Privacy Policy

1. Information We Collect

• Account: email, password hash, nickname.
• Payment: processed by Stripe; we do not store full card numbers.
• Usage: generation history, prompts, reference images, canvas projects, login times, IP, User-Agent.
• Marketing: UTM parameters (utm_source/medium/campaign/content/term) for registration channel analytics.
• Cookies: session token, preferences (language, theme).

2. How We Use Information

• Provide core features: AI generation, canvas, account management.
• Process payments and issue credits.
• Send transactional email (verification, orders, notices) via Zoho SMTP.
• Fraud prevention, abuse detection, content moderation.
• Analyze channel performance and improve products.

3. Third-Party Sharing

• Stripe: payment processing.
• Zoho SMTP: transactional email.
• Upstream AI model APIs (e.g., Nianhua, WaveSpeedAI): process your prompts and reference images to generate content.
• PostgreSQL / Redis: data storage and queues.
• We do not sell your personal information to anyone.

4. AI Input Data

Your prompts and reference images are sent to upstream AI model providers to generate content. These providers process data under their own privacy policies. We do not actively store reference images beyond what is needed for generation, but generation history is saved per account for your review.

5. Cookies

Essential cookies are used for login and security. You may refuse cookies via browser settings, but functionality may be affected.

6. Security

We use HTTPS, password hashing, access controls, and database encryption. No internet transmission is fully secure; we cannot guarantee absolute protection.

7. Your Rights

• Access, correct, or delete your personal information.
• Export your generation history.
• Withdraw consent or delete your account.
• Contact [email protected] to exercise these rights.

8. GDPR / CCPA

If you are in the EU, UK, California, or other applicable regions, you have rights to access, delete, port, and object to processing. We do not sell personal information as defined by CCPA.

9. Children's Privacy

The Service is not directed to children under 13. If a minor is using it without authorization, contact us for deletion.

10. Policy Changes

This policy may be updated. Material changes will be communicated by email or in-product notice. Continued use constitutes acceptance.

11. Contact

[email protected]