Privacy Policy

Last Updated: January 26, 2026

At Favzen ("we", "us", or "our"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

1. Information We Collect

1.1 Account Information

When you register for our Service, we collect:

• Email address: Used for authentication and communication
• Authentication tokens: Provided by third-party authentication providers
• Account creation date and last login information

1.2 Service Data

When you use our Service, we process:

• Uploaded files: Temporarily stored during processing
• User-generated content: Data you create and store within the Service
• Processing results: Output generated by the Service

1.3 Usage Data

We automatically collect:

• Service request logs (timestamps, endpoints, response codes)
• Usage statistics and metrics
• Error logs and diagnostic information
• IP addresses (for security and abuse prevention)
• Browser type and operating system

1.4 Cookies and Tracking

We use:

• Session cookies: To maintain your authenticated session
• Authentication tokens: For secure access (stored client-side)
• We do not use third-party tracking or advertising cookies

2. How We Use Your Information

We use collected information for the following purposes:

2.1 Service Provision

• Process your data and deliver service functionality
• Store your content and service configurations
• Authenticate and authorize access to your account
• Provide customer support and respond to inquiries

2.2 Service Improvement

• Analyze usage patterns to improve performance and features
• Monitor and diagnose technical issues
• Develop new features and capabilities
• Create anonymized, aggregated statistics

2.3 Business Operations

• Calculate usage for future billing purposes
• Detect and prevent fraud and abuse
• Comply with legal obligations
• Send service announcements and updates

3. Data Sharing and Disclosure

3.1 Third-Party Services

We may share data with third-party service providers who assist us in operating our Service. These providers are bound by confidentiality agreements and may only use your data to perform services on our behalf. All third-party processing is subject to their respective privacy policies.

3.2 Legal Requirements

We may disclose your information if required to:

• Comply with legal obligations, court orders, or government requests
• Enforce our Terms and Conditions
• Protect our rights, property, or safety, or that of others
• Investigate fraud, security issues, or technical problems

3.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and prominent notice on our Service.

3.4 What We Don't Do

We do NOT:

• Sell your personal information to third parties
• Share your documents or templates with other users
• Use your content for advertising or marketing to third parties
• Train AI models on your private documents

4. Data Storage and Security

4.1 Storage Location

Your data is stored on secure servers and may be temporarily held in memory during processing.

4.2 Security Measures

We implement security measures including:

• Encrypted connections for all data transmission
• Secure authentication and authorization mechanisms
• Regular security updates and patches
• Access logging and monitoring
• Server-side validation and input sanitization

4.3 Data Retention

We retain data for the following periods:

• Account data: Until account deletion or 2 years of inactivity
• User content: Until you delete it or close your account
• Service logs: Up to 90 days
• Temporary files: Deleted after processing is complete

5. Your Rights and Choices

5.1 Access and Portability

You have the right to:

• Access your personal information and account data
• Export your templates and extraction results
• Request a copy of your data in a portable format

5.2 Correction and Deletion

You can:

• Update your account information through the web interface
• Delete your content at any time
• Request deletion of your account and all associated data

5.3 Data Deletion Requests

To delete your account and data, contact us via the information provided below. We will:

• Confirm your identity
• Delete your account within 30 days
• Provide confirmation of deletion
• Retain only data required for legal or business obligations

5.4 Opt-Out Rights

You can:

• Opt out of service announcement emails (critical security notices may still be sent)
• Disable cookies through your browser settings (may affect functionality)
• Stop using the Service at any time

6. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Service, you consent to such transfers.

7. Children's Privacy

Our Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

8. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

9. Your California Privacy Rights (CCPA)

If you are a California resident, you have additional rights:

• Right to Know: Request details about personal information we collect
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of sale of personal information (we don't sell data)
• Right to Non-Discrimination: Equal service regardless of privacy rights exercise

10. GDPR Compliance (EU Users)

If you are in the European Economic Area (EEA), you have rights under GDPR:

• Legal Basis: We process data based on consent, contract performance, and legitimate interests
• Right to Access: Obtain confirmation and access to your data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Request deletion ("right to be forgotten")
• Right to Data Portability: Receive data in structured format
• Right to Object: Object to certain processing activities
• Right to Lodge Complaint: File complaint with supervisory authority

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. Material changes will be communicated via:

• Email notification to registered users
• Prominent notice in the web interface
• Notice period before changes take effect (for material changes)

12. Contact Us

For privacy-related questions, concerns, or requests, please contact us at favzen.com.

We will respond to your request within 30 days.