DRAWTOPIA PRIVACY POLICY

Our Commitment to Children's Safety:

Drawtopia is designed for children aged 13 and older, with parental consent required for users under 13. We do not knowingly collect personal information from children under 13 without verified parental consent. We comply with COPPA and take a child-protective approach to all data practices.

For Users Under 13:

If your child uses Drawtopia, we collect only the information necessary to provide the Service. We require verifiable parental consent before collecting, using, or disclosing any personal information from children under 13. Parents have the right to:

• View the types of information we collect about their child
• Request access to their child's personal information
• Request correction or deletion of their child's information
• Withdraw consent and have the child's account terminated
• Opt their child out of marketing communications

The types of personal information we collect depend on how you interact with Drawtopia. We collect information in the following categories:

A. Information You Provide Directly

• Full name (parent/guardian and child, if applicable)
• Email address
• Phone number (optional)
• Date of birth or age
• Password and account security questions
• Billing and shipping address
• Payment information (processed securely by Stripe or Shopify)

• Drawings, artwork, and creative works you or your child uploads
• Text descriptions, titles, and captions for creations
• Comments, feedback, and messages
• Any other content you submit through the Service

• Emails you send us
• Support tickets and customer service inquiries
• Feedback, surveys, or participation in research

• For users under 13, we collect parent/guardian name, email, phone number, and proof of parental relationship

B. Information Collected Automatically

• Device type, operating system, and app version
• IP address and general geographic location (derived from IP)
• Browser type and language preferences
• Pages or features accessed
• Time and duration of activities
• Click patterns and interactions with our app or website
• Mobile device identifier (Apple ID or Google advertising ID)
• Crash reports and error logs

• Remember your preferences and login information
• Analyze how you use Drawtopia
• Improve the Service
• Deliver targeted advertisements (for users 13 and older)
• Prevent fraud

You can control cookies through your browser settings. Disabling cookies may impact some features of Drawtopia.

Analytics: We use Google Analytics and PostHog to understand how users interact with Drawtopia. These services may track your browsing patterns across multiple websites. For more information, review Google's privacy policy at https://policies.google.com/privacy.

C. Information from Third Parties

We may receive information about you from:

• Payment processors (Stripe, Shopify) who provide billing information
• Analytics providers (Google, PostHog)
• Social media platforms if you connect your account
• Other users who refer you to Drawtopia
• Public records and databases

We use the information we collect for the following purposes:

A. Providing the Service

• Creating and managing your account
• Processing payments and managing subscriptions
• Generating personalized storybooks, coloring pages, and other content
• Storing and managing your User Content
• Providing customer support and responding to inquiries
• Sending transactional emails (order confirmations, password resets, account updates)

B. Improving and Developing Drawtopia

• Analyzing usage patterns to improve features and functionality
• Conducting research and analytics
• Testing new features and services
• Personalizing your experience
• Debugging and fixing technical issues
• Enhancing security and preventing fraud

C. Marketing and Advertising (For Users 13 and Older)

• Sending promotional emails about new features, offers, and products
• Displaying targeted advertisements on our website and app
• Showing advertisements on social media and partner websites based on your interests
• Conducting surveys and requesting feedback
• Analyzing the effectiveness of our marketing campaigns

You may opt out of marketing communications at any time by clicking the unsubscribe link in emails or adjusting your notification settings in your account.

D. Legal and Compliance

• Complying with legal obligations and court orders
• Protecting against fraud, security threats, and unauthorized access
• Enforcing our Terms of Service and other agreements
• Resolving disputes

E. Marketing Use of Children's Drawings

With your consent at signup, we may use drawings and User Content created by children for:

• Marketing materials and case studies
• Social media posts and advertisements
• Website galleries and portfolio displays
• Promotional campaigns
• Press and media coverage

If you do not wish your child's drawings to be used for marketing purposes, you may opt out at any time by contacting us at hello@drawtopia.ai. We will remove previously posted content within 30 days of your request.

We may share your personal information with third parties in the following circumstances:

A. Service Providers

We share information with service providers who help operate Drawtopia:

• Payment processors (Stripe, Shopify)
• Cloud storage providers (AWS)
• Analytics platforms (Google Analytics, PostHog)
• Content generation services (Google Imagen 3, OpenAI GPT-4, Google TTS)
• Email delivery service (Resend)
• Advertising partners (Facebook/Meta pixel)
• Hosting providers (Vercel)

These providers are contractually obligated to use your information only to provide services to Drawtopia and to protect your data.

B. Legal Requirements

We may disclose personal information when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with legal obligations, court orders, or government requests
• Enforce our Terms of Service and other agreements
• Protect the safety, rights, and property of Drawtopia, our users, or the public
• Prevent fraud or illegal activity
• Respond to law enforcement or regulatory inquiries

C. Business Transfers

If Drawtopia is acquired, merged, or sold, your personal information may be transferred as part of that transaction. We will provide notice of any such change and any choices you may have regarding your information.

D. With Your Consent

We may share your information with third parties when you explicitly consent, such as when you authorize a third-party service or choose to connect your account to another platform.

E. Aggregated and De-Identified Data

We may share aggregated, anonymized data that does not identify you personally with third parties for research, marketing, or analytics purposes. This data cannot be used to identify you.

F. No Sale of Children's Data

We do not sell, rent, or share the personal information of children under 13 with third parties for marketing or commercial purposes, except as necessary to provide the Service.

A. Retention Periods

We retain your personal information for as long as necessary to provide the Service, comply with legal obligations, and resolve disputes. Specific retention periods are:

User Account Information: Retained while your account is active and for 30 days after account termination or deletion request. After 30 days, your account information is permanently deleted.

User-Generated Content (Drawings): Retained while your account is active. Upon your request for deletion, content is removed from active systems within 30 days. Copies in backup systems may persist for technical or legal reasons but will not be accessible.

Payment and Billing Information: Retained for as long as necessary for accounting, tax, and fraud prevention purposes, typically 7 years (as required by law).

Automated Tracking Data (Cookies, Analytics): Retained for up to 26 months.

Children's Data (Under 13): Deleted within 30 days of parental request or upon account termination, unless retention is required by law.

B. Right to Deletion

You have the right to request deletion of your personal information. To request deletion, contact us at hello@drawtopia.ai with "DELETION REQUEST" in the subject line and provide:

• Your full name
• Email address associated with your account
• Account username or child's name (if applicable)
• Description of what you want deleted

We will confirm receipt of your request and complete the deletion within 30 days. Note that some information may be retained for legal, tax, or backup purposes.

• Retention is required by law
• The information is necessary to complete a transaction
• The information is necessary to resolve a dispute or claim
• There is an active, unresolved legal investigation

Depending on your location, you have certain rights regarding your personal information:

A. Right of Access

You have the right to request correction of inaccurate or incomplete information. You can update much of your information directly through your account settings, or contact us at hello@drawtopia.ai.

B. Right to Correction

You have the right to request correction of inaccurate or incomplete information. You can update much of your information directly through your account settings, or contact us at hello@drawtopia.ai.

C. Right to Deletion

As described in Section 5, you have the right to request deletion of your personal information.

D. Right to Restrict Processing

You have the right to request that we limit how we use your personal information. This is useful if you believe we have inaccurate data or are using it unlawfully. Contact us at hello@drawtopia.ai to request a restriction.

E. Right to Portability (GDPR)

If you are located in the EU, UK, or Switzerland, you have the right to receive a copy of your personal information in a portable, machine-readable format and to transmit it to another organization. Contact us at hello@drawtopia.ai to request your data in CSV or JSON format.

F. Right to Object (GDPR)

You have the right to object to our processing of your personal information based on our legitimate interests. This includes opting out of marketing and analytics. Contact us at hello@drawtopia.ai.

G. Right to Withdraw Consent

If we rely on your consent to collect or use your personal information, you may withdraw that consent at any time. This does not affect the lawfulness of processing before you withdrew consent.

H. Right to Appeal (GDPR)

If we deny your request, you have the right to appeal our decision. Send your appeal to hello@drawtopia.ai with "APPEAL" in the subject line.

I. California Resident Rights (CCPA/CPRA)

If you are a California resident, you have the following additional rights:

• Right to know: Request what personal information we collect
• Right to delete: Request deletion of personal information
• Right to correct: Request correction of inaccurate information
• Right to opt out: Opt out of sales or sharing of personal information (note: we do not sell children's data)
• Right to limit: Limit our use of sensitive personal information
• Right to non-discrimination: We will not discriminate against you for exercising these rights

California residents may submit requests to hello@drawtopia.ai. We will respond within 45 days.

What Are Cookies?

Cookies are small text files placed on your device when you visit our website. They help us remember your preferences and understand how you use Drawtopia.

Types of Cookies We Use:

• Necessary Cookies: Required for the Service to function (login, payment processing)
• Analytics Cookies: Help us understand how users interact with Drawtopia (Google Analytics, PostHog)
• Marketing Cookies: Used to show targeted advertisements to users 13 and older
• Preference Cookies: Remember your settings and choices

Managing Cookies:

Most browsers allow you to refuse cookies or alert you when cookies are set. You can also delete cookies through your browser settings. However, disabling cookies may impact your ability to use certain features of Drawtopia.

For more information about cookies, visit https://www.allaboutcookies.org.

Do Not Track:

Some browsers include a "Do Not Track" feature. Our website does not currently respond to Do Not Track signals, but we respect your privacy choices through other mechanisms.

Cookies are small text files placed on your device when you visit our website. They help us remember your preferences and understand how you use Drawtopia.

Some browsers include a "Do Not Track" feature. Our website does not currently respond to Do Not Track signals, but we respect your privacy choices through other mechanisms.

We recommend reviewing the privacy policies of these third parties. Drawtopia is not responsible for their collection or use of your information beyond what is necessary to provide our Service.

We take reasonable measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using SSL/TLS
• Secure payment processing through PCI-DSS compliant providers
• Access controls and authentication mechanisms
• Regular security audits and monitoring
• Employee confidentiality agreements
• Incident response procedures

However, no security system is impenetrable. While we work to protect your information, we cannot guarantee absolute security. You use Drawtopia at your own risk.

If we discover a security breach affecting your personal information, we will notify you and affected users without unreasonable delay, as required by law.

Drawtopia is based in California, USA. Your personal information may be transferred, stored, and processed in the United States or other countries where we or our service providers maintain facilities.

For Users in the EU, UK, or Switzerland:

If you are located in the EU, UK, or Switzerland, your personal information will be transferred outside your country of residence. We rely on appropriate legal mechanisms to protect your data, including:

• Standard Contractual Clauses approved by the European Commission
• Deferred adequacy decisions
• Your explicit consent to the transfer

We comply with the General Data Protection Regulation (GDPR) and equivalent privacy laws. Your rights under GDPR are fully protected regardless of where your data is stored.

For All International Users:

By using Drawtopia, you consent to the transfer of your personal information to countries that may have different privacy laws than your country of residence. We will protect your information in accordance with the most protective applicable laws.

California Residents: If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

A. Right to Know

You have the right to request what personal information we collect about you and how we use it. Your request should include:

• Categories of personal information we collect
• Sources of that information
• Our business purposes for collection
• Categories of third parties with whom we share information

B. Right to Delete

You have the right to request deletion of personal information we have collected about you, except where we must retain it for legal or operational reasons.

C. Right to Correct

You have the right to request correction of inaccurate personal information.

D. Right to Opt Out

You have the right to opt out of our "sale" or "sharing" of personal information. Note: Drawtopia does not sell or share the personal information of users under 16 for any purpose.

E. Right to Limit

You have the right to limit our use of sensitive personal information to only what is necessary to provide the Service.

F. Right to Non-Discrimination

We will not discriminate against you for exercising your California privacy rights. We will not:

• Deny you goods or services
• Charge different prices or rates
• Provide different quality of service
• Threaten, discriminate, or retaliate

G. How to Submit Requests

To exercise your California privacy rights, contact us:

Email: hello@drawtopia.ai

Subject Line: "CALIFORNIA PRIVACY REQUEST"

In Your Request, Include:

• Your full name
• Email address associated with your account
• Specific right you are exercising
• Description of your request

Verification: We may ask you to verify your identity before responding to your request. We may request a government-issued ID or other verification.

Response Time: We will respond to verified requests within 45 days. If we need more time, we will provide an explanation.

Authorized Agent: You may designate an authorized agent to submit requests on your behalf. The agent must have your written authorization.

If you are located in the European Union, United Kingdom, or Switzerland, the following additional provisions apply:

A. Legal Basis for Processing

We process your personal information based on:

• Contract: Necessary to provide the Service and fulfill our obligations
• Consent: You have provided explicit consent (e.g., marketing communications)
• Legal Obligation: Required by law
• Legitimate Interests: Necessary for our business operations, fraud prevention, and security
• Child Protection: Necessary to protect children's safety and privacy

B. Data Controller and Representative

Data Controller: Zokus, Inc. d/b/a Drawtopia Contact: hello@drawtopia.ai

Data Controller: Zokus, Inc. d/b/a Drawtopia Contact: hello@drawtopia.ai

C. GDPR Rights

In addition to rights described in Section 6, GDPR gives you the following rights:

• Right of Access: Request a copy of your personal information
• Right to Rectification: Correct inaccurate information
• Right to Erasure: Request deletion (right to be forgotten)
• Right to Restrict Processing: Limit how we use your information
• Right to Data Portability: Receive your data in portable format
• Right to Object: Object to processing based on legitimate interests
• Rights Related to Automated Processing: Object to automated decision-making

D. Right to Lodge a Complaint

If you believe we have violated your privacy rights, you have the right to lodge a complaint with your local data protection authority:

• EU: https://edpb.ec.europa.eu/about-edpb/board/members_en
• UK: https://ico.org.uk
• Switzerland: https://www.edoeb.admin.ch

E. Data Retention Under GDPR

We retain your personal information for:

• Account Information: Duration of account + 30 days
• Marketing Data: Until you unsubscribe or withdraw consent
• Transactional Data: 7 years for tax/legal purposes
• Analytics: 26 months
• Legal Claims: Duration of dispute + applicable statute of limitations

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date
• Sending you an email notification (for users 13 and older)
• Requiring parental re-consent (for children under 13)

Your continued use of Drawtopia after changes become effective constitutes your acceptance of the updated Privacy Policy. If you do not agree with changes, you should discontinue use of Drawtopia.

If you have questions about this Privacy Policy, your personal information, or our privacy practices, please contact us:

Zokus, Inc. d/b/a Drawtopia

Email: hello@drawtopia.ai

Website: https://drawtopia.ai

Mailing Address: [Your Company Address]

Response Time: We will respond to inquiries within 30 days. For privacy requests, we will respond within the timeframes specified by applicable law (typically 30-45 days).

Escalation: If you are not satisfied with our response, you may contact your local data protection authority or submit a complaint under your applicable privacy law.

If your child uses Drawtopia, please read this section carefully.

What Information Do We Collect?

• Your child's name and date of birth
• Drawings and creative works your child creates
• How your child uses Drawtopia (pages visited, features used, time spent)
• Device information (type of device, operating system)

How Do We Use It?

• To provide personalized storybooks and creative tools
• To improve Drawtopia
• To generate stories and illustrations (with your consent)
• To market Drawtopia and share your child's artwork (with your consent)

How Can I Protect My Child's Privacy?

• Review what information we collect by logging into your parent account
• Change privacy settings to limit marketing use of your child's drawings
• Request deletion of your child's information at any time
• Monitor your child's online activities

What Are My Rights?

• View all information we hold about your child
• Request correction or deletion of information
• Withdraw consent at any time
• Opt your child out of marketing communications

How Do I Exercise My Rights?

Contact us at hello@drawtopia.ai with:

• Your full name and relationship to the child
• Your email address and phone number
• Proof of parental relationship (birth certificate, custody order, etc.)
• Description of your request

Under California and Virginia privacy laws, we disclose the following regarding cookies and tracking:

Cookies We Place: Session cookies, persistent cookies, and third-party analytics cookies

Duration: Typically 6 months to 26 months

Categories of Information Collected: Device identifiers, browsing history, usage patterns, IP address, location derived from IP

Purpose: Authentication, analytics, fraud prevention, marketing (for users 13+)

Your Choices: Disable cookies in browser settings or contact us at hello@drawtopia.ai

Under CCPA and other privacy laws, we represent that:

• Drawtopia does not sell personal information (as defined by CCPA) to third parties.
• Drawtopia does not sell or share the personal information of users under 16 for any commercial purpose.
• We do not use personal information for purposes other than those described in this Privacy Policy without providing notice and obtaining consent.

Content Safety: While we generate content from your child's drawings, we do not guarantee that all generated content is appropriate. Parents should review all content before allowing their child to view it.

Moderation: User Content is not actively moderated by our team, but we reserve the right to remove content that violates our Terms of Service.

Third-Party Content: We are not responsible for the safety or appropriateness of content generated by third-party services (Google Imagen 3, OpenAI, etc.).