Privacy, explained clearly.

2. Privacy accountability

Pendid is responsible for personal information under its control. We maintain privacy practices designed to govern how personal information is collected, used, disclosed, retained, protected and deleted throughout its lifecycle.

The person responsible for privacy matters for the international Pendid service can be contacted as:

Privacy-related requests, access or correction requests, complaints and questions about this policy may be directed to the Privacy Officer using the contact details above.

3. Personal information we may collect

The information we process depends on how you use Pendid. We aim to limit collection to information that is reasonably necessary for identified and appropriate purposes.

Account and profile information

When you create or use an account, we may process your name, email address, account identifier, authentication information, account status, active plan, credits or usage entitlements, subscription dates and related account settings.

Transaction and subscription information

If you purchase a paid service, we may receive or store information such as the selected plan, amount, currency, transaction identifier, payment status, billing contact information, purchase date, renewal status, refund status and subscription history.

User content and project information

When you use Pendid's creative or AI tools, we may process text prompts, uploaded images, documents or media, generated outputs, project settings, editing instructions, thumbnails, saved projects, gallery items and other content associated with your account.

Device, usage and security information

We may process technical information such as browser type, device type, operating system, IP address, approximate network-derived location, request logs, pages or features used, timestamps, referral or attribution information, error data, performance data, security events and anti-abuse signals.

Support and communications

If you contact us, we may retain the content of your message, email address, relevant account information, attachments and our response history so that we can investigate and answer your request.

4. How we collect personal information

Personal information may be collected:

• directly from you when you create an account, make a purchase, upload content, configure a project or contact support;
• automatically when you use our websites or applications, including through server logs, essential cookies, security systems and similar technologies;
• from payment processors when they confirm transaction or subscription events;
• from authentication, infrastructure, analytics, AI, storage, email or other service providers involved in delivering a feature you use;
• from a referral, campaign or attribution source when that information is lawfully provided to us;
• from information you deliberately make public or ask us to publish through a Pendid public-sharing feature.

When applicable law requires additional notice at the point of collection, we may provide a contextual notice in the relevant feature or interface.

5. Why we use personal information

We may use personal information to:

• create, authenticate and manage user accounts;
• provide access to design, image, AI, video, gallery, template and project features;
• process prompts, uploads and instructions needed to perform requested creative or AI tasks;
• save projects, files and outputs so that users can return to, manage or download them;
• process purchases, subscriptions, renewals, refunds and account entitlements;
• provide support and respond to privacy, billing, technical or account requests;
• secure accounts, detect abuse, prevent fraud and protect Pendid's infrastructure and users;
• diagnose errors, monitor reliability, measure performance and improve the service;
• understand feature usage and improve product design;
• send service, security, billing and other operational communications;
• send commercial electronic messages where permitted by applicable law and your choices;
• comply with legal obligations, enforce agreements and establish, exercise or defend legal claims;
• perform other compatible purposes that are disclosed to you and permitted by law.

We do not collect personal information for the purpose of selling a user profile or a user's private creative content as a standalone data product.

6. Consent, necessity and your choices

Where consent is required, we seek consent in a manner appropriate to the sensitivity of the information, the purpose of processing, your reasonable expectations and the requirements of applicable law.

Certain information is necessary to provide a service you request. For example, an AI image feature cannot process an uploaded image without receiving the image, and an account service cannot maintain a login without processing account and authentication information.

For activities that are not necessary to provide the requested service, additional choices or consent may be provided where required. You may withdraw consent for processing that depends on consent, subject to legal or contractual restrictions and reasonable notice. Withdrawal may affect the availability of a feature that depends on that processing.

We may also collect, use or disclose information without consent where applicable law authorizes or requires us to do so.

7. AI features and processing of your content

Some Pendid features use artificial intelligence or machine-learning systems to generate, transform, edit, analyze or otherwise process content.

When you use an AI feature, the prompt, image, file, audio, video, instructions, settings or other input required to perform your request may be processed by Pendid and by service providers involved in delivering that feature.

Different AI features may use different providers, infrastructure or processing locations. Provider retention and data-handling terms can vary according to the service, configuration and contractual arrangement. We evaluate providers and disclosures in light of the information involved and applicable requirements.

Do not submit highly sensitive, confidential, regulated or third-party personal information to an AI feature unless the feature is appropriate for that information, you are authorized to use it, and you understand the processing involved.

