Privacy Policy

1. Information We Collect

To provide the Service, we collect the following information:

• Account information: registered email and the password used for sign-in (stored only as an irreversible hash);
• Content you upload and generate: photos you upload, text you enter, and AI-generated images;
• Transaction information: credit top-up records and transaction logs;
• Usage and device information: access logs, browser type, and other basic information used for security and rate limiting.

2. How We Use Information

• Provide, maintain, and improve image generation and related features;
• Process credit top-ups and account management;
• Protect account and system security, prevent abuse and fraud (e.g. rate limiting);
• Communicate with you about the Service when consent or law requires.

3. Payment Information

Payments are processed by the third-party payment provider Creem. We do not collect or store your full payment credentials such as credit card numbers or bank accounts; such data is handled by Creem under its privacy policy. See Creem's policy for details.

4. Data Storage

Your account information, generation records, and credit logs are stored in a cloud PostgreSQL database (Neon); your uploaded images and generation results are stored in object storage (Alibaba Cloud OSS). These infrastructures reside in their respective data centers and follow their security standards.

5. Third-Party Services

The Service relies on the following third parties, each handling data under its own privacy policy:

• Payment processing: Creem;
• Authentication and sessions: NextAuth (database-backed sessions);
• Rate limiting and caching: Upstash Redis;
• Image generation: third-party AI model providers (e.g. Volcengine, apimart).

6. Cookies and Similar Technologies

We use necessary cookies to maintain your login session. We do not use cookies for cross-site ad tracking. You can manage cookies through your browser settings, but disabling them may affect login functionality.

7. Data Retention

We retain your data for as long as necessary to provide the Service. After account deletion, we will delete or anonymize your personal information within a reasonable period, unless retention is required by law.

8. Your Rights

Where permitted by applicable law, you have the right to access, correct, or delete your personal information, and to restrict or object to certain processing activities. To exercise these rights, contact us via the support email at the end of this policy.

9. Minors

The Service is not intended for anyone under 16 (or the corresponding legal age in your jurisdiction). If we learn that an underage user has provided personal information, we will take steps to delete it and freeze the account.

10. Data Security

We take reasonable technical and administrative measures to protect your personal information, including encrypted transmission, access control, and key management. However, no internet transmission is fully secure, and we cannot guarantee absolute security.

11. Policy Changes

We may update this Privacy Policy. Updates will be posted on this page with an updated "Last updated" date. For material changes, we will notify you via prominent in-service notices or email.

12. Contact Us

If you have any questions or requests about this Privacy Policy, contact us via the support email: