Privacy policy

Effective 5 October 2026

What is collected

Account name and email, authentication records, uploaded media, generation settings, credit ledger, order and support records. Cloudflare processes request security information. Optional analytics receive public page paths and action categories; completed purchases include an opaque transaction reference, amount and currency. They never receive portraits, prompts, email or payment credentials.

How data is used

To authenticate users, generate requested files, maintain credits, fulfill purchases and investigate support requests. Cloudflare hosts the service, D1 and private R2. When connected, fal processes generation requests, Resend sends account email, Google handles chosen social sign-in, and Waffo handles purchases. These suppliers may process data across countries under their own service policies.

Storage and deletion

Inputs expire after seven days and completed outputs after thirty days, and become inaccessible at expiry. A scheduled cleanup removes expired objects; inputs for active jobs are retained until that job is resolved. You can delete retained media in your account. Support and billing records are kept for dispute handling and required bookkeeping; a final jurisdiction-specific period will be disclosed before sales.

Your choices

Optional analytics are off until you allow them. Change the choice in Cookie settings. Submit an account support request for access, correction, account deletion or a rights concern. Account deletion is reviewed to preserve legally required transaction records and reconcile active jobs. Account support request