Privacy Policy

Account data: your name, email address and a bcrypt hash of your password. We never store your password in a readable form.

Content data: the images you upload, the images generated from them, and the text you enter (custom instructions, campaign briefs, ad copy).

Usage data: credit transactions, render history, and standard server logs including IP address, for security and abuse prevention.

We do not use third-party advertising or analytics trackers, and we do not sell personal data.

To provide the service you asked for (performing contract): storing your files, generating images, metering credits.

To keep the service secure and prevent abuse (legitimate interests).

To meet legal and accounting obligations.

AI providers. To generate an image, the source image and prompt are sent to the configured AI provider. To generate ad copy, the campaign brief is sent to Anthropic (Claude). These providers process the data to return a result.

Infrastructure providers used to host the application and store files.

Nobody else, unless we are legally required to disclose.

Generated images are retained for 7 days by default and then purged.

Source uploads are kept while the associated render exists, and are deleted when you delete the render.

Account records and credit ledger entries are kept while your account is open, and afterwards only as long as needed for accounting and legal purposes.

Uploads and renders are stored outside the public web root and are served only through an authenticated route that checks ownership on every request. A file is readable by a third party only if you explicitly publish it.

Passwords are hashed with bcrypt. Sessions use signed, HTTP-only cookies.

Depending on where you live you may have rights to access, correct, export, delete or restrict processing of your personal data, and to object to processing.

To exercise any of these, contact {{CONTACT_EMAIL}}. You can delete individual renders yourself at any time from your gallery.