JustOG — Privacy Policy

Last updated: 2026-07-02.

This Privacy Policy explains how JustOG, Inc. ("JustOG", "we", "us") collects, uses, and shares personal information when you use our website and services (the "Service"). By using the Service you agree to this Policy and the Terms of Service.

1. Information we collect

• Account & identity — email address, name, and profile info you provide or that comes from a sign-in provider (Google, Apple) when you register. Authentication is handled by Supabase.
• Content you submit ("User Content") — images you upload, text prompts you enter, designs you generate, and related metadata (e.g., crop/color choices).
• Orders & transactions — items ordered, shipping address, order history. Payments are processed by Stripe; we do not store your full card number.
• Usage & device data — IP address, browser/user-agent, device and log data, pages viewed, and actions taken, collected via cookies and similar technologies.
• Consent & compliance records — a record of your acceptance of our terms/policies (context, document versions, timestamp, IP, user-agent) kept as evidence and for legal compliance.
• Communications — messages you send us (e.g., support or IP notices).

We do not intentionally collect sensitive personal information and ask that you not include it in prompts or uploads.

2. How we use information

• Provide, operate, secure, and improve the Service and fulfill your orders.
• Generate designs and produce made-to-order goods (see §3 on AI providers and manufacturing).
• Process payments, credits, and packs (via Stripe).
• Screen content for safety and IP/trademark compliance (automated and/or human review).
• Communicate with you about orders, account, and updates.
• Detect, prevent, and address fraud, abuse, farming, and security issues.
• Comply with law and enforce our terms.

3. How we share information

We share personal information with:

• Service providers / processors that run the Service on our behalf, including: Supabase (database, auth, storage), Vercel (hosting), Stripe (payments), our design engine host, and email delivery. They may process data only to provide services to us.
• AI model providers — when you generate a design, your prompt and any reference image are sent to the model provider (e.g., OpenAI, Google) to produce the output, subject to their terms and policies.
• Manufacturing & fulfillment partners — to produce and ship your order, we share the design files and the shipping details necessary for fulfillment.
• Legal & safety — to comply with law, respond to lawful requests, enforce our terms, or protect rights, safety, and property (including responding to IP/DMCA notices).
• Advertising partners — only if you consent to advertising cookies (see §4), we use pixels from Meta, TikTok, and OpenAI/ChatGPT to measure and improve our advertising (e.g., whether an ad led to a page view or purchase). These load only after you accept and are disabled if you decline, later opt out, or send a Global Privacy Control signal.
• Business transfers — in connection with a merger, acquisition, or sale of assets.

We do not sell your personal information for money. When you consent to advertising cookies, the information those pixels collect may constitute "sharing" for cross-context behavioral advertising under the CCPA/CPRA. You can withdraw consent at any time via "Cookie settings" in the footer, and we honor Global Privacy Control (GPC) signals as an opt-out. We do not share for advertising unless and until you opt in, and never when you have opted out.

4. Cookies & tracking

We use cookies and similar technologies for authentication, security, your preferences, and basic first-party analytics — these are essential and always on. With your consent, we also set advertising cookies/pixels (Meta, TikTok, OpenAI/ChatGPT) to measure our advertising; these do not load until you accept and are turned off if you decline or opt out. You can change your choice anytime via "Cookie settings" in the footer or through your browser; disabling essential cookies may break parts of the Service. Where required by law, we treat opt-out preference signals such as Global Privacy Control (GPC) as a request to opt out of the sale/sharing of your personal information.

5. Data retention

We keep personal information as long as needed to provide the Service, fulfill orders, comply with legal obligations (e.g., tax, and the consent/compliance records above), resolve disputes, and enforce agreements. We may retain and prune un-purchased draft designs on a schedule.

6. Security

We use reasonable technical and organizational measures to protect personal information (e.g., encryption in transit, access controls, private storage for print-ready assets). No system is 100% secure.

7. Your privacy rights

7.1 California (CCPA/CPRA)

If you are a California resident, you have the right to: know/access the personal information we collect and how we use/share it; delete it; correct it; opt out of the sale or sharing of your personal information; and limit the use of sensitive personal information. We do not sell or share personal information, and we do not use or disclose sensitive personal information for purposes that trigger the right to limit. You also have the right to non-discrimination for exercising these rights. We collect the categories described in §1 (identifiers, commercial information, internet/usage activity, and User Content). To exercise rights, contact legal@justog-official.com; we honor Global Privacy Control (GPC) browser signals as an opt-out request. We will verify your request, and you may use an authorized agent.

7.2 European Economic Area, United Kingdom & Switzerland (GDPR / UK GDPR)

If you are in the EEA, the UK, or Switzerland, you have the right to access, rectify, erase, restrict, and port your personal data, to object to processing, and to withdraw consent at any time (without affecting processing already carried out).

• Legal bases. We process personal data to: perform our contract with you (create your account, generate designs, and fulfil, produce, and ship your orders, including payment); pursue our legitimate interests (securing the Service, preventing fraud/abuse and IP infringement, and improving the Service), balanced against your rights; comply with a legal obligation (e.g., tax, record-keeping, responding to lawful requests); and, where we rely on it, your consent.
• International transfers. We are based in the United States and use providers there and elsewhere. Where we transfer personal data out of the EEA/UK/Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum) or another lawful transfer mechanism.
• Complaints. You may lodge a complaint with your local data protection supervisory authority, though we ask that you contact us first so we can help.

To exercise any right, contact legal@justog-official.com; we respond within the timeframes required by applicable law.

7.3 Other regions

If you are elsewhere and applicable law grants you privacy rights, contact us at the email above and we will respond as required by law.

8. Children

The Service is for adults (18+) and not directed to children. We do not knowingly collect personal information from children; if you believe a child provided us information, contact us to delete it.

9. International data transfers

We are based in the United States; if you access the Service from elsewhere, your information is processed in the US and other countries where our providers operate.

10. Changes

We may update this Policy; material changes will be posted with a new "Last updated" date and, where required, notified to you.

11. Contact

Questions or privacy requests: legal@justog-official.com, JustOG, Inc., 2010 El Camino Real #1125, Santa Clara, CA 95050.