Privacy Policy

Last updated: 2025-09-06

We use only essential cookies to make our site work. These cookies are necessary for core functions such as security, network management, and accessibility. We do not use cookies for advertising, analytics, or sharing data with third parties.

Who we are

• Controller: C2 Software AB ("Posterboy").
• Contact: contact@posterboy.ai
• Jurisdiction: Sweden (EU).

Personal data we collect

• Account and contact data: email address and optional profile details you provide.
• User content: images you upload or generate, prompts and related metadata.
• Transactional data: order details, fulfillment status, and payment confirmations (via Stripe).
• Technical data: IP address, device, browser, and basic logs for security and fraud prevention.
• Cookies: strictly necessary cookies for authentication, security and session continuity.

Sources of personal data

• Directly from you when you create an account, use the Platform, upload or generate content, or place orders.
• Automatically from your device for essential security and service delivery.
• From payment and fulfillment partners (e.g., payment status from Stripe; shipping status from fulfillment partners).

Purposes and legal bases (EU/UK GDPR)

• Provide and operate the service (create account, generate/store images, process orders) — contract necessity.
• Payments and invoicing — contract necessity and legal obligation.
• Security, fraud prevention and abuse detection — legitimate interests.
• Customer support and service communications — contract necessity and/or legitimate interests.
• Legal compliance (tax, accounting, regulatory requests) — legal obligation.

Disclosures to processors/third parties

• Stripe for payment processing; we do not store full card data.
• Cloud hosting/storage (e.g., AWS S3) for storing images and files.
• Email service provider for account and transactional messages.
• Order/fulfillment partners for printing and shipping posters.
• Database and analytics limited to essential operations; we do not use advertising trackers.

International data transfers

• Your data may be processed outside your country. Where required, we use appropriate safeguards such as Standard Contractual Clauses or equivalent transfer mechanisms.

Retention

• We keep personal data only as long as necessary for the purposes above. You can delete images or your account, after which we delete or anonymize related data unless we must retain it for legal reasons (e.g., tax records).

Your rights (EU/UK)

• Access, rectification, erasure, restriction, portability, and objection to processing based on legitimate interests.
• Complain to your local data protection authority if you believe your rights are infringed.

Your rights (US, including California)

• Right to know, access, delete, correct, and portability.
• Right to opt out of sale/share and targeted advertising. We do not sell or share personal information and do not engage in targeted advertising.
• Non-discrimination for exercising your rights.

Children

• The Platform is not directed to children under 13, and we do not knowingly collect personal information from them.

How to exercise your rights

• Contact us at contact@posterboy.ai. We may need to verify your request before acting on it.