, style notes, size and orientation choices, generated prompts, generated images, selected images, edit instructions, and project history.
Reference material may include images or other files you upload or attach to a project.
Billing information includes Stripe customer IDs, subscription IDs, product and price IDs, billing status, credit grants, credit usage, invoices, payment event metadata, and checkout or billing portal status. We do not store full card numbers.
Support information includes emails, replies, support chat messages, account identifiers, and any content you choose to send when asking for help.
Technical information includes IP address, request metadata, device and browser information, logs, error reports, rate-limit events, security events, and approximate timestamps.
Analytics information includes page views, navigation events, sign-up and checkout clicks, selected app events, browser and device details, approximate location derived from IP address, referrers, campaign parameters, and internal account identifiers when you are signed in.
How we use information
We use personal information to:
- Create and secure accounts.
- Let you create, save, view, edit, and delete projects.
- Generate poster concepts and project briefs.
- Store and serve generated images.
- Track credits, subscriptions, and billing status.
- Send account, password reset, welcome, support, and service emails.
- Provide customer support and in-app chat.
- Prevent abuse, spam, fraud, scraping, and unauthorized access.
- Debug errors, monitor reliability, and improve the service.
- Comply with legal, tax, accounting, payment, and security obligations.
AI processing
BannerKraft uses AI model providers through OpenRouter to generate project brief drafts, prompt plans, and poster images. To do this, we send relevant project content to those providers, such as your brief, style notes, generated prompts, selected image context, and reference material.
Do not submit private, sensitive, confidential, regulated, or third-party content unless you have permission and are comfortable having it processed by BannerKraft and its AI providers.
AI providers may process requests according to their own terms, privacy policies, logging practices, retention settings, and abuse-monitoring rules.
Service providers
We use third-party providers to run BannerKraft. These may include:
- Stripe for checkout, subscriptions, billing portals, invoices, payment events, and payment-related customer records.
- OpenRouter and underlying AI model providers for text and image generation.
- Cloudflare R2 or compatible object storage for generated images and backups.
- Resend and Swoosh-supported email infrastructure for transactional email.
- Crisp for in-app support chat and support identity verification.
- Google Analytics for website usage, conversion, and product improvement measurement.
- Hosting, database, deployment, logging, monitoring, and infrastructure providers needed to operate the app.
We share information with these providers only as needed to provide, secure, maintain, or improve BannerKraft, or as required by law.
Generated image URLs
Generated images may be stored in object storage and served through URLs. Some image URLs may be accessible to anyone who has the URL. Avoid putting private or sensitive information into poster briefs, reference images, or generated images.
Cookies, sessions, and local storage
BannerKraft uses cookies and browser storage for account sessions, security, preferences, LiveView operation, support chat behavior, and app functionality. Disabling cookies may prevent the app from working correctly.
Google Analytics may use cookies or similar browser identifiers to measure website and app usage, understand traffic sources, and help us improve BannerKraft. When you are signed in, we may send Google Analytics an internal account identifier, but we do not send your email address, poster briefs, prompts, edit instructions, project titles, or generated image URLs to Google Analytics.
Retention
We keep account, project, generated image, billing, and support information for as long as needed to provide the service, meet legal obligations, resolve disputes, prevent abuse, and maintain business records.
We may keep billing, tax, security, audit, and backup records after an account is deleted where required or reasonably necessary. Backups may take time to expire from normal backup rotation.
Deletion and access requests
You can request access, correction, export, or deletion of personal information by contacting [email protected]. We may need to verify your account before completing a request.
Deletion may not remove information that we must keep for legal, security, payment, accounting, dispute, or backup reasons.
Security
We use reasonable technical and organizational measures to protect personal information, including access controls, secure password handling, HTTPS in production, and provider-level security controls.
No internet service is perfectly secure. You are responsible for using a strong password, keeping your account credentials private, and contacting us if you suspect unauthorized access.
Children
BannerKraft is not intended for children under 13. Do not use BannerKraft if you are under 13. If you believe a child has provided personal information, contact us so we can review and delete it where appropriate.
International processing
BannerKraft is operated from Canada and uses service providers that may process information in Canada, the United States, the European Economic Area, and other countries. Those countries may have different privacy laws than where you live.
Changes
We may update this Privacy Policy as the service, providers, legal requirements, or product behavior changes. If changes are material, we will make a reasonable effort to notify users through the app, email, or the website.
Contact
Questions or requests about privacy can be sent to [email protected].