NanoBananas 개인정보처리방침

1. Introduction & Scope

Welcome to NanoBananas ("the Platform", "we", "us", or "our"). We recognize that personal privacy and data ownership are fundamental to our creators. We are dedicated to adhering to international privacy standards, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act as amended (CCPA/CPRA).

This Privacy Policy outlines how we collect, process, store, safeguard, and handle your information when you access nanobananas.si, register an account, enter prompts, upload reference graphics, and utilize our AI creative suite.

2. Categories of Information We Collect

We collect information strictly necessary to provide and refine our creative workflows:

(1) Account & Identity Credentials

When you authenticate via third-party OAuth (e.g., Google Sign-In) or email authentication, we receive your email address, profile display name, avatar URL, and platform-generated unique user identifier. This data enables authentication sessions and ties your generation history to your account.

(2) Creative Inputs & Outputs

During the generation workflow, we receive your text prompts, style tokens, ratio/resolution specifications, and any optional reference images or photos you upload. We also store resulting AI-rendered images in your personal archive for convenient download and review.

(3) Transactional & Billing Records

When purchasing creative credit packages, we record transaction identifiers, package tier details, timestamps, and order status. We do not access or store complete credit card numbers or card security codes (CVC/CVV). All billing transactions are securely tokenized and handled by PCI-DSS Level 1 compliant payment gateways (e.g., Stripe).

(4) Technical Telemetry & Device Data

To preserve system stability and block abusive traffic, our infrastructure automatically logs standard diagnostic data: IP address, user agent, browser environment, operating system, server latency metrics, and application error logs.

(5) Local Preferences & Cookies

We utilize standard local browser storage and essential cookies to preserve your theme selection (dark/light), language preference (English/繁體中文), and session tokens.

3. Purposes & Legal Grounds for Processing

We process personal data based on legitimate business needs and contractual performance:

• Service Delivery: Processing prompts and images through our synthesis pipeline, maintaining account credit ledgers, and rendering high-definition downloads.
• Support & Operational Messages: Responding to customer inquiries, resolving billing questions, and providing essential service updates.
• Security & Abuse Prevention: Enforcing our Acceptable Use Policy, protecting our infrastructure against automated scrapers and DDoS vectors, and screening for illicit material.
• Performance Optimization: Reviewing aggregate latency statistics and usability analytics to enhance platform speed and user experience.

4. AI Inference & Third-Party Sub-Processors

To deliver rapid, high-fidelity AI image generation, NanoBananas collaborates with enterprise-grade infrastructure providers:

• Google Gemini API: User text prompts and uploaded reference images are transmitted via encrypted API connections to Google's Gemini 2.5 Flash Image API for real-time model synthesis. This processing is governed by Google's enterprise cloud terms. We do not harvest or sell your private prompts or images to train external public foundation models.
• Supabase Cloud: Provides hardened PostgreSQL storage with Row-Level Security (RLS) and cryptographic user authentication.
• Edge Hosting & CDN: We leverage premier cloud infrastructure to ensure low-latency worldwide image delivery and high availability.

5. Data Retention & User Autonomy

You retain sovereign control over your created content:

• Individual Artwork Erasure: You can permanently remove individual generated images at any time directly through your user gallery.
• Complete Account Deletion: You can trigger a permanent account deletion via our self-service portal at /delete-account or by contacting our support team. Upon verification, your profile credentials and linked generation records will be permanently purged or irreversibly anonymized.

6. Information Security Architecture

We deploy enterprise-grade technical safeguards:

• Mandatory TLS 1.3 / HTTPS encryption across all web and API communications.
• AES-256 encryption at rest for database clusters and cloud media buckets.
• Strict Row-Level Security (RLS) barriers isolating each creator's account assets.
• Routine security vulnerability audits and principle of least privilege access for system operators.

7. Your International Privacy Rights (GDPR & CCPA)

Depending on your jurisdiction, you possess enforceable statutory rights:

• Right to Access: Request a copy of the personal information we maintain regarding your account.
• Right to Rectification: Request correction of inaccurate or outdated information.
• Right to Erasure ("Right to be Forgotten"): Request the permanent deletion of your account and personal history.
• Right to Restriction & Objection: Object to or request restriction of certain processing workflows.
• Right to Data Portability: Obtain your stored creations and account data in a structured, machine-readable format.
• Non-Discrimination: We will never penalize, deny service, or charge disparate prices because you exercise your lawful privacy rights.

To exercise any statutory privacy rights, please contact us from your registered account email at: support@nanobananas.si.

8. Minors & Children's Privacy

NanoBananas is strictly intended for individuals who are 13 years of age or older (or 16 where required by local statute). We do not knowingly solicit or collect personal identifiable information from children under these age thresholds. If we discover that a minor has created an account without parental consent, we will promptly delete all associated data.

9. Amendments to this Policy

We may periodically revise this Privacy Policy to reflect technical enhancements or regulatory developments. Updated editions will be published on this page with an amended Effective Date. For material modifications, we will issue prominent on-site notifications or email alerts to registered users.

10. Contact Us