My Badge Studio Privacy Policy

1. Introduction and Overview

My Badge Studio (hereinafter referred to as "we," "our," or "us," or "the Company") is committed to respecting and protecting the privacy of all individuals who interact with our web-based platform, website, and associated services (collectively referred to as the "Service"). This Privacy Policy has been drafted to comply with applicable data protection laws and regulations, including but not limited to the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant privacy frameworks.

We understand that your personal information is important to you. This Privacy Policy explains in clear and transparent terms what data we collect from you, why we collect it, how it is used, who it may be shared with, how long it is retained, and what rights and choices you have with respect to your data.

2. Information We Collect

We collect several categories of personal and non-personal information in order to provide, maintain, and improve the Service. The specific types of data we collect depend on how you interact with us and what features you use.

2.1 Account and Registration Information

When you create an account with My Badge Studio, we ask you to provide certain identification and contact information. This includes your full name, email address, and encrypted password. This information is necessary to establish and maintain your account.

2.2 Payment and Billing Information

If you purchase a subscription, we collect certain payment-related information through our secure processor, Razorpay. We do not store your complete credit card information on our servers.

2.3 Uploaded Content

We collect and store images, logos, and text that you upload to create badge and magnet templates. Uploads are held for as long as you keep them in the studio. On the Business Plus and Business Pro plans, projects you choose to save are stored in your account until you delete them; on other plans, uploads remain only for the working session unless you save a project file to your own device.

We do not sell your uploads, and we do not use them for advertising.

2.4 AI Photo Tools and Image Processing

When you use an AI feature — AI Edit, Remove Background or Centre Face — the image you selected, and any instruction you typed, are sent to Google and processed by the Google Gemini models in order to return the edited image to you. Centre Face detects the position of a face in your photo so the badge can be cropped around it.

These features run only when you choose to use them. If you never open an AI tool, your images are not sent to Google for this purpose. Your use of these features is also subject to Google’s own terms and privacy notice for its AI services.

2.5 Client and Event Portal Submissions

Business Plus and Business Pro customers can share a link or QR code that lets their own clients and event guests design a badge and submit it. If you submit a design through such a page, the name, contact details and images you provide are sent to the business that shared the link, and are stored in that business’s account on our platform so they can fulfil your order. To ask what is held about you, or to have it deleted, please contact that business directly, or contact us and we will help.

3. How We Use Your Information

We use the information we collect for a range of legitimate business purposes, including service operation, development of new features, providing customer support, and protecting the security of our platform.

Fraud and abuse prevention. We check new sign-ups against records of devices and (in irreversibly hashed form) email addresses that have already claimed the free monthly allowance or deleted an account within the last 12 months, so the free allowance cannot be collected repeatedly through duplicate or re-created accounts. An account flagged this way still works normally and can use all paid features — it just does not receive the free allowance. Details of what is kept after deletion, and for how long, are in section 7.

4. Cookies and Similar Technologies

We use cookies and similar browser storage. When you first visit, a banner lets you choose which categories to allow. Only the essential category is switched on by default — analytics, marketing and email categories stay off unless you turn them on. You can change your choice at any time via Cookie Settings in the footer.

• Essential. Required for the platform to work — signing in, keeping your session, and security. These cannot be switched off.
• Analytics. Google Analytics, to understand how the site is used. Until you allow this category, our analytics tag runs in a restricted mode that does not store analytics cookies on your device.
• Marketing. The Meta (Facebook) Pixel, used to measure our campaigns. This loads only after you allow the marketing category.
• Email communication. Your preference for receiving product updates and offers.

We also use your browser’s local storage and IndexedDB to remember your cookie choice and to keep your unsaved studio work on your own device so it is not lost if you reload the page. That design data stays in your browser and is not sent to us unless you save or export it.

5. Service Providers We Share Data With

We rely on the following providers to run the Service. They receive only what they need for their function, and are not permitted to use your data for their own unrelated purposes.

• Google (Firebase). Hosting, sign-in, database and file storage — this is where your account and uploads live.
• Google (Gemini AI). Processes images only when you use an AI photo tool, as described in section 2.4.
• Razorpay. Subscription payments. We do not store complete card details.
• Google Analytics. Usage measurement, subject to your cookie choice.
• Meta. Campaign measurement, only if you allow marketing cookies.
• Resend. Delivery of account and order emails.
• Sentry. Error reports, so we can diagnose crashes.
• Square and PayPal. Available as payment options in customer storefronts.

Pages that embed video or social content (for example YouTube or Instagram) may cause those providers to see your IP address when the embed loads.

6. International Data Transfers

My Badge Studio is a globally accessible platform. Your data may be transferred to and processed in countries other than your country of residence. We implement standard contractual clauses and other safeguards to protect your data during these transfers.

7. Your Data Rights

Depending on your location, you have rights to access, correct, delete, and port your personal data.

How to exercise them. You can delete your account yourself at any time from the Delete account option on your account page — no need to contact us. You can also email support@mybadgestudio.com from the address your account is registered under, telling us what you would like — for example a copy of your data, or deletion of your account. We will confirm receipt, verify that the request comes from the account holder, and act on it within one month.

Account deletion. Deleting your account is permanent and removes all of your personal data — your sign-in record (including your email address), your profile, your uploads and saved projects, your support chats, and your portal and storefront data. Kept afterwards: invoices and order records that tax law requires us to retain (and only if you made a purchase), and one abuse-prevention record — a one-way cryptographic hash of your email address (which cannot be turned back into the address) together with the random device identifier your browser generated, kept for up to 12 months and then deleted. Its only purpose is to prevent the free monthly allowance from being claimed repeatedly by deleting and re-creating accounts; it is retained on the legal basis of our legitimate interest in preventing abuse. It contains no readable email, no name, no IP address and no usage history. Community posts are anonymised rather than removed, so conversations other users took part in are not destroyed; anonymised posts no longer identify you. Once deleted, your email address is free to use again should you ever wish to create a new account — a new account within the 12-month window simply starts without the free allowance, and paid features are unaffected.

Cancelling a subscription does not require contacting us — you can cancel future renewals at any time from your account page, and deleting your account also ends your subscription.