Function
GAAbstract's commitment to protecting your privacy and personal data
2025/12/21
Welcome to GAAbstract. This Privacy Policy explains how we collect, use, store, and protect your information when you visit https://gaabstract.com and use our AI‑powered graphical abstract maker and related services (collectively, the "Services").
Protecting your privacy and personal data is important to us. We process your information in accordance with applicable data protection laws and this Policy.
By using the Services, you agree to the practices described in this Policy. If you do not agree, please stop using the Services.
Depending on how you interact with the Services, we may collect the following categories of information.
When you purchase a paid plan or credits, our payment processors collect billing details such as your name, billing address, and payment method information.
We do not store complete payment card numbers on our own systems. We only receive limited information necessary to confirm payment status (e.g., last digits of the card, expiration date, and transaction IDs).
We use the information we collect for the following purposes:
Where data protection laws require us to identify a legal basis for processing your personal data, we rely on one or more of the following:
We use cookies and similar technologies to:
You can control cookies through your browser settings and, where available, through our cookie banner or preference center. Some cookies are essential for the basic operation of the Services; disabling them may affect functionality.
For more information, please see our Cookie Policy.
We do not sell your personal information. We may share your information with:
We work with trusted third‑party providers who help us operate the Services, including:
These providers only receive the information necessary to perform their services on our behalf and are required to protect your information and use it only for the specified purposes.
We may disclose information if we believe in good faith that doing so is reasonably necessary to:
If we are involved in a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will take reasonable steps to notify you (for example, via email or a notice on our website) if your information becomes subject to a different privacy policy.
We retain your information only for as long as necessary to fulfill the purposes described in this Policy or as required by law, including:
If you request deletion of your Account, we will delete or anonymize your personal data, unless we are legally required or permitted to keep certain information.
We implement reasonable technical and organizational measures designed to protect your information against unauthorized access, loss, misuse, or alteration, including:
However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.
If we become aware of a data breach that affects your personal information, we will take appropriate steps to investigate and, where required by law, notify you and relevant authorities.
Depending on your location and the services we use, your information may be processed and stored in countries outside your country of residence. These countries may have different data protection laws than your country.
When we transfer personal data across borders, we take appropriate safeguards to protect it in accordance with applicable laws, such as using standard contractual clauses or relying on other lawful transfer mechanisms.
Depending on your jurisdiction and applicable laws, you may have some or all of the following rights regarding your personal data:
You can exercise many of these rights within your account settings. You may also contact us at [email protected] to submit a request. We may need to verify your identity before responding.
You also have the right to lodge a complaint with your local data protection authority if you believe our processing of your personal data violates applicable law.
The Services are not directed to children under the age at which they can provide valid consent to data processing in their jurisdiction. We do not knowingly collect personal information from such children.
If you believe that a child has provided us with personal information without appropriate consent, please contact us at [email protected], and we will take steps to delete the information as required by law.
We may update this Privacy Policy from time to time to reflect changes in our Services, legal requirements, or data practices. When we do, we will update the "date" in the frontmatter of this page or provide notice through the Services (for example, via email or an in‑app message).
Your continued use of the Services after the updated Policy becomes effective means you accept the changes. If you do not agree with the updated Policy, you should stop using the Services.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
[email protected]