Privacy Policy

1. Information We Collect

Information You Provide

When you create an account, subscribe, or use our tools, we may collect:

• Name and email address
• Account credentials (via Google OAuth)
• Payment information (processed by our third-party payment processor — we do not store your full credit card number)
• Images and screenshots you upload for mockup generation
• Text prompts and scene descriptions you provide
• Generated mockup images and associated metadata
• Feedback, support requests, and communications you send us

Information Collected Automatically

When you use the Services, we automatically collect:

• Device and browser information (e.g., device type, operating system, browser version)
• IP address and approximate location
• Usage data (e.g., pages visited, features used, mockups generated, timestamps)
• Cookies and similar tracking technologies (see Section 5)

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Services, including generating AI-powered mockups from your uploaded content
• Process your uploaded images and prompts through our AI generation pipeline to produce mockup outputs
• Process transactions and send related communications (e.g., billing confirmations, subscription notices)
• Monitor and enforce usage limits associated with your subscription tier
• Respond to your requests and provide customer support
• Analyze usage patterns to improve our products and generation quality
• Protect against fraud, abuse, and unauthorized access
• Comply with legal obligations

We do not sell your personal information.

3. How We Share Your Information

We may share your information in the following circumstances:

• Service Providers. We use third-party vendors to help operate the Services (e.g., AI image generation, payment processing, hosting, analytics). These providers only receive the information necessary to perform their services and are contractually required to protect it. Uploaded images and prompts are transmitted to our AI generation provider solely for the purpose of producing your requested mockup.
• Legal Requirements. We may disclose information if required by law, regulation, legal process, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers. If Tortuga is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

We do not share your personal information with advertisers. We do not share your email address with third parties for their own marketing purposes.

4. Third-Party Services

The Services may integrate with or link to third-party services. We are not responsible for the privacy practices of those services. We encourage you to review their privacy policies.

Our current key third-party service providers include:

• Stripe — payment processing
• Cloudflare — hosting and infrastructure
• Replicate — AI image generation
• Google — authentication (OAuth)

5. Cookies and Tracking

We use cookies and similar technologies to keep you logged in, remember your preferences (such as gallery view settings), and understand how the Services are used. You can control cookies through your browser settings, but disabling them may limit some functionality.

We do not respond to "Do Not Track" browser signals at this time.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements.

Specific retention periods for content you create or upload:

• User-uploaded images are retained for 30 days from the date of upload
• Generated mockups are retained for 30 days from the date of creation
• Deleted mockups are soft-deleted and retained for an additional 30 days (restorable via support), after which they are permanently removed
• An automated cleanup process runs daily to purge expired files

If you delete your account, we will delete or anonymize your personal information within a reasonable timeframe, except where retention is required by law.

7. Data Security

We use commercially reasonable measures to protect your information, including encryption in transit (TLS/SSL), access controls, and row-level security policies to ensure users can only access their own data. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights and Choices

• Access and Correction. You can access and update your account information at any time through your account settings.
• Deletion. You may request deletion of your personal information by contacting us at support@bytortuga.com or by using the Delete Account option in your account settings. We will process your request in accordance with applicable law.
• Data Export. You may download your generated mockups at any time while they are available in your gallery.
• Unsubscribe. You can unsubscribe from marketing emails at any time using the unsubscribe link in any email. Service-related communications (such as billing notices or security alerts) may continue regardless of your marketing preferences.
• California Residents. If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right not to be discriminated against for exercising your rights. To exercise these rights, contact us at support@bytortuga.com.

9. Children

The Services are not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will take steps to delete it promptly.

10. International Users

The Services are operated in the United States. If you access the Services from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country. By using the Services, you consent to this transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website or by email. Your continued use of the Services after the changes take effect constitutes your acceptance of the updated policy. You can always check the effective date at the top of this page.

12. Contact Us

If you have questions about this Privacy Policy, contact us at:

Tortuga AI, Inc.
1111B S Governors Ave Ste. 82857
Dover, DE 19904
support@bytortuga.com