Skip to main content

Privacy Policy

Last updated: February 4, 2026

At Bermy Banana, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our AI-powered UGC generation platform. This policy is designed to comply with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable privacy laws.

1. Information We Collect

Personal Information

We collect the following personal information when you create an account or use our Service:

  • Name and email address
  • Account credentials (encrypted passwords)
  • Billing and payment information (processed securely via third-party providers)
  • Profile information and preferences
  • Communication history with our support team

Content and Usage Data

We collect data related to your use of the Service:

  • Images, videos, and other content you upload for processing
  • AI-generated content created through our platform
  • Prompts and inputs provided to AI systems
  • Usage patterns, features accessed, and time spent on the platform
  • Device information (browser type, operating system, IP address)
  • Log data and analytics information

2. How We Use Your Information

We use your information for the following purposes:

  • Service Provision: To provide, maintain, and improve our AI-powered UGC generation services
  • Account Management: To create and manage your account, process payments, and provide customer support
  • AI Processing: To process your uploaded content and generate AI outputs using third-party AI providers
  • Communication: To send service notifications, updates, and marketing communications (with your consent)
  • Security: To detect fraud, abuse, and security threats; to verify your identity
  • Analytics: To analyze usage patterns and improve our Service
  • Legal Compliance: To comply with applicable laws and regulations
3

3. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on the following legal grounds:

  • Contractual Necessity: Processing necessary to provide the Service you requested
  • Legitimate Interests: Improving our services, ensuring security, and preventing fraud
  • Consent: Marketing communications and certain types of data processing
  • Legal Obligation: Compliance with tax, accounting, and other legal requirements

4. Data Sharing and Third Parties

We may share your information with the following categories of third parties:

AI Service Providers

We use third-party AI providers (such as OpenAI, Stability AI, and other model providers) to process your content and generate outputs. Your prompts and uploaded content may be transmitted to these providers subject to their privacy policies.

Cloud Infrastructure

We use cloud service providers (such as AWS, Google Cloud, or Azure) to host our platform and store your data securely.

Payment Processors

Payment information is processed by secure third-party payment processors (such as Stripe). We do not store your full credit card details.

Analytics and Support

We use analytics providers (such as Google Analytics) and customer support tools to improve our Service and assist you.

We do not sell your personal information to third parties for monetary consideration. We may share anonymized, aggregated data that does not identify you personally.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

  • Maintain your session and authentication status
  • Remember your preferences and settings
  • Analyze usage patterns and improve our Service
  • Provide essential functionality of the platform

Types of cookies we use:

  • Essential Cookies: Required for the Service to function properly
  • Functional Cookies: Enable enhanced features and personalization
  • Analytics Cookies: Help us understand how users interact with our Service

You can manage cookie preferences through your browser settings or our cookie consent banner. Note that disabling certain cookies may affect the functionality of the Service.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Regular security assessments and penetration testing
  • Access controls and authentication requirements
  • Employee training on data protection practices
  • Incident response procedures

While we strive to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to:

  • Provide the Service you requested
  • Comply with legal obligations (tax, accounting, etc.)
  • Resolve disputes and enforce our agreements
  • Protect against fraudulent or abusive activity

Retention Periods:

  • Account information: Retained while your account is active; deleted within 30 days of account closure (unless legally required to retain)
  • Uploaded content: Retained based on your subscription plan and storage limits; deleted upon account closure
  • Payment records: Retained for 7 years for tax and accounting purposes
  • Log data: Retained for up to 12 months for security and analytics purposes

8. Your Privacy Rights

Depending on your location, you may have the following rights:

GDPR Rights (EU/EEA)

  • Right to access your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Rights related to automated decision-making

CCPA Rights (California)

  • Right to know what personal information is collected
  • Right to know if personal information is sold/shared
  • Right to opt-out of sale of personal information
  • Right to access your personal information
  • Right to deletion of personal information
  • Right to non-discrimination for exercising rights

To exercise your rights, please contact us using the information in Section 11. We will respond to your request within the timeframe required by applicable law.

9

9. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we discover we have collected personal information from a child under 16, we will delete that information promptly.

10

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws different from those in your jurisdiction. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) for transfers outside the EEA, to protect your personal information.

11. Contact Us and Data Protection Officer

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

Bermy Banana

Email: privacy@bermybanana.com

Address: 123 Innovation Drive, Suite 100, Wilmington, DE 19801

Data Protection Officer: dpo@bermybanana.com

For EU residents, you also have the right to lodge a complaint with your local data protection authority if you believe we have violated applicable data protection laws.

12

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.

By using Bermy Banana, you acknowledge that you have read and understood this Privacy Policy.