This policy explains how [LEGAL ENTITY], [REGISTERED ADDRESS] ("Bella", "we") handles personal data when you use Bella Studio AI. For data about visitors to sites built with Bella, the site's owner is responsible; each published site has its own privacy notice.

1. What we collect

• Account data: your name, email address, sign-in method and, if you sign in with Google or Apple, the basic profile they share.
• Your content: the sites, pages, images, text and settings you create, including what you ask Bella's AI to generate.
• Store data: if you sell, your store details and the order information needed to run your store. Card details are handled by Stripe and never reach Bella.
• Usage data: with your consent, how you use the app (pages viewed and features used). See the Cookie policy.
• Technical data: security logs, such as IP address, browser and device type, kept to protect the Service, and error reports, which never include your name or email.

2. Why we use it

• To provide the Service you asked for: your account, editor, publishing, hosting and store (contract).
• To keep the Service secure, prevent abuse and fix errors (legitimate interests).
• To understand and improve how the app is used, only if you consent to analytics (consent).
• To send you service messages, such as sign-in links and important changes (contract).
• To meet legal obligations, such as tax and accounting records (legal obligation).

We do not sell your personal data and we do not use it for third-party advertising.

3. Who we share it with

We use service providers who process data for us under contract:

• Hosting and storage providers that run the app, the API and published sites.
• PostHog (United States), for product analytics, only after you consent.
• Error monitoring (Sentry), configured not to receive your name or email.
• Stripe, for store payments and Seller onboarding.
• Mapbox, for address suggestions and maps when you add your business address.
• Email delivery providers, for sign-in links and service emails.
• AI providers, which process your prompts and content to generate text and images. They may not use it to train their models.

We may disclose data when the law requires it, or to protect the rights and safety of our users and the public.

4. International transfers

Some providers, including PostHog, process data in the United States. Where data leaves the UK, the EU or Canada, we rely on adequacy decisions or standard contractual clauses.

5. How long we keep it

We keep account data and Your content while your account exists. When you delete your account, we delete your content and take down your sites, except records we must keep by law. Analytics data is kept for up to 12 months.

6. Your rights

Depending on where you live, you can ask to access, correct, delete or export your personal data, object to or restrict some uses, and withdraw consent at any time. You can delete your account and its sites yourself from your account settings. You can change your cookie choices from "Cookie preferences" at the bottom of the page.

To make a request, email [PRIVACY EMAIL]. You can also complain to your local data protection authority, such as the ICO in the UK, the Commission d'accès à l'information in Quebec, the UODO in Poland or the Superintendencia de Industria y Comercio in Colombia.

7. Children

The Service is not for anyone under 18 and we do not knowingly collect their data.

8. Changes

If we change this policy in a material way, we will ask you to accept the new version in the app. Minor changes update the effective date.

9. Contact

Privacy questions: [PRIVACY EMAIL].