Privacy Policy

Last updated: October 03, 2026

1. Data Controller

The data controller for this Service is:

  • Company: ColoringBookForge
  • Contact email: privacy@coloringbookforge.tech
  • DPO: Not applicable (no dedicated DPO required for our current data processing activities)

2. Information We Collect

2.1 Information you provide directly

  • Account information: Email address, name.
  • Payment information: Transaction amount, payment status. We do not store your full payment card number — card data is handled by our payment processor (see Section 5).
  • Support communications: Emails and feedback you send to our support team.

2.2 Information we collect automatically

  • Device & network: IP address, device type, operating system, browser type, time zone.
  • Usage behavior: Pages visited, features used, session duration, operation logs.
  • Request logs: Timestamps, error logs, performance data.

3. How We Use Your Information

Purpose Legal Basis
Provide and maintain the ServiceContract performance
Billing and payment processingContract performance
Customer supportContract performance / Legitimate interest
Service notifications (billing, security, policy updates)Legitimate interest
Security and fraud preventionLegitimate interest
Product improvement and analyticsLegitimate interest
Legal complianceLegal obligation

We may aggregate or de-identify data for statistical analysis. Such data cannot be linked to you personally.

4. Cookies and Tracking Technologies

Type Purpose Can be disabled
Strictly necessaryMaintain login, core functionalityNo
FunctionalLanguage preferences, personalized settingsYes
AnalyticsAnonymous usage statistics, product optimizationYes
MarketingTargeted advertising and performance measurementYes

We use analytics tools to understand how visitors use our site. You can adjust your preferences through your browser settings or our cookie management center.

5. Sharing and Disclosure of Personal Information

We do not sell your personal information, including as "sale" may be defined under applicable laws (e.g., CCPA). We share information only in the following circumstances:

  • Payment processor: Payment card data is handled exclusively by Waffo Pancake, our PCI-DSS-compliant Merchant of Record — never stored on our servers.
  • AI service provider: DeepSeek (Shanghai, China) — your prompts and selections are processed by DeepSeek solely to generate the coloring book line art you request.
  • Service providers: Cloud computing, customer support, and analytics vendors, bound by confidentiality agreements.
  • Legal requirements: When required by law, court order, or legitimate government request.
  • Business transfers: In the event of a merger, acquisition, or sale of assets, with advance notice and continued protection obligations.
  • With your consent: For any other purpose not listed above, only with your explicit prior consent.

6. Data Security

  • Transport encryption: TLS / HTTPS.
  • Storage security: Sensitive data such as passwords is encrypted or hashed.
  • Access control: Principle of least privilege; employees sign confidentiality agreements.
  • Regular security audits and vulnerability scanning.

In the event of a security incident affecting your rights, we will notify you and relevant regulators within 72 hours of discovery, as required by applicable law. Please keep your account credentials secure and do not share them with others.

7. Data Retention

Data type Retention period Upon expiry
Account informationActive period; 90 days after account deletionDeleted or anonymized
Transaction recordsAs required by applicable law (typically 5 years)Archived or deleted
Support records2 yearsSecurely deleted
Security audit logs12 monthsSecurely deleted
Generated contentUntil you delete associated projectsDeleted

8. Your Data Rights

To exercise any of the following rights, contact us at privacy@coloringbookforge.tech. We will process your request within 30 calendar days.

Right Description
Right to accessObtain a copy of your personal data
Right to rectificationCorrect inaccurate or incomplete data
Right to erasureRequest deletion of your data under specific conditions
Right to restrict processingPause data processing under specific circumstances
Right to data portabilityReceive your data in a machine-readable format
Right to objectObject to processing based on legitimate interests or marketing
Right to withdraw consentWithdraw consent for any consent-based processing

If you believe we have not handled your data appropriately, you have the right to lodge a complaint with your local data protection authority.

9. International Data Transfers

Our servers and partners may be located in Singapore, the United States, and other regions. When data is transferred internationally, we protect it through Standard Contractual Clauses (SCCs), adequacy decisions, or other applicable transfer mechanisms.

10. Children's Privacy

The Service is intended for users who are at least 18 years old. We do not knowingly collect information from minors. If you believe your child has provided us with personal information, please contact us immediately and we will delete it promptly.

11. Third-Party Links and Services

The Service may contain links to third-party websites or integrate with third-party services. This Privacy Policy applies only to information we directly collect. We are not responsible for third parties' data practices, and we encourage you to review their policies before using them.

12. Policy Updates

We may update this Privacy Policy from time to time. Material changes will be communicated at least 15 days in advance via email or in-app notification. The "Last updated" date at the top of this page reflects the current version. Your continued use after any change constitutes acceptance of the updated policy.

13. Contact Us