Privacy Policy

1. Information we process

Account information includes your email address, name, profile image, sign-in provider identifiers, and session records. If you sign in with Google, we receive the profile information authorized through that sign-in flow. We do not receive your Google password.

Creation information includes prompts, uploaded images, video or audio references, generation settings, task identifiers, generated results, and credit usage. We also process information you send when requesting support.

Technical information can include IP addresses, approximate country information, browser and device details, timestamps, error logs, and product events such as starting or completing a generation.

2. Why we use information

We use this information to authenticate accounts, run generation requests, display creation history, manage credits, respond to support requests, troubleshoot failures, and prevent fraud or abuse.

Where applicable data protection law requires a legal basis, providing requested account and generation services relies on performing our agreement with you. Security and reliability processing relies on legitimate interests, subject to your rights. We rely on legal obligations for required records and on consent where it is required for optional processing. Information needed to sign in or fulfill a generation request is necessary to provide those features.

3. Uploads, generated files, and AI providers

To fulfill a request, we send the relevant prompt, settings, and reference files or file URLs to generation providers, including KIE and the model services involved in the selected workflow. Those providers process the submitted material to return a result. Their handling and retention of data may differ from ours.

Uploaded and generated media may be delivered through direct storage URLs. Anyone who obtains an accessible URL may be able to view or download the file. Do not upload passwords, identity documents, confidential material, or personal information you are not authorized to share.

We do not promise that provider processing is excluded from all training or improvement uses unless that restriction is expressly confirmed for the selected service. Contact us before submitting material that requires specific confidentiality or data-use guarantees.

4. Service providers and disclosure

We use infrastructure and storage providers, including Cloudflare, authentication providers such as Google, and configured email and analytics services to operate the website. These providers receive information relevant to their role. If payment features become available, a payment processor such as Stripe processes payment details and returns billing records to us; full card details are handled by the processor.

Information may also be disclosed when required by law, to address fraud or security incidents, or to protect legal rights. If the service changes ownership, information may be transferred as part of that change, subject to applicable law and notice requirements.

5. Cookies, analytics, and email

The service uses cookies or browser storage for sign-in sessions, preferences, and workflow continuity. Configured analytics tools can collect usage events and technical information. For example, when enabled, PostHog can associate generation events with an account identifier. Browser controls can limit cookies, although blocking essential cookies may prevent sign-in or other features from working.

Where newsletter delivery is enabled, account registration may add your email to product updates. You can unsubscribe using the link in marketing messages or contact us. Necessary account, security, and transaction messages are separate. Optional cookies and marketing communications require consent wherever applicable law requires it.

6. Retention and deletion

Retention depends on the information and its purpose: account records support your account, creation records support history and task recovery, and technical records support security and troubleshooting. Legal obligations and unresolved disputes can require longer retention. We do not currently publish a fixed retention period for every category.

You can use available account or creation deletion controls and contact us for a broader deletion request. Removing a creation from your history does not necessarily remove every underlying media file, provider copy, log, or backup immediately. We assess deletion requests against the records we hold and any applicable retention obligations.

7. Security and international processing

We use measures such as HTTPS and account access controls to protect information, but no online service can guarantee complete security. Our providers may process information outside your country. Applicable transfer requirements depend on your location and the providers involved; contact us for information about your request before submitting data that requires a particular storage location.

8. Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction, or portability of personal information. You may also object to processing based on legitimate interests and withdraw consent for processing that relies on it, without affecting earlier lawful processing.

Contact the email below to make a request. We may need to verify account ownership before disclosing or changing data. You may also complain to your local data protection authority where that right applies.

9. Age requirements and policy updates

The service is intended for adults who can enter a binding agreement. If you believe a child has provided personal information, contact us so we can investigate.

We update this notice when our practices change and show the revision date above. Material changes will be communicated through the service or another appropriate channel when required.