Privacy Policy
How we collect, use, and protect your information
Last Updated: December 29, 2024
Information We Collect
When you create an account, we collect your email address and authentication information through our secure authentication provider (Supabase).
When you generate images, we store your prompts, generated images, and related metadata to provide the service and improve our AI models.
We collect usage analytics (page views, feature usage) to improve our service. This data is anonymized where possible.
We use cookies and similar technologies for authentication, preferences, and analytics.
How We Use Your Information
To provide and maintain our AI character generation service.
To authenticate your account and manage your credits and subscriptions.
To store your generated images and allow you to access your creation history.
To improve our AI models and service quality through analysis of usage patterns.
To communicate with you about service updates, security alerts, and support issues.
To process payments through our payment processor (Stripe).
Data Storage and Security
Your data is stored securely using industry-standard encryption on servers provided by Supabase (a SOC 2 Type II certified provider).
Generated images are stored on our servers and may be used to improve our AI models unless you opt out.
We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, or destruction.
Payment information is processed by Stripe and we do not store your credit card details on our servers.
Data Sharing and Third Parties
We do not sell your personal information to third parties.
We share data with service providers who help us operate our service: Supabase (database and authentication), Stripe (payment processing), and analytics providers.
We may disclose information if required by law or to protect our rights and safety.
Generated images may be displayed publicly if you choose to share them or participate in community features.
Your Rights and Choices
You can access, update, or delete your account information at any time through your account settings.
You can request a copy of your data or request deletion of your account by contacting us.
You can opt out of marketing communications while still receiving essential service emails.
EU users have additional rights under GDPR including data portability and the right to object to processing.
You can clear cookies and disable analytics through your browser settings, though this may affect functionality.
Data Retention
We retain your account information for as long as your account is active or as needed to provide services.
Generated images are retained for 90 days unless you delete them earlier or maintain an active subscription.
After account deletion, we may retain certain information for legal compliance, fraud prevention, and dispute resolution.
Analytics data is typically retained for 24 months in aggregated form.
Children's Privacy
Our service is not intended for users under 13 years of age.
We do not knowingly collect personal information from children under 13.
If we become aware that we have collected data from a child under 13, we will delete it promptly.
Parents or guardians who believe we may have collected information from a child should contact us immediately.
International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence.
We ensure appropriate safeguards are in place for international data transfers in compliance with applicable laws.
By using our service, you consent to the transfer of your information to our facilities and service providers globally.
Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements.
We will notify you of significant changes by email or through a prominent notice on our website.
Your continued use of the service after changes constitutes acceptance of the updated policy.
We encourage you to review this policy periodically.
Contact Us
If you have questions about this privacy policy or our data practices, please contact us at: [email protected]
For EU users: You have the right to lodge a complaint with your local data protection authority.
We will respond to your privacy-related inquiries within 30 days.
创作数据如何被处理
我们理解创作者会进行大量迭代。隐私设计重点是可预期、最小化保留和可追踪:账户数据与创作数据尽量分离,避免不必要暴露。
当你生成图片或视频时,系统会保留必要元数据用于历史记录、额度核算、问题排查与账户支持,不默认公开这些内容。
- • 生成元数据仅用于产品运行与支持。
- • 公开与否由用户侧可见性设置控制。
- • 上传素材会经过安全与合规检查。
- • 运维日志用于防滥用与稳定性保障。
安全原则与用户控制
我们在认证、存储和接口访问上采用分层控制。通过权限校验和服务端验证降低越权访问风险。
你也可以通过控制台管理资产与可见性偏好;若涉及数据请求,请通过官方支持渠道并完成身份核验。
- • 账户相关操作需要认证身份。
- • 受保护资源按角色与归属校验。
- • 媒体处理链路采用传输与存储保护。
- • 数据请求通过官方支持通道处理。