Privacy Policy (Datenschutzerklärung)

Last updated: January 2025

1. Introduction

MyComic-Book.com ("we", "us", "our") operates the website www.mycomic-book.com ("Platform"). This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with:

• Swiss Federal Act on Data Protection (revDSG)
• EU General Data Protection Regulation (GDPR)

By using our Platform, you agree to the collection and use of information in accordance with this policy.

2. Contact

info@mycomic-book.com
8008 Zürich
Switzerland

3. What Data We Collect

3.1 Personal Data You Provide

• Contact Information: Name, email address, phone number, shipping address
• User Content: Photos, names, text descriptions, and other information you submit to generate comics
• Payment Information: Processed securely by Stripe (we do not store credit card details)
• Order Information: Purchase history, comic preferences, delivery details

3.2 Automatically Collected Data

• Technical Data: IP address, browser type, device information, operating system
• Usage Data: Pages visited, time spent on pages, click patterns, referring URLs
• Cookies: See Section 5 for detailed cookie information

4. How We Use Your Data

We process your personal data for the following purposes:

4.1 Service Delivery

• Generate personalized AI comic books based on your inputs
• Process orders and payments
• Produce and ship physical comic books
• Send order confirmations and delivery updates

4.2 Communication

• Respond to customer inquiries and support requests
• Send important service announcements
• Notify you about order status changes

4.3 Analytics & Improvement

• Analyze website usage to improve user experience
• Understand customer preferences and behavior
• Optimize our AI generation algorithms
• Improve marketing effectiveness

4.4 Legal Compliance

• Comply with legal obligations
• Prevent fraud and abuse
• Enforce our terms and conditions

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our Platform.

5.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Necessary Cookies	Essential for website functionality, session management, and security	Session / Up to 1 year
Analytics Cookies (Google Analytics)	Track website usage, visitor behavior, and traffic sources	Up to 2 years
Marketing Cookies (Google Ads)	Track conversions, measure ad effectiveness, and show relevant ads	Up to 90 days

5.2 Google Analytics

We use Google Analytics to understand how visitors use our website. Google Analytics collects information such as:

• How often users visit the site
• Which pages they visit and in what order
• How long they stay on each page
• What content is most popular

Google Analytics uses cookies to collect this information. The data is transmitted to and stored by Google on servers in the United States and other countries. Google may also transfer this information to third parties where required by law or where such third parties process the information on Google's behalf.

Opt-out: You can prevent Google Analytics from tracking your visit by installing the Google Analytics Opt-out Browser Add-on.

5.3 Google Ads Conversion Tracking

We use Google Ads conversion tracking to measure the effectiveness of our advertising campaigns. When you click on an ad and complete a purchase, a conversion tracking cookie is placed on your device. This helps us understand:

• Which ads are most effective
• How many users complete a purchase after clicking an ad
• Return on advertising investment

The cookie expires after 90 days and does not contain personally identifiable information.

5.4 Managing Your Cookie Preferences

You can control and manage cookies through:

• Our cookie consent banner (appears on first visit)
• Your browser settings (see your browser's help documentation)
• Third-party opt-out tools (e.g., Google Analytics opt-out)

6. Third-Party Services

We work with trusted third-party service providers to deliver our services:

6.1 Supabase (Database & Authentication)

• Purpose: User account management, data storage
• Data Shared: Email, order information, user preferences
• Location: EU/US servers
• Privacy Policy: supabase.com/privacy

6.2 Stripe (Payment Processing)

• Purpose: Secure payment processing
• Data Shared: Name, email, payment information, billing address
• Security: PCI DSS Level 1 certified
• Privacy Policy: stripe.com/privacy

6.3 OpenAI / Replicate (AI Generation)

• Purpose: Generate comic illustrations and content
• Data Shared: Photos, text descriptions, story prompts
• Data Retention: Processed and deleted according to provider policies

6.4 Lulu (Print-on-Demand)

• Purpose: Physical comic book printing and shipping
• Data Shared: Name, shipping address, phone number, comic files
• Privacy Policy: lulu.com/privacy

6.5 Google (Analytics & Ads)

• Purpose: Website analytics and advertising
• Data Shared: Usage data, device information, cookie data
• Privacy Policy: policies.google.com/privacy

7. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption: All data transmitted via HTTPS/TLS encryption
• Access Control: Limited access to personal data on a need-to-know basis
• Secure Storage: Data stored on secure, encrypted servers
• Regular Updates: Security patches and updates applied regularly

8. Data Retention

We retain your personal data only as long as necessary:

• Account Data: Until account deletion or 3 years of inactivity
• Order Data: 10 years (for accounting and legal requirements)
• Generated Comics: Until download/delivery + 30 days
• User Photos: Deleted after comic generation (unless saved in your account)
• Analytics Data: Up to 26 months (Google Analytics default)
• Support Communications: 2 years after case closure

9. Your Rights (GDPR & Swiss Data Protection)

You have the following rights regarding your personal data:

9.1 Right to Access

Request a copy of all personal data we hold about you.

9.2 Right to Rectification

Request correction of inaccurate or incomplete data.

9.3 Right to Erasure ("Right to be Forgotten")

Request deletion of your personal data (subject to legal retention requirements).

9.4 Right to Restrict Processing

Request limitation on how we use your data.

9.5 Right to Data Portability

Receive your data in a structured, machine-readable format.

9.6 Right to Object

Object to processing based on legitimate interests or for direct marketing.

9.7 Right to Withdraw Consent

Withdraw consent for data processing at any time (where consent is the legal basis).

10. International Data Transfers

Your data may be transferred to and processed in countries outside Switzerland and the EU, including the United States. We ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by the EU Commission
• Adequacy decisions by the Swiss FDPIC
• Certification frameworks (e.g., EU-U.S. Data Privacy Framework)

11. Children's Privacy

Our Platform is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Significant changes will be communicated via email or prominent notice on the Platform.

13. Contact & Complaints

Data Protection Officer:
Email: privacy@mycomic-book.com
Response time: Within 30 days

13.1 Right to Lodge a Complaint

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with:

• Switzerland: Federal Data Protection and Information Commissioner (FDPIC)
  Website: edoeb.admin.ch
• EU/EEA: Your local Data Protection Authority
  List: edpb.europa.eu

14. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Contract Performance: To fulfill our service obligations (Art. 6(1)(b) GDPR)
• Consent: For marketing and non-essential cookies (Art. 6(1)(a) GDPR)
• Legitimate Interests: For analytics and service improvement (Art. 6(1)(f) GDPR)
• Legal Obligation: For accounting and legal compliance (Art. 6(1)(c) GDPR)