AI-generated outputs can be inaccurate, incomplete, unexpected or unsuitable for a particular purpose. You are responsible for reviewing outputs before relying on or publishing them.

8. Files, projects, galleries and public sharing

Pendid may store files, generated outputs, project settings and related account content so that you can view a gallery, continue work, manage projects or download outputs.

Account content is intended to remain associated with the relevant account unless you deliberately use a feature that publishes content, creates a public link, submits content to a public gallery, shares content with others, or otherwise makes it publicly accessible.

If you choose to publish or publicly share content, other people may be able to view, copy, download or redistribute it. Do not publish personal information, images of identifiable individuals or third-party content unless you have the necessary rights, permissions and lawful basis to do so.

We may review or restrict content when reasonably necessary to operate public features, enforce applicable rules, investigate abuse, respond to reports, protect users, maintain security, or comply with legal obligations.

9. Payments, subscriptions and billing records

Paid international Pendid services may use third-party payment processors. Payment processors may collect payment credentials and other billing information directly from you under their own privacy and security practices.

When a third-party payment processor handles card data, Pendid does not intend to store your full payment card number or card security code on its application systems. We may receive and retain limited information required to manage the transaction, such as:

• transaction or payment-provider identifiers;
• payment, refund and subscription status;
• purchase amount, currency and date;
• the plan, product or service purchased;
• billing contact information or limited payment metadata made available by the processor;
• records necessary for accounting, dispute handling, fraud prevention and customer support.

A payment provider's own privacy policy and terms may also apply to information that provider collects directly.

10. Cookies, analytics and similar technologies

Pendid may use cookies, local storage, pixels, server logs and similar technologies for functions such as:

• authentication and session management;
• security, fraud prevention and abuse detection;
• saving user preferences;
• service reliability and performance measurement;
• analytics and product improvement;
• campaign measurement and attribution;
• advertising measurement or related functions where enabled and permitted.

Some technologies are necessary for the service to function. Other technologies may be optional or subject to consent and privacy-setting requirements.

Where a technology includes functions that identify, locate or profile a person and applicable law requires notice or user control, Pendid will provide the information and choices required for that technology. Browser settings can also be used to control or delete many types of cookies, although blocking necessary storage may prevent some features from working.

11. Email and other electronic communications

Pendid may send operational messages needed to provide the service, including account verification, password or security notices, billing confirmations, service changes, material policy updates and support replies.

Commercial electronic messages are handled in accordance with applicable Canadian requirements, including Canada's Anti-Spam Legislation (CASL) where applicable. Where consent is required, Pendid will rely on an applicable form of consent or other permission recognized by law and will provide an unsubscribe mechanism in commercial messages as required.

Unsubscribing from marketing does not prevent us from sending non-promotional account, security, legal, billing or transactional messages that are necessary to operate your account or respond to your request.

12. Service providers and disclosures

Pendid relies on specialized service providers to operate a modern online creative platform. Depending on the feature, these providers may support:

• cloud hosting, networking and content delivery;
• data storage and database infrastructure;
• authentication and account services;
• AI inference, media processing and model execution;
• payment processing;
• email delivery and customer communications;
• analytics, diagnostics and error monitoring;
• security, fraud prevention and abuse detection;
• customer support and operational tooling.

We disclose personal information to service providers when reasonably necessary for them to perform the relevant service, subject to applicable legal requirements and the safeguards appropriate to the relationship.

We may also disclose information where reasonably necessary to comply with law, respond to valid legal process, protect rights or safety, investigate fraud or security incidents, enforce agreements, or complete a corporate transaction subject to applicable privacy requirements.

13. Processing and storage across jurisdictions

Pendid is operated from Canada, but a global online service may use infrastructure and service providers in other Canadian provinces or in other countries. Personal information may therefore be processed or stored outside your province or outside Canada.

When information is processed in another jurisdiction, it may be accessible to courts, law-enforcement authorities, regulators or other public authorities in accordance with the laws of that jurisdiction.

We consider the sensitivity of information, the purpose of processing, the safeguards available, the service provider relationship and applicable legal requirements when arranging cross-jurisdiction processing.

Where Québec privacy law applies, Pendid follows the applicable requirements for assessing personal information transfers or processing outside Québec and for implementing appropriate contractual or other safeguards before such processing where required.

14. Retention, deletion and backups

We retain personal information only for as long as it is reasonably needed for the purposes for which it was collected, compatible purposes, legal obligations, accounting, dispute resolution, fraud prevention, security or enforcement of agreements.

