Privacy Policy

1. Who we are

This Privacy Policy explains how DataOps, s.r.o., U Skolicky 1148, 253 01 Hostivice, Czech Republic, identification number 19550731, D-U-N-S number 933742551, registered in the Commercial Register maintained by the Municipal Court in Prague under file C 388314, processes personal data in connection with Been there done that, available at app.btdt.fun and related application surfaces.

Contact: support@btdt.fun.

2. What we store

The Service is designed to keep persistent personal data minimal. We store account, credit, payment, and operational records needed to provide the Service, prevent misuse, maintain security, handle support, and comply with accounting, tax, and legal duties.

• Account data: your email address, Google account identifier, and display name received from Google sign-in.
• Credit data: your remaining free and paid credit balances and records of purchased credit packs.
• Payment data: Stripe customer, checkout, payment, currency, amount, refund, and dispute identifiers or status records needed to reconcile payments. Full payment card details are handled by Stripe and are not stored by us.
• Generation records: non-image records needed for billing, audit, support, and ownership checks, such as generation status, credit source, submitted prompt/location text, submitted photo date/time text, variant identifiers, download counters, timestamps, and failure status.
• Security and operations data: request, error, webhook, and diagnostic records needed to run, protect, debug, and enforce the Service.

3. Images are not persistently stored

We do not persistently store uploaded images or generated images. Uploaded images pass through our systems only as needed to process your request. Generated images may be held temporarily in server memory for a short download window, currently up to 1 hour, and are not written to our database or long-term file storage.

If you download or save an output to your own device, that copy is controlled by you. If you close the app or the temporary download window expires, we may not be able to retrieve the generated image for you.

4. Image processing providers

To provide image processing, we send uploaded images and related instructions to OpenAI. OpenAI processes those materials on our behalf according to its applicable service terms and data-processing commitments.

In the future, we may process images with other reputable, established generative AI or image-processing providers where needed to provide, maintain, improve, secure, or scale the Service. Those providers may receive uploaded images, generated images, prompts, and technical request data only as needed for processing.

5. Data we do not store or sell

• We do not persistently store uploaded images.
• We do not persistently store generated images.
• We do not store full payment card numbers.
• We do not sell personal data.
• We do not use uploaded or generated images to build a public profile of you.

6. Browser-side metadata handling

Some image metadata may be handled locally in your browser so that downloads can preserve or adjust metadata selected in the app. The Service is designed so original image metadata is not sent to our servers solely for metadata preservation. You are responsible for reviewing files before sharing them.

7. Why we process data

• To authenticate users and maintain accounts.
• To provide credits, purchases, generations, downloads, support, refunds, and dispute handling.
• To process images and return outputs requested by you.
• To protect the Service against fraud, abuse, security threats, and prohibited use.
• To comply with legal, accounting, tax, payment, platform, and regulatory obligations.
• To monitor, debug, maintain, and improve the reliability of the Service.

8. Third-party services

We use third-party services to operate the Service, including hosting, authentication, payment processing, database, infrastructure, email or support, logging, security, and generative AI providers. These providers process data only as needed for their role in providing the Service or complying with applicable obligations.

Current important providers include Google for sign-in, Stripe for payments, OpenAI for image processing, and hosting or infrastructure providers used to run the web app, worker, database, and deployment pipeline.

9. Retention

Uploaded images and generated images are not kept in persistent storage. Temporary generated-image buffers are automatically removed after the short download window.

Account, credit, payment, generation, support, security, and operational records may be retained for as long as needed to provide the Service, maintain accurate balances, resolve disputes, comply with legal and accounting duties, prevent misuse, and establish, exercise, or defend legal claims. If you delete your account, account-linked app records are deleted where the system supports deletion, except records we must or may retain for legal, tax, accounting, fraud-prevention, dispute, payment, or security reasons.

10. International processing

The Service and its providers may process data in the European Economic Area, the United States, and other countries where our providers operate. Where required, we rely on appropriate transfer mechanisms and provider commitments for international transfers.

11. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data. You may also have the right to lodge a complaint with a data-protection authority.

To request help with privacy rights, contact support@btdt.fun. We may need to verify your identity and account before acting on a request.

12. Children

The Service is not intended for children. Do not use the Service if you are not legally able to agree to the Terms and this Privacy Policy.

13. Changes

We may update this Privacy Policy from time to time. The updated version applies when posted, except where applicable law requires additional notice or consent.