Privacy Policy

1. Introduction

Karia Labs Ltd ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use Canvas Eterno.

We are registered in England and Wales and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We collect the following types of information:

• Images you upload: Photographs you submit for transformation into artwork
• Email address: Provided during checkout for order confirmation and delivery
• Payment information: Processed securely by Stripe; we do not store your card details
• Usage data: Anonymous analytics about how you interact with our service

3. How We Use Your Information

We use your information to:

• Process your uploaded images and generate artwork
• Process payments and deliver your purchased artwork
• Send order confirmations and delivery notifications
• Improve our service and user experience
• Comply with legal obligations

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract: Processing necessary to fulfil your order
• Legitimate interests: Improving our services and preventing fraud
• Legal obligation: Compliance with applicable laws

5. Data Storage and Security

Your data is stored securely using industry-standard encryption. We use trusted third-party services:

• Supabase: For secure database and file storage
• Stripe: For secure payment processing (PCI DSS compliant)
• Google Cloud: For AI image processing

Uploaded images are stored temporarily for processing and delivery. We retain your data for a reasonable period to fulfil your order and comply with legal requirements.

6. Data Sharing

We do not sell your personal data. We share data only with trusted service providers necessary to deliver our service:

• Payment processors (Stripe)
• Cloud infrastructure providers
• AI processing services

All third parties are contractually obligated to protect your data and use it only for the purposes we specify.

7. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

To exercise these rights, please contact us at the details below.

8. Cookies

We use essential cookies necessary for the website to function. We do not use tracking cookies for advertising purposes.

9. International Transfers

Your data may be processed outside the UK by our service providers. Where this occurs, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the UK Information Commissioner's Office.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated revision date.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Karia Labs Ltd
United Kingdom
Email: hello@karialabs.com

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.