Privacy Policy

This Privacy Policy explains how WHUT.AI LLC ("Company," "we," "us," or "our") collects, uses, shares, and protects your information when you use Pyntra ("Service") at pyntra.ai. By using the Service, you consent to the practices described in this policy.

We are committed to transparency. If you have questions, contact us at privacy@pyntra.ai.

1. Information We Collect

2. How We Use Your Information

• Provide the Service — create presentations, process AI requests, store your content.
• Process payments — manage subscriptions and billing through Stripe.
• Improve & develop features — analyze usage patterns in aggregate to make the product better.
• Communicate with you — send transactional emails (confirmations, password resets), product updates, and support responses.
• Security & fraud prevention — detect and prevent abuse, unauthorized access, and spam.
• Legal compliance — fulfill legal obligations, resolve disputes, enforce our terms.

3. AI Data Processing — How Your Content Interacts with AI

This section is important. Here's exactly what happens with your data when you use Pyntra's AI features:

4. Third-Party Services & Data Sharing

We share data with the following third-party services, solely to operate and improve Pyntra. We do not sell your personal information to advertisers or data brokers.

Each provider processes data under their own privacy policy and our contractual agreements (Data Processing Agreements where applicable).

5. Cookies & Tracking Technologies

6. Data Retention

7. Your Rights & Choices

Depending on where you live, you may have some or all of the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you.
• Correction — Request correction of inaccurate data.
• Deletion — Request deletion of your account and personal data.
• Export — Request a portable copy of your data in a machine-readable format.
• Restriction — Request that we limit how we process your data.
• Objection — Object to certain types of processing.

To exercise these rights, email privacy@pyntra.ai. We will respond within 30 days (or sooner where required by law).

8. Children's Privacy

Pyntra is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that we have collected data from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us at privacy@pyntra.ai.

9. International Data Transfers

Pyntra is operated from the United States. If you access the Service from outside the US, your data may be transferred to and processed in the United States and other countries where our service providers operate. We use appropriate safeguards for international transfers, including Standard Contractual Clauses (SCCs) where required.

10. Security Measures

We implement industry-standard security measures to protect your data, including:

• Encryption in transit (TLS/HTTPS) and at rest for stored data.
• Secure password hashing (bcrypt via Supabase Auth).
• Row-level security policies on our database.
• Regular security reviews and access controls for internal systems.
• Rate limiting and abuse prevention via Upstash Redis.

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know — You can request details about the categories and specific pieces of personal information we have collected about you.
• Right to delete — You can request deletion of your personal information, subject to certain exceptions.
• Right to opt out — We do not sell your personal information. If this changes, we will provide opt-out mechanisms.
• Right to non-discrimination — We will not discriminate against you for exercising your privacy rights.

To make a CCPA request, email privacy@pyntra.ai with the subject line "CCPA Request." We will verify your identity before processing requests.

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):

• Legal bases — We process your data based on: (a) your consent; (b) performance of our contract with you; (c) our legitimate interests (improving and securing the Service); and (d) compliance with legal obligations.
• Your rights — Access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent. See Section 7 for how to exercise them.
• Data controller — WHUT.AI LLC acts as the data controller for personal data collected through Pyntra.
• Supervisory authority — You have the right to lodge a complaint with your local data protection authority.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on the Service. We encourage you to review this policy periodically. The "Last updated" date at the top indicates when the most recent changes were made.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: