Privacy Policy

1.1 Information You Provide:

• Account Information: Name, email address, and password when you create an account
• Payment Information: Credit card details, billing address, and transaction history (processed securely through Stripe)
• Profile Information: Business name, website URL, and preferences you provide
• Communications: Messages you send to us via email or support channels

1.2 Information Generated Through Use:

• AI Prompts & Outputs: The prompts you submit to our AI tools and the content generated in response
• Website Content: The websites, pages, and content you create using our platform
• Usage Data: Features used, actions taken, time spent, and interaction patterns

1.3 Automatically Collected Information:

• Device Information: Browser type, operating system, device type, and unique device identifiers
• Log Data: IP address, access times, pages viewed, and referring URLs
• Cookies & Tracking: Cookies, pixels, and similar technologies (see Section 7)

We use the information we collect to:

• Provide the Service: Create and manage your account, process transactions, and deliver features
• Improve Our AI: Analyze prompts and outputs to enhance our AI models and service quality
• Personalize Experience: Customize features and recommendations based on your usage
• Communicate: Send service updates, security alerts, and promotional messages (with your consent)
• Ensure Security: Detect fraud, prevent abuse, and maintain platform integrity
• Legal Compliance: Comply with applicable laws and respond to legal requests
• Analytics: Understand usage patterns and improve our Service

We do not sell your personal information. We may share your information in the following circumstances:

3.1 Service Providers: We share data with trusted third parties who help us operate our Service:

• Stripe: Payment processing
• Supabase: Database and authentication
• Vercel: Website hosting and deployment
• OpenAI: AI content generation
• Analytics providers: Usage analytics and performance monitoring

3.2 Legal Requirements: We may disclose information if required by law, court order, or government request.

3.3 Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

3.4 With Your Consent: We may share information for other purposes with your explicit consent.

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this policy:

• Account Data: Retained while your account is active and for up to 30 days after deletion
• Payment Records: Retained for 7 years for tax and legal compliance
• AI Prompts & Outputs: Retained to provide service history and improve our AI models. You may request deletion of specific data.
• Usage Logs: Retained for up to 12 months for analytics and security purposes
• Websites You Create: Retained while your account is active; deleted within 30 days of account termination

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (subject to legal retention requirements)
• Portability: Request your data in a portable format
• Opt-Out: Unsubscribe from marketing emails at any time
• Cookie Preferences: Manage cookie settings through our cookie banner or your browser

To exercise these rights, please contact us at support@varakit.com. We will respond within 30 days.

We implement industry-standard security measures to protect your information:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure payment processing through PCI-compliant Stripe
• Regular security audits and vulnerability assessments
• Access controls and authentication requirements
• Secure cloud infrastructure through Vercel and Supabase

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

VaraKit is based in the United States. If you access our Service from outside the US, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

By using our Service, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

Our Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If we discover that we have collected information from a child under 18, we will delete it promptly. If you believe we have collected information from a child, please contact us at support@varakit.com.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about the categories and specific pieces of personal data we collect
• Right to Delete: Request deletion of your personal data
• Right to Opt-Out: Opt out of the sale of personal information (we do not sell your data)
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise your CCPA rights, contact us at support@varakit.com.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a prominent notice on our website at least 30 days before the changes take effect. Your continued use of the Service after the effective date constitutes your acceptance of the updated policy.

If you have any questions about this Privacy Policy or our data practices, please contact us: