Privacy Policy

We provide an online design platform and related services through www.hidingelephant.com and any related applications, pages, communications, and services we operate (collectively, the "Services").

This Privacy Policy applies to personal information collected through the Services, including information collected when you browse the site, create an account, purchase a plan, submit forms, interact with communications, or otherwise use the Services.

Hiding Elephant, Cape Coral

Contact email: [email protected]

We may collect the following categories of personal information:

• Contact information, such as email address and other information you submit through forms, support requests, surveys, or communications.
• Account and authentication information, such as account identifiers and information received when you sign in through supported authentication providers, including Google OAuth.
• Payment and transaction information, such as payment status, billing-related details, and limited payment information received from payment processors. Full payment card details are generally processed directly by the payment provider and are not stored by us except as necessary to confirm payment status, manage subscriptions, or keep required records.
• Usage and device information, such as IP address, browser type, operating system, device information, session statistics, clicks, page interactions, referral information, and similar technical data.
• Survey, feedback, and communication data, such as responses submitted through forms, surveys, emails, or product feedback tools.
• Cookies, pixels, session replay tools, and similar tracking technologies, as described in our Cookie Policy.
• Any personal information you choose to provide when contacting us or using features of the Services.

We collect information directly from you, automatically through the Services, and from service providers or third-party integrations used to operate the Services.

Information may be collected when you register, sign in, complete a purchase, fill out a form, respond to a survey, subscribe to communications, use the platform, or interact with pages, emails, or other content.

We may use personal information to:

• provide, maintain, secure, and improve the Services;
• create and manage user accounts and authenticate users;
• process payments, subscriptions, and related transactions;
• analyze usage, performance, user behavior, and product engagement;
• run experiments, feature flags, A/B tests, and product optimization activities;
• send product updates, transactional communications, support messages, and marketing communications, subject to applicable law;
• collect survey responses, product feedback, and customer research;
• detect, investigate, prevent, and address fraud, abuse, security incidents, or unlawful activity;
• comply with legal obligations, enforce terms, protect rights, and respond to lawful requests.

For users in jurisdictions that require a legal basis for processing, we may process personal information on one or more of the following bases: consent, performance of a contract, legitimate interests, and compliance with legal obligations.

Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect processing already carried out before withdrawal.

We use third-party providers and integrations to operate, secure, support, and improve the Services. These may include providers for payment processing, analytics, product analytics, feature flags and experimentation, surveys, session replay, communications, authentication, cloud infrastructure, content delivery, security, and other business operations.

Depending on which parts of the Services you use, we may work with providers such as Stripe for payment processing; Google Analytics 4 for analytics; PostHog for product analytics, feature flags, A/B testing, surveys, and session replay; Brevo for email communications and marketing automation; Google OAuth for registration and authentication; Google Tag Manager for tag management; and Cloudflare for traffic optimization, security, and content delivery.

These providers may process personal information on our behalf as service providers or processors, or in some cases act as independent controllers depending on their role, the feature being used, and the applicable law.

To provide certain product features, we may use third-party artificial intelligence, machine learning, hosting, infrastructure, and integration providers. These providers may help power content generation, transformation, analysis, automation, workflow execution, file handling, or related platform functions.

Depending on the feature used, these providers may process prompts, instructions, uploaded files, reference assets, generated outputs, metadata, usage information, and other content submitted through the Services, solely as needed to provide, maintain, secure, support, and improve the Services or as otherwise described in this Privacy Policy and any applicable customer agreement.

We may also support integrations with third-party services at your direction. When you choose to connect or enable a third-party integration, we may exchange information with that third party as needed to provide the requested functionality. The third party's own terms and privacy policy will apply to its handling of information.

The specific AI models and cloud providers we use may change over time without separate notice. Currently, these may include providers such as Fal and Google Cloud / Vertex AI, among others.

We use cookies, pixels, session replay, and similar technologies to operate the Services, understand usage, improve performance, maintain security, remember preferences, and support analytics, communications, and marketing functions.

You can control cookies through browser settings and, where required by law, through consent tools made available on the site. Disabling certain cookies may affect the availability or performance of some features. For more detail, see our Cookie Policy.

We may send you service-related notices and, where permitted, marketing emails or similar communications. You may unsubscribe from marketing communications by using the unsubscribe link in the message or by contacting us. Transactional and service-related communications may still be sent when necessary.

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain business records, comply with legal obligations, resolve disputes, and enforce agreements.

Retention periods may vary depending on the type of data, the purpose for which it was collected, account status, payment and tax obligations, security needs, and applicable legal requirements.

We and our service providers may process personal information in the United States, France, and other jurisdictions where they operate. Where required by law, we will use appropriate safeguards for cross-border transfers of personal information.

We may disclose personal information:

• to service providers, integration partners, and vendors that support the operation of the Services;
• to payment processors, authentication providers, infrastructure providers, and AI processing providers as necessary to provide requested features and Services;
• to advisors, auditors, legal counsel, and similar professional service providers;
• as part of a merger, financing, acquisition, reorganization, sale of assets, or similar business transaction;
• to comply with law, regulation, court order, or lawful government request;
• to protect the rights, safety, property, users, or operations of Hiding Elephant or others.

We use reasonable administrative, technical, and organizational measures intended to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of certain personal information, and to withdraw consent where processing is based on consent.

You may request to exercise applicable rights by contacting [email protected]. We may need to verify your identity before completing a request.

Residents of certain U.S. states may have additional rights regarding personal information, including rights to know, access, delete, correct, and opt out of certain uses or disclosures, subject to applicable exceptions and verification requirements.

We do not sell personal information for money. If we engage in data uses that qualify as targeted advertising, sharing, or similar regulated activity under applicable state law, you may have the right to opt out.

You may submit privacy rights requests by contacting [email protected].

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that personal information of a child under 13 has been collected without appropriate authorization, we will take reasonable steps to delete it. If a different age threshold applies under local law, that local threshold will apply.

The Services may contain links to third-party websites, products, or services. We are not responsible for the privacy practices of third parties, and you should review their privacy policies before providing information to them.

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date. Where required by law, we will provide additional notice or obtain consent for material changes.

For privacy questions or requests, you may contact us at:

Hiding Elephant

Email: [email protected]