Privacy Policy
What we collect
- Account data: username, a hashed password (we never store the password itself), and sign-up / last-login timestamps.
- Generation data: your prompts, the settings you chose, and the images or videos produced.
- Payment data: handled by PayPal. We receive an order id, the amount, the status, and the payer's email address. We never see or store card details.
- Technical data: IP address and user agent, kept in server logs for abuse prevention and debugging.
Why we collect it
- to run your account and deliver generations;
- to charge credits and keep an auditable ledger of purchases and refunds;
- to prevent abuse, fraud, and terms violations;
- to debug failures and improve reliability.
Who we share it with
- Model providers — your prompt (and any reference image you supply) is sent to a third-party inference provider to produce the result.
- PayPal — to process payments.
- Hosting — our servers and storage run on a cloud provider.
We do not sell personal data.
Cookies
We use a single first-party cookie (ai_session) to keep you signed in. It is
HttpOnly and SameSite=Lax. There are no advertising or analytics cookies.
How long we keep it
- Session cookie: 30 days, or until you sign out.
- Generated media: until you or we delete it; old files may be pruned on a retention schedule.
- Ledger and order records: kept while the account exists, for accounting and dispute handling.
Your rights
You may request access to, correction of, or deletion of your personal data by writing to [CONTACT EMAIL]. Deleting an account removes its media and login data; minimal transaction records may be retained where the law requires it.
Children
The Service is not directed at children under 16 and we do not knowingly collect their data.
Changes
Material changes to this policy will be announced on this page.