Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

Caspile LLC collects information that you provide directly to us when using our Service, including:

• Email Address: Required for account creation, transaction communications, and account access
• Account Credentials: Email-based passwords for secure account authentication
• Image Generation Prompts: Text descriptions you submit for AI image generation
• Communication Data: Information provided when contacting our customer support team

1.2 Payment Information

Payment information is collected and processed securely through Stripe, Inc. ("Stripe"), our payment processing service. Caspile LLC does not store, process, or have access to your complete payment card details, CVV codes, or full card numbers.

1.3 Automatically Collected Information

When you access caspile.com, we automatically collect certain technical information, including:

• Internet Protocol (IP) address and browser type
• Device information and operating system details
• Usage patterns, pages visited, and time spent on pages
• Session information and authentication timestamps
• Referrer URL and navigation patterns

2. Payment Processing and Stripe

2.1 Stripe as Payment Processor

Stripe's collection, use, and disclosure of your personal information is governed by Stripe's Privacy Policy, available at: https://stripe.com/privacy

2.2 Payment Data We Receive from Stripe

From Stripe, Caspile LLC receives only the following payment-related information:

• Transaction amounts and currency type
• Transaction status (successful, failed, pending, etc.)
• Email address associated with the payment
• Transaction timestamps and unique transaction identifiers
• Payment method type (card, etc.) - but not card details

We do NOT receive or store:

• Complete credit or debit card numbers
• CVV security codes
• Card expiration dates (except for display purposes through Stripe)
• Bank account numbers or routing information
• Any sensitive financial authentication data

2.3 PCI DSS Compliance

Stripe is PCI DSS Level 1 certified, the highest level of certification available in the payment card industry. By using Stripe for payment processing, Caspile LLC maintains compliance with Payment Card Industry Data Security Standards without handling sensitive payment card data directly.

3. Data Storage Method

3.1 JSON Database Storage

Caspile LLC stores user account information in a JSON database file on our secure servers. This includes email addresses, account credentials, credit balances, and generation history.

3.2 Information Stored in JSON Database

The following information is stored in our internal JSON database:

• Email address (used for account identification and login)
• Account password (encrypted or stored in a secure format)
• Current credit balance
• Image generation history (prompts, image paths, timestamps)

3.3 Security Measures

We implement appropriate technical and organizational measures to protect your personal information, including:

• Secure server infrastructure with restricted physical and network access
• File-level encryption and permissions
• Regular security audits and vulnerability assessments
• Access controls limiting data access to authorized personnel only
• Backup and disaster recovery procedures

4. Cookies and Session Data

4.1 Session Cookies

Caspile LLC uses PHP session cookies to maintain your login state and remember your preferences while you use our Service. These cookies are:

• Temporary and expire when you close your browser (unless you choose persistent login)
• Essential for the Service to function properly and securely
• Not shared with third parties or used for advertising purposes
• Stored only on your device and our secure servers

4.2 Cookie Purpose and Usage

Session cookies are used exclusively to:

• Authenticate your login and maintain secure session state
• Remember your account preferences and settings
• Provide secure access to your account dashboard and features
• Prevent unauthorized access to your account

4.3 Managing Cookies

You can control cookies through your browser settings. However, disabling cookies may limit or prevent your ability to use certain features of the Service, including account login and payment processing.

5. How We Use Your Information

Caspile LLC uses the information we collect to:

• Provide, operate, maintain, and improve our Service
• Process transactions and manage your account balance
• Send you service-related communications, including transaction confirmations and account updates
• Respond to your inquiries, requests, and provide customer support
• Detect, prevent, and address technical issues, security threats, and fraudulent activity
• Comply with legal obligations and enforce our Terms of Service
• Generate anonymized analytics to improve Service performance and user experience
• Maintain generation history and account records

6. Information Sharing and Disclosure

6.1 We Do Not Sell Your Data

6.2 Service Providers

We may share your information with trusted third-party service providers who assist us in operating our Service, subject to strict confidentiality agreements:

• Stripe: Payment processing (as detailed in Section 2)
• Hosting Providers: Secure server infrastructure and data storage services
• Analytics Services: Service usage analytics (data is anonymized where possible)

These service providers are contractually obligated to protect your information and use it solely for specified purposes related to Service operation.

6.3 Legal Requirements

Caspile LLC may disclose your information if required by law or in response to valid requests by public authorities, including:

• Compliance with legal processes, court orders, or subpoenas
• Enforcement of our Terms of Service or other agreements
• Protection of our rights, property, or safety, or that of our users
• Prevention of fraud, security threats, or illegal activity
• Response to government or regulatory requests

6.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

7. Data Security

Caspile LLC implements industry-standard security measures to protect your personal information:

• Encryption: Data transmitted over the internet is encrypted using SSL/TLS protocols
• Access Controls: Limited access to personal information on a need-to-know basis
• Secure Storage: Data stored on secure servers with regular backups and redundancy
• Monitoring: Continuous monitoring for security threats, vulnerabilities, and unauthorized access
• Regular Updates: Keeping security systems, software, and infrastructure up to date
• Incident Response: Procedures in place to respond to security incidents

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information using commercially acceptable means, we cannot guarantee absolute security.

8. Data Retention

8.1 Account Data Retention

We retain your account information for as long as your account is active or as needed to provide you services. If you close your account, we will retain certain information as required by law, for legitimate business purposes, or to resolve disputes.

8.2 Transaction Records

Payment transaction records are retained in accordance with applicable financial regulations and tax requirements, typically for a minimum of seven (7) years from the transaction date.

8.3 Generation History

Image generation history is retained for as long as your account is active. You may request deletion of specific history entries at any time through your account interface.

8.4 Deletion Requests

You may request deletion of your personal information by contacting us at support@caspile.com. We will honor such requests subject to legal and regulatory retention requirements, such as transaction record keeping obligations.

9. Your Rights and Choices

9.1 Access to Your Information

You have the right to access, review, update, or correct your personal information at any time through your account dashboard or by contacting us directly.

9.2 Account Deletion

You may request deletion of your account and associated data by contacting us. Please note that certain information may be retained as required by law or for legitimate business purposes, including transaction records.

9.3 Opt-Out of Communications

You can opt-out of non-essential marketing communications by contacting us or using unsubscribe links in our emails. Service-related communications (transaction confirmations, account updates, security alerts) cannot be opted out of as they are essential for account management and security.

9.4 Data Portability

You may request a copy of your personal information in a structured, machine-readable format by contacting support@caspile.com.

10. Children's Privacy

caspile.com is not intended for individuals under the age of 18. Caspile LLC does not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at support@caspile.com. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.

11. International Users

caspile.com is operated from the United States. If you are accessing our Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located and our central database is operated.

By using our Service, you consent to the transfer of your information to the United States and processing in accordance with this Privacy Policy and United States data protection laws.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information is collected, used, shared, or sold
• The right to know if personal information is sold or disclosed for business purposes
• The right to opt-out of the sale of personal information (Caspile LLC does not sell personal information)
• The right to access your personal information
• The right to request deletion of your personal information
• The right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us at support@caspile.com with "CCPA Request" in the subject line.

13. Changes to This Privacy Policy

Caspile LLC may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational, legal, or regulatory reasons. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page with an updated "Last Updated" date
• Sending you an email notification to your registered address (for significant changes)
• Displaying a prominent notice on our website (for substantial changes)

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when posted on this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: