Privacy Policy

This Privacy Policy explains what information BannerArt ("we", "us") collects when you use our AI banner generator, how we use it, and the choices you have. If you have any questions, contact us at o.malanii@evernode.tech.

1. Information we collect

• Your Google account basics. You sign in with Google. Google shares basic profile information with us; we use only your name and email address — to create your account, show your name in the app and contact you if needed. We never see or store your Google password.
• What you create. The prompts you write, the options you choose (GEO, promotion type) and the banners generated or edited for you, including their edit history.
• Reference images. If you attach an image with the "+" button, it is sent to our image provider to create your banner. We do not keep the attached file itself.
• Account data. Your token balance and whether your account is active.
• Technical data. Our hosting provider records standard server logs (such as IP address, browser type and request times) to run and secure the service.
• Usage data (Microsoft Clarity). How you use the site — clicks, scrolling, mouse movement, pages visited, and recordings of sessions — together with device, browser and approximate location data. Your prompts, your name and your email address are masked and are not included in these recordings. To link one person's sessions together we send Clarity only an internal account ID — never your name or email.
• Usage statistics (Google Analytics). Pages you visit, buttons you click (for example, starting a generation or opening a plan), the page you came from, and device, browser and approximate location data. We send Google Analytics an internal account ID to count returning users — never your name, email or prompts.

2. How we use your information

• To provide the service: sign you in, generate and edit banners, store them in My Work and let you download them.
• To manage your token balance and keep accounts secure, including blocking accounts that misuse the service.
• To answer your questions and contact you about your account.
• To fix problems and improve BannerArt, including understanding how people use the site through heatmaps and session recordings.

We do not sell your personal data, and we do not share it with advertisers. We do not use advertising trackers. We use Microsoft Clarity and Google Analytics for analytics, as described below.

3. Services that process your data

We rely on a few providers that process data on our behalf, only as needed to run BannerArt:

• Google — sign-in (Google OAuth).
• Supabase — our database, authentication and file storage. Your account data, prompts and generated banners are stored in Supabase.
• OpenAI — image generation. Your prompt (combined with our style instructions) and, if you attach one, your reference image are sent to OpenAI to create or edit the banner, under OpenAI's API terms and privacy policy.
• Vercel — hosting of the website.
• Microsoft Clarity — behavioral analytics (heatmaps and session recordings of clicks, scrolling and navigation). Microsoft processes this data under the Microsoft Privacy Statement.
• Google Analytics — usage statistics (visits, clicks and conversions such as sign-ups). Google processes this data under the Google Privacy Policy. Advertising features are turned off.

These providers may process data in countries other than yours. We may also disclose information if required by law.

4. Cookies and your choice

We use cookies needed to keep you signed in — these are always on, because the site can't work without them. Microsoft Clarity and Google Analytics can also use their own cookies and similar storage to recognize your browser across pages and visits.

On your first visit we show a cookie banner. In the European Economic Area, the UK and Switzerland, Clarity and Google Analytics use analytics cookies only after you accept. Elsewhere, Google Analytics uses them until you decline:

• Accept — Clarity and Google Analytics may use analytics cookies. Advertising storage stays off.
• Decline — we tell Clarity and Google Analytics not to use analytics cookies or advertising storage. They then can't recognize your browser across pages or visits.

We remember your choice in your browser's local storage so we don't ask again, and send it to Clarity and Google Analytics on every page. You can change it at any time:

You can also block or delete cookies in your browser settings. We do not use advertising cookies.

5. How long we keep data

We keep your account and your banners while your account exists. You can delete any banner from My Work at any time — it is then permanently removed together with its edit versions. To delete your whole account and its data, email us at o.malanii@evernode.tech and we will do it within 30 days.

6. Your choices and rights

You can ask us for a copy of your data, to correct it, or to delete it by emailing o.malanii@evernode.tech. Depending on where you live, you may have additional rights under local law, and you may contact your local data protection authority.

7. Age requirement

BannerArt is intended for adults only — you must be at least 18 years old to use it. We do not knowingly collect data from anyone under 18.

8. Security

We use access controls and encrypted connections to protect your data, but no online service can be completely secure.

9. Changes to this policy

We may update this policy from time to time. When we do, we will change the "Last updated" date above. If changes are significant, we will let you know in the app or by email.

10. Contact

Questions about this policy or your data: o.malanii@evernode.tech.