Fantadstic Privacy Policy

Last updated: November 5, 2026

This policy explains how Simpli Software LLC (“Simpli Software”, “we”, “us”) collects, uses, shares and protects information in connection with Fantadstic, including the web app, the ads it creates, and our website at fantadstic.com (together, the “Service”). It is also our notice at collection for California residents (section 4).

Fantadstic is used by businesses in the United States. “You” means the business that signs up, the people it invites to use the Service, and visitors to our website.

Quick facts: we do not sell your information for money. Our website uses an advertising pixel, but only if you say yes, and under California and some other state laws that counts as “sharing”. You can say no at any time (section 6). We do not train AI models on your content. Fantadstic is not for anyone under 16.

---

1. Information we collect

Information you give us

• Account details: your name, work email, password (kept only as a one-way hash), multi-factor sign-in details, business name, and the names and emails of people you invite.
• Business facts and brand profile: what you enter, plus what we read from your business’s own public website: business name, kind of business, tagline, services, offers, service area, rating, review quotes, contact details, colors and logo. A website can include names of staff or customers.
• Uploads: photos you upload, which may show people, vehicles, homes or places.
• Ads and chats: the ads you create, the words on them, and your edit-by-chat messages.
• Billing: your plan, credit purchases and credit balance. Payments are collected by Stripe. We do not store full card numbers.
• Support: messages you send us.

Information collected automatically

• Usage and device data: log data such as IP address, browser and device type, and the pages and features used, to run, secure and improve the Service. Where we store an IP address for abuse prevention, we store a keyed hash, not the address itself.
• Error reports: technical details about crashes and errors, so we can fix them.
• Bot-check data: Cloudflare Turnstile checks signals from your browser to tell people from bots on sign-up and sign-in forms.
• Cookies and similar tools: see our Cookie Policy.
• Advertising data (website only, only if you accept): the Meta Pixel on fantadstic.com collects cookie identifiers, your IP address, the pages you view and the actions you take, and browser details. We may add Google tags in the future, and if we do we will update this policy and ask you first.

Information from other sources

• Your public website, as described above.
• Stripe, about payment status.

We do not ask for sensitive personal information (such as health details or government IDs). Please do not put it in your content.

2. How we use information

• To provide the Service: read your website, build your brand profile, make and edit your ads, check them, and let you download them.
• To run payments, subscriptions and credits.
• To keep the Service secure: sign-in and multi-factor checks, abuse and fraud prevention, bot checks, and error monitoring.
• To contact you about your account, trial, billing and support requests.
• With your permission, to send product news and tips. You can unsubscribe at any time.
• To understand and improve the Service, using anonymous or combined statistics. This includes counting which ad ideas, layouts and edits people keep, change or skip, so that Fantadstic suggests better ads to everyone. We learn from patterns across many accounts, never from one account’s content, and we never show your ads, photos or business details to another customer.
• To measure our own ads on Meta, only as described in section 6.
• To meet legal duties and defend our rights.

We do not sell your information for money, and we do not use your content to train AI models.

3. AI and your content

• Backgrounds. To make a background photo we send Runware (runware.ai) a prompt, and Runware runs Google’s image model (Nano Banana) to draw the picture. If Runware is not available, we may send the same prompt to Google’s Gemini API instead. The prompt is built from fixed text and a few choices: the kind of business, the scene, the setting, the shape of the ad, and plain color names taken from your brand colors. No free text from your website or from you goes into that prompt. Your uploaded photos, logos and account details are not part of it.
• Checking the result. A Gemini vision model looks at a reduced copy of each generated background, with a description of the scene we asked for, to check it is usable (for example, no stray text or logos). Failed pictures are never shown to you.
• Edit-by-chat. When you ask for a change, we send Google Gemini your request and the details needed to make the change: your business name, kind of business, tagline, services, offers, service area and rating, the current words on the ad, its colors, template and size, and the list of picture choices by kind. In the words we send, we replace phone numbers, email addresses and street addresses with placeholders before sending and put them back afterward. This works for common formats (for example 813-555-0123, name@site.com, 12 Main St, 1-800-FLOWERS, PO boxes); something written in an unusual way may get through, so please do not type private details into a chat request. We do not send review authors or any account IDs in the words. (Pictures are different, see the next two points.)
• Your uploaded photos. We store them and draw them into your ads ourselves. We remove location and camera details (EXIF) from uploaded photos when we save them. When you upload a photo, we also send Google Gemini a reduced copy of it, and Google’s vision model checks whether it is safe to use (for example, that it does not show something we do not allow). That copy can show anything that is in the photo, including people, signs and license plates. We do not send the original file.
• Checking finished ads. After we lay out an ad, we send Google Gemini a reduced picture of the finished ad so the model can rate how it looks. A finished ad can include your uploaded photo, your logo, your phone number and a customer review quote with the reviewer’s first name. This is the one place your phone number reaches Google, and only as part of a picture of the ad.
• Reading your website. We pull facts out of your website with our own software. The text of your website is not sent to Google or any other AI provider.
• No training. We use the paid Gemini API. Google’s terms for paid services say Google does not use your prompts or responses to improve its products, and that Google may keep logs for a limited time to detect misuse and meet legal duties. Google acts as our service provider.
• Voice-overs. If you add a voice-over to an ad, we send Runware’s text-to-speech service the words of the voice-over script, sentence by sentence, with the voice you chose and its language. Runware sends back the audio. Your uploaded photos, logos and account details are not sent. Anything you write into the script goes to Runware, so please do not put private details in it.
• Runware. Runware acts as our service provider for background pictures and voice-overs. Its terms say it does not use customer material to train or develop AI models, and does not keep outputs long term. Its documentation says that, unless an account uses its Zero Data Retention option, a picture link stays available for 7 days. We ask for the picture back directly in Runware’s reply, not as a link. Runware’s published terms and policy do not say how long it keeps the prompt or script text itself, so we cannot promise a time. Runware’s terms say its services are hosted in the United States, Germany and Romania.
• AI output can be wrong or look off. Review ads before you post them.

4. California notice at collection (CCPA/CPRA)

This section is for California residents. It covers personal information of business contacts, staff and website visitors too.

Categories collected in the last 12 months, why, and who gets them:

Sold or shared. We do not sell personal information for money. If you accept advertising cookies on our website, the Meta Pixel sends identifiers and browsing activity to Meta so we can measure our ads and show them to people who visited. California law calls this “sharing” for cross-context behavioral advertising. In the last 12 months we have shared identifiers and internet activity this way only for visitors who accepted. We do not knowingly sell or share the personal information of anyone under 16. We do not use or disclose sensitive personal information for anything other than providing the Service.

How long we keep each category: see section 9. Your choices: see sections 6 and 10.

5. Who we share information with

We share information only with service providers that help us run the Service, only for that purpose, and as the law requires:

We may also share information if the law requires it, to protect people’s safety or our rights, or as part of a merger or sale of the business, in which case this policy would continue to apply. We may share anonymous, combined statistics.

6. Advertising pixel, “sharing”, and your opt-out

Our website at fantadstic.com uses the Meta Pixel to measure whether our ads on Facebook and Instagram work and to show our ads to people who visited. It stays off until you accept it. Meta may use what it collects under its own privacy policy, including to target and measure ads.

We do not use the pixel inside the signed-in Fantadstic app. We never send your ads, uploads, chats or business facts to Meta.

Do Not Sell or Share My Personal Information. Use the “Do Not Sell or Share My Personal Information” link in the footer of fantadstic.com, or the “Cookie settings” link, and choose Reject all or switch advertising off. No account or ID is needed.

Global Privacy Control. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of sale and sharing, and we do not load the advertising pixel for you, even if you click Accept all.

We honor an opt-out as soon as we can and within 15 business days at most, and we will not ask you to opt back in for at least 12 months.

7. Email

We email you about your account and billing. We send product news only if you agree or the law allows, and every such email has an unsubscribe link. Essential account and billing emails continue while you have an account.

8. Security

All traffic to the Service is encrypted in transit. Passwords are stored as one-way hashes. Multi-factor sign-in is required for every account. Each customer’s data is separated from other customers’ data in the database. Access inside our team is limited to what people need. No system is perfectly secure. If a breach affects your information, we will notify you as the law requires.

9. How long we keep information

Download your ads before deletion. We cannot recover them afterwards.

10. Your rights and how to use them

Depending on where you live (for example California, Colorado, Connecticut, Virginia, Texas and many other states, and the EU and UK), you may have the right to:

• know and get a copy of what we hold about you, in a portable format where the law gives it;
• correct wrong information;
• delete your information;
• opt out of sale, sharing and targeted advertising (section 6);
• limit the use of sensitive personal information (we use none for anything beyond the Service);
• object to or restrict some uses, and withdraw consent at any time (EU and UK);
• be treated the same whether or not you use your rights.

How to ask. Email contact@fantadstic.com with “Privacy request” in the subject, say what you want, and give the email on your account. You can also use the Cookie settings or Do Not Sell or Share link for advertising choices. You can also export or delete much of your data yourself in the app.

Verification. We may ask you to confirm you control the account email, so we do not give your data to the wrong person.

Timing. We respond within 45 days, and may extend by up to 45 more days if we tell you why. Opt-out requests are honored within 15 business days.

Authorized agent. You can use an agent. We may ask for proof they are allowed to act for you.

Appeals. If we turn down your request, you can appeal by replying with “Appeal” in the subject. We will answer in writing within 45 days and, where your state allows, tell you how to contact your state attorney general.

Payment data. Stripe handles your payment data and its own privacy requests. Stripe says that if a customer asks it to delete their Managed Payments data, it also cancels the subscriptions sold to that customer.

Data about your customers. If you put personal information about your own customers into Fantadstic, you are responsible for having the right to do so. We handle it only to provide the Service. If one of your customers asks us about their data, we will refer them to you.

11. Visitors from the EU, EEA and UK

Fantadstic is built for businesses in the United States and is not offered to consumers in the EU or UK. If you visit our website from there, we ask for your consent before loading any advertising cookies or pixels, and we do not load them if you do nothing. You can withdraw consent at any time. We process your information on these legal bases: contract (to provide the Service), legitimate interests (security, fraud prevention, error monitoring, support), consent (advertising cookies) and legal obligation. You can complain to your local data protection authority.

12. International transfers

We are based in the United States, and our providers process data in the United States and sometimes other countries. If your information is moved from the EU, UK or Switzerland to the US, we rely on the safeguards the law allows, such as the provider’s participation in the EU-US Data Privacy Framework or standard contractual clauses.

13. Children

Fantadstic is for businesses. It is not for anyone under 16, and we do not knowingly collect, sell or share personal information from anyone under 16. If you think a child gave us information, email us and we will delete it.

14. Other sites

The Service may link to other sites (for example Meta, Google and Stripe). They have their own privacy policies and we are not responsible for them.

15. Changes to this policy

We may update this policy. When we make a material change, we will update the date above and tell account owners by email or in the app before it takes effect.

16. Contact

Simpli Software LLC 30 North Gould Street, Sheridan, WY 82801 contact@fantadstic.com

© 2026 Simpli Software LLC