7. GDPR Rights (EU/EEA/UK)

• Access, Rectification, Erasure, Restriction, Portability, Objection, Withdraw Consent

Legal Basis: Consent (Art. 6(1)(a)) and legitimate interests (Art. 6(1)(f)).

8. CCPA/CPRA Rights (California)

• Know, Delete, Opt-Out of sale/sharing, Non-Discrimination, Correct, Limit

We do not sell or share personal information.

9. Additional Jurisdictions

Brazil (LGPD)

Rights to access, correction, anonymization, portability, deletion.

Canada (PIPEDA)

Rights to access, challenge accuracy, withdraw consent.

South Africa (POPIA)

Rights to access, correction, deletion, objection.

10. Data Retention

Privacy request data: 24 months. Analytics: 14 months with anonymization.

11. Children's Privacy

Not intended for individuals under 18. We do not knowingly collect data from minors.

12. Exercising Your Rights

• Email: [email protected]
• Online: Data Request page
• Cookies: Manage Preferences

Response within 30 days (CCPA) or one month (GDPR).

13. Changes

Changes posted with updated date. Review regularly.

14. Contact

• Email: [email protected]
• Subject: "Privacy Inquiry — TextsToArt.com"

EU residents may lodge complaints with their local DPA.

Third-Party Services

We use the following third-party services that may process your data:

• Google Analytics (Google LLC) — Web analytics. Collects anonymized usage data, IP address (truncated), browser type, pages visited. Google Privacy Policy.
• Google Fonts (Google LLC) — Font delivery. May collect IP address and browser metadata. Google Fonts Privacy.
• Cloudflare (Cloudflare, Inc.) — CDN and security. Processes IP addresses and request headers. Cloudflare Privacy Policy.

We do not sell, rent, or trade your personal data. We do not use advertising trackers or retargeting pixels.