Privacy Policy

1. Introduction

Welcome to our AI platform. We respect your personal privacy and are deeply committed to protecting your personal data and creative assets. This Privacy Policy outlines how we collect, store, process, and protect your information when you access our website, use our generative AI tools (including text-to-image, text-to-video, and music generation), and purchase credit packages or subscriptions.

By accessing or using our services, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

We collect information directly provided by you, automatically recorded through your usage, and received from authorized third parties:

1. Account Information — When you sign up or log in, we collect your name, email address, avatar, and authentication identifiers (such as OAuth providers via Google, GitHub, or email verification).
2. Generation Prompts & Uploaded Assets — We collect the prompt texts, reference images, source media, and style configurations you submit for AI generation, as well as the resulting generated media files.
3. Billing and Transaction Data — When purchasing credits or subscription plans, our third-party payment processors (e.g., Stripe, Creem) collect necessary billing information. We do not store full payment card numbers on our servers.
4. Device and Usage Telemetry — We automatically collect technical information including your IP address, browser type, operating system version, access timestamps, and interactions with our tools to optimize service performance and security.
5. Cookies and Local Storage — We use essential cookies and browser local storage to maintain your authentication state, interface preferences, and active drafts.

When enabled, we use pvuv.ai to measure visits, page views, referral sources, and interactions on public pages. Its script sends usage and device information to in.pvuv.ai and uses first-party visitor/session cookies and local storage (including _pv_id and _pv_sid) to recognize visits. When our cookie banner is enabled, this tracker starts only after you accept; you can change your choice through Cookie settings. We exclude administration, account, authentication, and private creation/library pages from its page-view collection.

When enabled, Google Analytics 4 also measures public-page visits and product interactions using first-party Google Analytics cookies. After sign-in, an opaque account ID can connect activity across visits. Our server reports confirmed sign-ups, sign-ins, generation starts and outcomes, checkout starts, and successful purchases to Google Analytics and pvuv.ai. Purchase reports include an order identifier, amount, and currency. These reports exclude email addresses, generation prompts, uploaded media, and URL query strings. Optional analytics follows your Cookie settings; changing that choice does not affect essential account, payment, or generation records.

3. How We Use Your Information

We process your data for the following legitimate purposes:

• Service Delivery & Media Generation — To process your prompts and media inputs through our AI pipeline and deliver generated images, videos, and music.
• Account & Credit Management — To track credit balances, record transaction history, and manage your account lifecycle.
• Safety and Compliance — To monitor for abusive, fraudulent, or harmful activities, enforce our acceptable use policies, and protect system integrity.
• Customer Support & Communications — To respond to your technical inquiries, notify you of system updates, and deliver essential account notifications.
• Quality Optimization — To analyze aggregated usage trends and improve model latency, rendering performance, and user experience.

4. AI Processing & Third-Party Providers

To provide state-of-the-art AI generation capabilities, we interface with specialized AI infrastructure and cloud compute providers.

• Your prompt texts and reference assets are securely transmitted to authorized processing nodes solely for the purpose of executing your generation requests.
• We do not sell your personal data or user-submitted creative assets to third parties.
• Your creation records and library are scoped to your account. Private database uploads require authentication. Provider-hosted and cloud-storage media may use unlisted URLs; anyone who has a media URL may be able to view the file. Avoid sharing those links if you want to keep the media private.

The Fancy Cafe and Bicep Heart video tools send your scene prompt and selected reference media URLs to Metaso for MiniMax-H3 video processing. Completed results are copied to our configured media storage; source provider URLs may expire.

5. Data Storage and Retention

• We retain your personal data and account details for as long as your account remains active or as needed to provide our services and meet legal obligations.
• Account information and creation records are stored in our database. Depending on the deployment configuration, uploaded references are stored in private database storage or cloud storage. Generated media may remain hosted by the AI provider, and those URLs can expire.
• Deleting a creation removes it from your library; it may not delete a provider-hosted file. Download completed media to your own device if you want a lasting copy.

6. Data Security

We implement rigorous technical and organizational security measures, including HTTPS/TLS encryption in transit, strict access token management, and regular infrastructure reviews. While no method of electronic transmission or storage is 100% secure, we continuously evaluate and enhance our security safeguards to protect your data against unauthorized access, alteration, or disclosure.

7. Your Privacy Rights

Depending on your jurisdiction (including rights under GDPR, CCPA, and applicable privacy regulations), you have the right to:

• Access & Portability — Request a copy of the personal data we hold about you.
• Correction — Request updates or corrections to inaccurate information.
• Deletion — Request the deletion of your account and associated personal data.
• Withdraw Consent — Revoke consent for optional data processing activities at any time.

You can exercise these rights directly through your account settings or by reaching out to our support team.

8. Updates to This Privacy Policy

We may periodically revise this Privacy Policy to reflect changes in our services, technological advancements, or legal requirements. When updates occur, we will revise the "Last Updated" date at the top of this document. Continued use of our platform after changes take effect constitutes acceptance of the updated policy.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us via the support channels provided on our platform.