Privacy Policy

Last Updated: May 31, 2025

Welcome to EidMubarak.net (referred to as "we," "us," or "our"). We are committed to protecting your privacy and handling your data in an open and transparent manner. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you visit our website and use our AI-powered greeting generation services (collectively, the "Service").

Our operations are based in Canada, and this policy is primarily framed around Canadian privacy principles (PIPEDA) and those of the Province of Ontario, while also considering key aspects of international data protection regulations like the GDPR and CCPA/CPRA for our global users.

1. Information We Process

We are dedicated to minimizing the collection of personal information.

a) Information You Provide for Greeting Generation:

• When you use our Service, you may input data like recipient names or descriptions, occasion details, desired tone, themes, and personalization notes.
• This information is sent to our third-party AI service provider (OpenAI) solely to generate your requested greeting.
• We do not store this input information (recipient names, personal messages, etc.) on our servers after your session or use it for any purpose other than generating the greeting in real-time.

b) Information You Provide via Contact Form:

• If you use our contact form, we collect your name, email address, subject, and message.
• This is used only to respond to your inquiries. We do not use this for marketing unless you give explicit consent.

c) Automatically Collected Information (Non-Personally Identifiable & Usage Data):

• Log Files: Our servers may log standard browser-provided information: IP address (which can be personal information), browser type, OS, referring/exit pages, date/time stamps. This is for system administration, security, and aggregated statistical analysis.
• Google Analytics: We use Google Analytics to understand user engagement. It uses cookies for anonymous traffic data (page views, time on site, navigation). Your IP address may be anonymized by Google Analytics. Data use by Google is covered by their Privacy & Terms. Opt-out with the Google Analytics Opt-out Browser Add-on.

d) Cookies and Similar Technologies:

• Essential Cookies: For basic site functions (e.g., session management, cookie consent preferences).
• Google AdSense & Analytics Cookies: Google AdSense uses cookies (including third-party cookies like DoubleClick) for ad personalization based on prior visits. You can manage personalized advertising via Google Ad Settings. For broader opt-outs from third-party ad vendors, visit youradchoices.com (or regional sites like youradchoices.ca for Canada). Google Analytics also uses cookies as described above.
• reCAPTCHA: Google reCAPTCHA on our forms helps prevent spam/abuse and is subject to Google's Privacy Policy and Terms of Service.
• Cookie Consent Management: Our cookie consent tool allows you to manage your preferences for non-essential cookies.

2. How We Use Your Information

• To provide, operate, and maintain our Service.
• To respond to contact form inquiries.
• To generate personalized greetings as requested.
• To understand and analyze Service usage for improvements (via aggregated/anonymized data).
• To display advertisements (Google AdSense) to support the Service.
• To protect our Service from spam and abuse (reCAPTCHA).
• To comply with legal obligations and protect our rights.

3. Disclosure of Information to Third Parties

We do not sell your personal information. Information may be shared as follows:

• OpenAI: Textual preferences for greeting generation are sent to OpenAI's API, governed by their Privacy Policy and Terms of Use.
• Google (Analytics, AdSense, reCAPTCHA): Data is processed by Google according to their privacy policies.
• Service Providers: Third-party companies for functions like web hosting access information only as necessary for their tasks and are obligated to protect it.
• Legal Requirements: If required by law or to protect rights.

4. Lawful Basis for Processing (for EU/EEA Users)

If you are in the European Economic Area (EEA), our processing of your personal information (if any is deemed collected, e.g., IP addresses via server logs, or contact form data) is based on:

• Consent: For non-essential cookies (Analytics, Ads) obtained via our cookie consent tool, and for processing contact form submissions.
• Legitimate Interests: For essential website operation, security, and basic server logging, provided these interests are not overridden by your data protection rights.

5. Your Data Protection Rights

Depending on your location and applicable laws, you may have certain rights regarding your personal information. We are committed to facilitating these rights.

a) General Rights (including under PIPEDA for Canadian Residents):

• The right to access personal information we hold about you (if any).
• The right to request correction of inaccurate or incomplete information.
• The right to withdraw consent for the collection, use, or disclosure of your personal information (subject to legal or contractual restrictions and reasonable notice). Given our minimal data storage, withdrawal primarily relates to cookie consent.

b) Rights for Users in the European Economic Area (EEA) under GDPR:

If GDPR applies to you, you have rights including:

• The right to access, update, or delete the information we have on you (if any).
• The right of rectification.
• The right to object to our processing.
• The right of restriction.
• The right to data portability.
• The right to withdraw consent at any time.

c) Rights for California Residents (CCPA/CPRA):

If the CCPA/CPRA applies to you, you have rights including:

• The right to know what personal information is being collected about you.
• The right to know whether your personal information is sold or shared and to whom.
• The right to opt-out of the sale or sharing of your personal information (you can manage this largely through our cookie consent tool regarding advertising cookies).
• The right to access your personal information.
• The right to request deletion of your personal information (subject to certain exceptions).
• The right to correct inaccurate personal information.
• The right to non-discrimination for exercising your CCPA/CPRA rights.

We do not "sell" personal information in the traditional sense. However, the use of some advertising cookies might be considered "sharing" under CCPA/CPRA. You can control these via our cookie consent tool.

Exercising Your Rights: To exercise any of these rights, please contact us using the Contact Form. We will respond to your request in accordance with applicable data protection laws.

6. Data Security

We implement reasonable administrative, technical, and physical security measures to protect information processed by our Service. However, no internet transmission is 100% secure.

7. International Data Transfers

Our primary operations are in Canada. However, our use of third-party services like OpenAI and Google means that your data may be transferred to, stored, and processed in countries outside of Canada (such as the United States), where data protection laws may differ. We rely on the security and data protection commitments of these third-party providers.

8. Children's Privacy

Our Service is not directed to individuals under the age of 16 (or the applicable age of digital consent in your jurisdiction, e.g., 13 in Canada/US in many contexts). We do not knowingly collect personal information from children without verifiable parental consent.

9. Links to Other Websites

Our Service may contain links to other websites not operated by us. We are not responsible for their privacy practices.

10. Changes to This Privacy Policy

We may update this Privacy Policy. We will notify you of changes by posting the new policy on this page and updating the "Last Updated" date. You are advised to review this policy periodically.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please use the Contact Form on our website.

12. Governing Law

This Privacy Policy and any disputes related thereto shall be governed by and construed in accordance with the laws of the Province of Ontario and the federal laws of Canada applicable therein, without regard to its conflict of law provisions.