We respect your privacy. This Privacy Policy explains what data we collect, how we use it, how we protect it, and the rights you have regarding your personal data.
Information We Collect
- Account and authentication data (via our identity provider) such as name, email, and account identifiers.
- Payment and billing data processed by our payment provider (we do not store full card data; tokens and transaction metadata only).
- Uploaded images, generated media, prompts, and related metadata (timestamps, options used).
- Usage and device data for performance, security, and analytics (e.g., IP address, user agent, pages/actions).
- Support communications and preference settings.
How We Use Data
- Provide the service: authenticate users, process AI jobs, deliver results.
- Billing and credits: process purchases, manage subscriptions, prevent fraud.
- Improve product quality and reliability: troubleshoot, optimize, and enhance features.
- Security and abuse prevention: rate limiting, anomaly detection, and policy enforcement.
- Legal compliance and legitimate interests.
Data Sharing
We share limited data with service providers strictly to operate the platform:
- Authentication provider for account login and security.
- Payment processor for transactions and subscriptions.
- Cloud hosting, storage, and database providers for infrastructure.
- Optional analytics and error monitoring tools for performance/quality.
We do not sell personal data.
Retention Policy
- Uploaded and generated media: retained in your account until you delete them or your account is closed.
- Account and billing records: retained as required for accounting and legal compliance.
- Backups: periodic backups may persist for a limited time; deletions propagate during standard rotation.
Security
We use encryption in transit, role-based access controls, and best practices for protecting accounts and data. No system is perfectly secure; we continuously improve our safeguards.
Your Rights
- Access and portability of your data.
- Deletion of your account and associated data (subject to legal obligations).
- Correction of inaccurate information.
- Objection or restriction to certain processing where applicable.
To exercise rights under GDPR/CCPA, visit our Data Requests page.