Privacy Policy

1. Who We Are

Incultnito Studios LLC ("we," "us," "our") operates Incultnito Studio, an AI-powered garment mockup and design platform accessible at incultnito.com. We are a limited liability company registered in the State of Wyoming, United States.

2. Information We Collect

We collect information you provide directly and information generated through your use of the Service:

Account Information: Email address and password when you create an account via Supabase Auth.

Uploaded Content: Garment photos you upload for AI mockup generation. These are stored on Cloudinary (a third-party image hosting service).

Generated Content: AI-generated mockup images created from your uploads. Stored on Cloudinary.

Usage Data: Upload counts, render counts, streak data, and feature usage for tier enforcement and product improvement.

Payment Information: Processed by Stripe. We do not store credit card numbers. Stripe's privacy policy applies to payment data.

Social Media Data: If you connect a social media account (Facebook, Instagram, or other platforms) to our Service, we may collect your public profile information, page access tokens, and content publishing permissions as authorized by you. We do not access private messages or friend lists.

3. How We Use Your Information

• To provide and maintain the Studio platform
• To process AI garment mockup generation
• To enforce tier-based usage limits
• To process payments via Stripe
• To send transactional emails (password reset, account confirmation)
• To improve our AI compositing quality
• To display anonymized activity in the community feed (first name + last initial only)
• To publish content to your connected social media accounts on your behalf, only when you explicitly initiate a post

4. Third-Party Services

We share data with the following third-party services solely for the purpose of providing the Service:

• Supabase: Authentication and database
• Cloudinary: Image storage and transformation
• Google Gemini / OpenAI: AI image generation
• Stripe: Payment processing
• Meta (Facebook / Instagram): Social media content publishing via Instagram Graph API and Facebook Pages API
• Buffer: Social media scheduling and publishing
• Vercel: Frontend hosting
• Render: Backend hosting

5. Cookies and Tracking

We use essential cookies for authentication and session management. We do not use advertising cookies or third-party tracking cookies. Analytics are collected via Vercel Analytics using privacy-friendly, cookieless methods. For more details, see our Cookie Policy.

6. Data Retention

Your account data is retained while your account is active. Uploaded garment photos and generated mockups are retained indefinitely unless you delete them. Social media access tokens are stored securely and revoked upon disconnection. Anonymous session data expires after 24 hours. You may request deletion of all your data by contacting hello@incultnito.com.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update inaccurate personal data
• Deletion: Request deletion of your personal data (see our Data Deletion page)
• Portability: Export your mockup data
• Opt-out: Disconnect social media accounts or opt out of the community activity feed
• Revocation: Revoke social media permissions at any time through your connected platform's settings

To exercise any of these rights, contact hello@incultnito.com. We will respond within 30 days.

8. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately and we will delete it.

9. International Transfers

Your data may be processed in the United States and other countries where our service providers operate. By using the Service, you consent to the transfer of your data to these jurisdictions. We ensure appropriate safeguards are in place with our service providers.

10. Security

We use industry-standard security measures including HTTPS encryption, timing-safe authentication, Helmet.js security headers, and rate limiting. Bearer tokens are compared using constant-time algorithms to prevent timing attacks. Social media tokens are encrypted at rest.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification. Your continued use of the Service after changes constitutes acceptance.

12. Contact

Incultnito Studios LLC
Email: hello@incultnito.com
Website: incultnito.com