Privacy Policy

Data collection

We collect information you provide directly, including account identifiers, authentication information, prompts, generation settings, uploaded media, support messages, reports, and information you submit during an appeal.

We also collect technical and usage information such as IP address, device and browser information, timestamps, request and error logs, security events, task status, model and workflow selections, and service performance data.

For payments, we may store order identifiers, package details, amounts, currencies, blockchain transaction information, payment status, and credit-ledger entries. We do not need your wallet seed phrase or private key and will never ask you to provide either one.

Purposes

We use information to provide and maintain the service, authenticate users, execute generation requests, store user assets, calculate and settle credits, process payments, provide support, and communicate service-related information.

We also use information to detect fraud and abuse, enforce content and safety rules, investigate incidents, secure accounts and infrastructure, debug failures, measure reliability, and comply with legal obligations.

We process only the information reasonably necessary for these purposes and for other purposes that are disclosed to you or permitted by applicable law.

Processors

We may use service providers for hosting, databases, object storage, networking, authentication, payment processing, model inference, GPU computing, content moderation, security, logging, and operational support.

These providers may process information only to the extent needed to perform services for us, subject to their agreements, security obligations, and applicable law.

Third-party login, payment, or infrastructure services may also process information under their own privacy policies.

Uploaded and generated media

Uploaded and generated media may be transmitted to storage systems, GPU workers, model inference services, and moderation systems as needed to complete your request.

Private uploads and generated media are not automatically published. They become public only when you intentionally use a feature that makes them public or share them yourself.

Automated systems may review prompts, uploads, and outputs for safety and policy enforcement. Authorized personnel may access content when reasonably necessary to investigate abuse, respond to a report or appeal, provide support, troubleshoot a technical issue, or comply with law.

Do not upload personal or sensitive material that you do not have the right to process.

Retention and deletion

We retain account information while your account is active and for a reasonable period afterward when needed for security, dispute resolution, fraud prevention, legal compliance, or financial recordkeeping.

User media and generated assets are retained while needed to provide the features you use and may be deleted when you delete the asset or account, subject to operational, legal, and backup constraints.

When a paid membership expires without renewal, its media retention period is 90 days after membership expiry. A new membership purchase clears the scheduled membership-expiry deletion date. Deletion remains subject to the legal, security and backup exceptions described here.

Temporary processing files and intermediate artifacts may be deleted after processing or after they are no longer needed for reliability and recovery.

Security, moderation, payment, and audit records may be retained longer where necessary to prevent abuse, document transactions, handle appeals, or meet legal obligations.

Deleted information may remain in encrypted backups until those backups expire through the normal backup rotation.

Cross-border processing

Our infrastructure, service providers, and users may be located in different countries. Information may therefore be stored or processed outside the country where you live.

When information is processed across borders, we use reasonable contractual, technical, and organizational safeguards appropriate to the information and the services involved.

User rights

Depending on where you live, you may have rights to request access to personal information, correction of inaccurate information, deletion, restriction of certain processing, withdrawal of consent, or a copy of certain data.

These rights may be limited where we must retain information for security, fraud prevention, legal compliance, financial records, dispute resolution, or the rights of other people.

We may verify your identity before acting on a privacy request to protect your account and data.

Export and deletion

Where product controls are available, you can manage or delete eligible media and account data directly in the service.

You may also request access, correction, export, or deletion through the Contact page.

Account deletion does not require us to delete information that we must retain by law or that is reasonably necessary to prevent fraud, document transactions, protect security, resolve disputes, or maintain integrity of prior enforcement decisions.

If content was previously made public or copied by another person, deleting it from our systems may not remove copies that are outside our control.

Privacy contact

Privacy questions and requests may be submitted through the Contact page. Please provide enough information for us to identify the relevant account and understand the request.

If applicable law gives you a right to complain to a privacy or data-protection regulator, you may exercise that right in addition to contacting us.