Privacy

Email address for passwordless sign-in, receipts and account notices; one-time code hashes; session and private-link hashes; IP/device-derived rate-limit hashes; prompts, reference images, saved outputs and credit/order records.

We do not store passwords. We do not sell personal data. Private access tokens are stored as hashes and reconstructed server-side; access links use a URL fragment so the token is not sent in normal page requests.

Resend delivers authentication, receipt and notification email. Paddle processes payments. Cloudflare Turnstile verifies code requests. Alibaba Cloud Model Studio Qwen receives the prompt and any reference images needed to generate the requested image. Account records and private image files are stored on our servers.

Each processor receives only what is needed for its function, subject to its own terms and security controls.

Saved outputs are retained privately for 15 days from generation. Reference uploads and abandoned drafts are cleaned up. Credit and payment records are retained for accounting, fraud prevention and dispute handling.

You can request access, correction or deletion of eligible account data, subject to legal retention, through the support email. Private results can be deleted from My Creations without a credit refund.