How we collect, use, and protect your information
Last Updated: December 29, 2024
When you create an account, we collect your email address and authentication information through our secure authentication provider (Supabase).
When you generate images, we store your prompts, generated images, and related metadata to provide the service and improve our AI models.
We collect usage analytics (page views, feature usage) to improve our service. This data is anonymized where possible.
We use cookies and similar technologies for authentication, preferences, and analytics.
To provide and maintain our AI character generation service.
To authenticate your account and manage your credits and subscriptions.
To store your generated images and allow you to access your creation history.
To improve our AI models and service quality through analysis of usage patterns.
To communicate with you about service updates, security alerts, and support issues.
To process payments through our payment processor (Stripe).
Your data is stored securely using industry-standard encryption on servers provided by Supabase (a SOC 2 Type II certified provider).
Generated images are stored on our servers and may be used to improve our AI models unless you opt out.
We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, or destruction.
Payment information is processed by Stripe and we do not store your credit card details on our servers.
We do not sell your personal information to third parties.
We share data with service providers who help us operate our service: Supabase (database and authentication), Stripe (payment processing), and analytics providers.
We may disclose information if required by law or to protect our rights and safety.
Generated images may be displayed publicly if you choose to share them or participate in community features.
You can access, update, or delete your account information at any time through your account settings.
You can request a copy of your data or request deletion of your account by contacting us.
You can opt out of marketing communications while still receiving essential service emails.
EU users have additional rights under GDPR including data portability and the right to object to processing.
You can clear cookies and disable analytics through your browser settings, though this may affect functionality.
We retain your account information for as long as your account is active or as needed to provide services.
Generated images are retained for 90 days unless you delete them earlier or maintain an active subscription.
After account deletion, we may retain certain information for legal compliance, fraud prevention, and dispute resolution.
Analytics data is typically retained for 24 months in aggregated form.
Our service is not intended for users under 13 years of age.
We do not knowingly collect personal information from children under 13.
If we become aware that we have collected data from a child under 13, we will delete it promptly.
Parents or guardians who believe we may have collected information from a child should contact us immediately.
Your information may be transferred to and processed in countries other than your country of residence.
We ensure appropriate safeguards are in place for international data transfers in compliance with applicable laws.
By using our service, you consent to the transfer of your information to our facilities and service providers globally.
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements.
We will notify you of significant changes by email or through a prominent notice on our website.
Your continued use of the service after changes constitutes acceptance of the updated policy.
We encourage you to review this policy periodically.
If you have questions about this privacy policy or our data practices, please contact us at: [email protected]
For EU users: You have the right to lodge a complaint with your local data protection authority.
We will respond to your privacy-related inquiries within 30 days.
OC Maker is used by solo creators, teams, and studios who often work with iterative drafts. Our privacy approach is built around that reality: we keep data handling predictable, minimize unnecessary retention, and separate account data from creative output wherever possible.
When users generate images or videos, related metadata may be stored to support core product functions such as history, credits tracking, troubleshooting, and account support. We do not position these logs as public content by default.
We use layered security controls for authentication, storage, and API access. Access tokens, permission checks, and server-side validation are used to reduce unauthorized access risk across account and generation workflows.
No security policy can guarantee absolute protection, but we continuously improve controls, monitor incidents, and update safeguards based on practical risk patterns and infrastructure changes.
Users should have practical controls, not just policy text. You can manage account access, review generated assets, and use existing product routes to maintain your own content organization and visibility preferences.
For privacy questions or data requests, contact us through the official support path so we can verify account ownership and process requests safely.
You can review platform terms on Terms of Service, or explore account and product pages such as Dashboard and Contact.