Retention periods vary by data type. For example, project content may be retained while an account or related feature remains active, while transaction records may need to be retained for accounting, legal or dispute purposes.

When information is no longer required, we use reasonable processes to delete, destroy or anonymize it, subject to legal and operational exceptions. Deleted information may remain for a limited period in backups, security logs, disaster-recovery systems or cached copies before being overwritten through normal system cycles.

If you request account or personal-information deletion, we will evaluate the request under applicable law and remove information that must or can reasonably be deleted while retaining information we are permitted or required to keep.

15. Security safeguards

Pendid uses administrative, technical and organizational safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, copying, use or modification, taking into account the sensitivity and context of the information.

Safeguards may include, as appropriate:

• authentication and access controls;
• least-privilege or need-to-know access practices;
• secure transmission and storage technologies;
• infrastructure monitoring and security logging;
• software updates and vulnerability management;
• backup and recovery practices;
• vendor and service-provider controls;
• incident investigation and response procedures.

No Internet service can guarantee absolute security. We therefore cannot promise that unauthorized access, loss or misuse will never occur, but we work to apply safeguards proportionate to the risks we identify.

16. Privacy and security incidents

If Pendid becomes aware of a confidentiality or security incident involving personal information, we assess the incident and take reasonable steps to contain it, reduce the risk of harm, investigate the cause and help prevent recurrence.

Where applicable law requires notice to affected individuals, privacy regulators or other authorities, we provide that notice in accordance with the relevant legal threshold and timing requirements.

We may also maintain records of privacy or safeguards incidents where required by applicable law.

17. Your privacy rights

Depending on the law that applies to your relationship with Pendid, you may have rights to:

• ask whether Pendid holds personal information about you;
• request access to personal information that Pendid holds about you, subject to lawful exceptions;
• request correction of inaccurate, incomplete or ambiguous personal information;
• ask how your personal information has been used or disclosed;
• withdraw consent for processing that relies on consent, subject to legal or contractual limits;
• request deletion or de-indexing in circumstances where applicable law provides such a right;
• raise a privacy complaint or challenge our compliance with applicable privacy requirements;
• request computerized personal information in a structured, commonly used technological format where a portability right applies and the legal requirements are met.

We may need to verify your identity before completing a privacy request. Verification helps prevent unauthorized access to another person's information.

Some rights are subject to exceptions. For example, we may be unable to disclose information that would reveal another person's personal information, confidential commercial information, information protected by legal privilege, or information that applicable law permits us to withhold.

To submit a request, contact the Privacy Officer at support@pendid.com .

18. Automated processing, moderation and security systems

Pendid may use automated systems as part of its product features, security monitoring, abuse prevention, content moderation, reliability systems or fraud detection.

Where Pendid makes a decision based exclusively on automated processing of personal information and applicable law requires a specific notice, explanation, opportunity to submit observations or other user right, Pendid will provide the required information and process.

AI-generated creative outputs are not represented as legal, medical, financial or other professional decisions about a person.

19. Children and meaningful consent

Pendid's international services are not directed to children under 13. Users must also be able to provide meaningful consent appropriate to the nature of the service and information involved.

Where a person cannot provide valid or meaningful consent on their own, consent from a parent, guardian or other authorized person may be required as determined by applicable law.

If you believe a child has provided personal information to Pendid in circumstances where appropriate consent was not obtained, contact the Privacy Officer so we can review the situation.

20. Links and third-party services

Pendid may link to third-party websites, applications or services. A third party's own privacy policy and terms apply when that party independently collects or controls information through its service.

We are not responsible for the independent privacy practices, content or security of third-party services that are not operated by Pendid. Review the relevant third party's privacy information before providing personal information directly to that service.

21. Changes to this Privacy Policy

We may update this policy as Pendid's products, providers, privacy practices or legal obligations change. The current version will be published at this URL and the "Last updated" date will be revised.

If a change materially affects how we collect, use or disclose personal information, we will provide additional notice or obtain new consent where required by applicable law.

We recommend reviewing this page periodically if you regularly use Pendid.

23. Contact, requests and privacy complaints

Questions about this policy, requests to exercise a privacy right, and privacy complaints should first be directed to Pendid's Privacy Officer.

We will review privacy requests and complaints in accordance with the law that applies to the request. If you are not satisfied with our response, you may also have the right to contact the privacy regulator that has jurisdiction over your matter.