Privacy Policy
Last updated: March 28, 2025
Accessibility: This privacy policy is written in plain language to ensure accessibility and understanding for all users.
1. Introduction & Scope
Who we are
AI Panda ("AI Panda," "we," "us") provides an AI app that houses various AI tools, including image generation, video generation, and AI chat experiences for creators and teams.
Scope
This Privacy Policy explains how we collect, use, disclose, and protect Personal Data related to our website, mobile applications, and services (the "Services").
Definitions
- Personal Data: Any information that identifies or relates to an identifiable individual.
- Services: Our website, mobile applications, AI tools, and related features.
- Account: Your registered user profile with AI Panda.
- Service Providers/Processors: Vendors that process Personal Data on our behalf under contract.
Out of scope: This policy does not cover public community posts or content you choose to make publicly available.
2. Data We Collect
| Category | Purpose | Recipients |
|---|---|---|
| Account & Contact Data Email, display name, profile info | Account creation, authentication, support | Auth providers, CRM, email service providers |
| Conversations & Inputs Messages, files, prompts, AI outputs (including generated images and videos) | Deliver features, optional model improvement | Model hosting and safety vendors |
| Device & Usage Data IP, device IDs, browser, OS, timestamps, feature use, crash logs | Security, fraud prevention, analytics, debugging | Analytics, logging, security providers |
| Support Content Tickets, screenshots, feedback | Resolve issues, improve services | Support platform providers |
| Payment Data Processed by Stripe; we do not store full card numbers | Process payments, billing | Stripe (payment processor) |
Sensitive Data: We do not intentionally collect sensitive personal information such as health data, biometric data, or precise geolocation.
3. Legal Bases (EU/UK)
We process Personal Data under these legal bases:
- Contract: To provide the Services you've requested
- Legitimate Interests: Security, fraud prevention, product improvement not requiring consent
- Consent: Optional marketing, cookies, model training where required
- Legal Obligations: Compliance with applicable laws
Note: You may withdraw consent at any time through your account settings or by contacting us. You also have the right to lodge a complaint with your local supervisory authority.
4. AI & Model Improvement
Service Delivery
We process your prompts and outputs to operate features such as AI chat, image generation, video workflows, conversation memory, custom AIs, and personalization.
Model Improvement
Opt-out by default: We may use your content to improve our models and AI capabilities. You can opt out anytime in Settings → Privacy or by emailing panda@aipandatools.com.
Human Review
Limited, access-controlled human review may occur for safety, quality assurance, and abuse prevention purposes.
Third-Party Models
We may send your inputs to third-party model providers (acting as processors) to generate outputs, under strict contractual safeguards.
Retention for Training
If you delete content or your account, we will remove associated records from training pipelines and datasets within 30 days, subject to backup and audit-log constraints.
Automated Decisions
We do not make decisions with legal or similarly significant effects based solely on automated processing without human involvement. If this changes, we will notify you and provide a right to contest such decisions.
5. Cookies & Tracking Technologies
We use cookies and similar technologies for:
- Essential operations: Authentication, security, basic functionality
- Analytics: Understanding usage patterns and improving our services
- Performance: Error reporting and debugging
You can manage cookie preferences through our consent banner or your browser settings. We honor Global Privacy Control (GPC) signals for opt-out of sale/sharing where required by law.
6. Sharing & Disclosures
We share Personal Data with:
- Service Providers/Processors: Hosting, analytics, security, support, payment processing
- Affiliates: Under this Privacy Policy's protections
- Legal & Safety: To comply with law, enforce terms, prevent harm
- Business Transfers: In case of merger, financing, or acquisition, subject to this Policy continuing or successor notice
Important: We do not sell Personal Data. We do not share Personal Data for cross-context behavioral advertising unless explicitly stated and opt-out is provided.
7. International Transfers
When we transfer Personal Data internationally, we rely on Standard Contractual Clauses (SCCs) and additional safeguards as required by law.
Transfer mechanism summaries are available upon request. Contact us for more information about our international transfer safeguards.
8. Security
We implement comprehensive security measures including:
- Technical safeguards: Encryption in transit and at rest, secure protocols
- Administrative controls: Least-privilege access, security training, vendor assessments
- Physical security: Secure data centers and facilities
- Monitoring: Continuous security monitoring, auditing, and incident response
Breach notification: No security method is perfect. If we detect a data breach that may affect you, we will notify affected users and authorities as required by law.
9. Data Retention
We keep Personal Data only as long as needed for the purposes described:
| Data Type | Retention Period |
|---|---|
| Account data | Life of account + 90 days |
| Conversations & files | Until deletion by you; backups roll off within 35 days |
| Analytics logs | 30-180 days |
| Security logs | Up to 2 years for fraud prevention |
We anonymize or delete data when no longer needed for legitimate business purposes.
10. Your Rights
Depending on your location, you may have the following rights:
Data Rights
- Access your Personal Data
- Correct inaccurate information
- Delete your data
- Object to processing
- Restrict processing
- Data portability
- Withdraw consent
How to Exercise Rights
- In-app: Settings → Privacy
- Email: panda@aipandatools.com
- Response time: 30-45 days
- Identity verification required
- Appeal rights available (certain US states)
Marketing opt-out: You can opt out of marketing communications at any time using the unsubscribe link in emails or through your account settings.
11. California Privacy Notice
For California residents, we provide additional disclosures under the California Consumer Privacy Act (CPRA):
- We collect the categories of Personal Information described in Section 2
- We use this information for the business purposes outlined in this policy
- We retain data according to the schedule in Section 9
- We do not "sell" or "share" Personal Information as defined by CPRA
We do not collect sensitive Personal Information requiring limitation rights under CPRA.
12. Children's Privacy
We do not knowingly collect data from children under:
- 13 years old in the United States
- 16 years old in the European Economic Area and United Kingdom (unless country-specific lower age applies)
Parents or guardians may contact us to request deletion of their child's data. We will verify parental authority and comply with applicable consent requirements.
13. De-identified & Aggregated Data
We may use de-identified or aggregated data for research, analytics, and service improvement. We implement safeguards to prevent re-identification and do not attempt to re-identify such data.
14. Changes to This Policy
We may update this Privacy Policy from time to time. For material changes, we will:
- Provide at least 15 days' advance notice via email or in-app notification
- Post the updated policy on our website
- Maintain a version history for reference
What counts as "material": Changes to data collection practices, sharing with new third parties, or changes to your rights.
15. Contact Information
Privacy-Specific Contacts
For privacy-related inquiries, use the general contact information above. EU/UK representative and DPO contact information will be provided here if applicable as our operations expand.