Privacy Notice

This Privacy Notice explains how Wamaiya Benefield, a sole proprietor doing business as "QzariDigitals" ("we", "us", "our"), collects, uses, and protects your personal data when you use our website, the Creator Empire Studio platform, and related services (the "Service"). We act as the data controller for the personal data described below.

Contact: support@qzaridigitals.tech

• Account data: name, email address, password (hashed), and profile details you provide.
• Content data: prompts, briefs, images, and other content you submit to the Service, plus the AI Outputs generated for you.
• Support data: messages and attachments you send when contacting support.
• Usage & telemetry: pages visited, features used, error logs, and approximate timing of interactions.
• Device data: IP address, browser type, device type, operating system, and similar technical identifiers.
• Marketing data: email address if you join our newsletter or waiting list, and your engagement with our emails.

Payment data: when you purchase a subscription, your payment details (card number, billing address, tax info) are collected and processed directly by our payment provider, Paddle, as the Merchant of Record. We do not receive or store full payment card details.

• To create your account and provide the Service (legal basis: performance of a contract).
• To generate AI Outputs based on your inputs and to maintain your history (contract).
• To process payments and subscriptions via Paddle (contract and legal obligation).
• To provide customer support (contract / legitimate interests).
• To keep the Service secure — preventing fraud, abuse, and unauthorized access (legitimate interests; legal obligation).
• To improve the Service — analyzing usage patterns and debugging issues (legitimate interests).
• To send service emails (account, billing, security notices) — contract / legal obligation.
• To send marketing emails, where you have signed up — consent, which you can withdraw at any time via the unsubscribe link.
• To comply with our legal obligations, including tax, accounting, and responding to lawful requests.

We share personal data only with the following categories of recipients:

• Service providers / subprocessors who help us run the Service — cloud hosting, database, email delivery, analytics, error monitoring, and customer support tools.
• AI model providers (e.g. via our AI gateway) that process your prompts to generate Outputs.
• Paddle, our Merchant of Record, for sale of the product, subscription management, payments, tax compliance, invoicing, and refund handling.
• Professional advisers such as legal and accounting professionals, where necessary.
• Authorities, where required by law, court order, or to protect our rights and the safety of users.
• Successors in the event of a merger, acquisition, or sale of assets, subject to equivalent privacy protections.

We do not sell your personal data.

Some of our service providers are located outside your country, including in the United States. Where personal data is transferred outside the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions, where applicable.

We retain personal data only for as long as needed for the purposes described above. As a general rule:

• Account and content data: while your account is active, plus a short grace period after deletion;
• Billing and tax records: as required by applicable tax law (typically 6–10 years);
• Support correspondence: typically up to 3 years;
• Usage logs: typically up to 12 months.

When data is no longer needed, we delete or anonymize it.

Subject to applicable law, you have the right to: access your personal data; ask us to correct or delete it; restrict or object to processing; receive a portable copy; and withdraw consent (where processing is based on consent). If you are in the UK or EEA, you also have the right to lodge a complaint with your local data protection authority. We will respond to verified requests within one month.

To exercise these rights, email support@qzaridigitals.tech.

We use appropriate technical and organizational measures to protect personal data, including encryption in transit, access controls, hashed passwords, and row-level database security. No system is 100% secure, but we work to minimize risk.

We use a small number of cookies and similar technologies. Strictly necessary cookies are used to keep you logged in and to remember essential settings. We may also use analytics cookies to understand how the Service is used. You can manage cookie preferences through your browser settings; disabling essential cookies may break parts of the Service.

The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, please contact us so we can delete it.

We may update this Privacy Notice from time to time. Material changes will be reflected by updating the "Last updated" date and, where appropriate, by notice in the Service.