Privacy Policy for Cololulu

Last updated: June 29, 2025

1. Overview
Cololulu (“we”, “our”, or “us”) operates the software-as-a-service platform available at https://cololulu.com (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the Service.

2. Information We Collect
- Account Information: name, email address, credentials, profile details, and workspace preferences that you submit when creating or managing an account.
- Transaction Information: billing details necessary to process subscription payments. Payment card data is handled by our payment processor and never stored in our systems.
- Generated and Uploaded Content: prompts, images, story inputs, and other files you submit for processing by our AI tooling.
- Usage Data: device information, log files, approximate location, and analytics data about how you interact with the Service.
- Cookies and Similar Technologies: essential cookies to keep you signed in, as well as optional analytics and preference cookies.

3. How We Use Information
We process information to:
- deliver, maintain, and improve the Service;
- personalize product experiences and respond to support requests;
- monitor usage, prevent abuse, and secure the platform;
- comply with legal obligations and enforce agreements; and
- communicate product updates, new features, and transactional notices.

4. How We Share Information
We do not sell personal data. We may share information with:
- Service providers and infrastructure partners (e.g., Supabase for hosting, payment processors for billing, analytics providers for product insights);
- Professional advisors, auditors, or legal authorities when required by law or to protect our rights; and
- Buyers or successors in the event of a corporate transaction, subject to this Privacy Policy.

5. International Transfers
We store and process data using cloud providers that may operate in multiple jurisdictions. When required, we rely on standard contractual clauses or equivalent safeguards to protect the data that leaves your region.

6. Data Retention
We retain information for as long as an account is active or as needed to provide the Service, comply with legal requirements, resolve disputes, and enforce agreements. You may request deletion at any time (see Section 8).

7. Security
We apply administrative, technical, and organizational measures designed to protect your information against unauthorized access, loss, or misuse. No online system is perfectly secure, so you are responsible for safeguarding your account credentials.

8. Your Rights
Depending on your location, you may have the right to access, correct, delete, or export your personal data, object to processing, or request restriction of processing. To exercise these rights, contact us at privacy@cololulu.com. We may require proof of account ownership before fulfilling requests.

9. Children’s Privacy
The Service is not directed to children under 13 (or 16 in the EEA/UK). We do not knowingly collect personal data from children. If you believe a child provided personal information, contact us and we will delete it.

10. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or the law. Material changes will be announced through the Service or via email. Continued use of the Service after the updated policy becomes effective constitutes acceptance.

11. Contact
For privacy questions or requests, email us at privacy@cololulu.com.

Thank you for trusting Cololulu to power your creative workflows.