Privacy Policy

Last updated: April 2025

1. Who we are

{{BRAND_NAME}} ("we", "our", "us") operates the website yourdomain.com. We provide an AI-powered image generation service. If you have questions about this policy, contact us at support@yourdomain.com.

2. What data we collect

We collect the following categories of data when you use our service:

  • Account data: Your email address and display name when you register. If you sign up with Google, we receive your name and email from Google.
  • Photos you upload: Images you upload to generate AI photos. These are used solely to process your generation request.
  • Generated images: The images produced by the AI based on your prompts and uploads.
  • Payment data: Billing is handled by Stripe. We do not store your card number or full payment details. We receive transaction confirmations and subscription status from Stripe and RevenueCat.
  • Usage data: Logs of feature usage, credit consumption, and generation history to operate the service and prevent abuse.
  • Analytics: We use Vercel Analytics and PostHog to understand how users interact with our site.

3. How we use your data

We use your data to:

  • Provide, operate, and improve the {{BRAND_NAME}} service
  • Process AI image generation requests
  • Manage your account, credits, and subscription
  • Send transactional emails (account confirmation, receipts)
  • Prevent fraud and abuse
  • Comply with legal obligations

We do not sell your personal data to third parties. We do not use your uploaded photos to train AI models.

4. Data storage and security

Your account data and credit balances are stored in Supabase (PostgreSQL). Uploaded images are processed via fal.ai and are not stored permanently on our servers beyond the duration needed to complete your generation. Generated images are returned to you directly.

We use industry-standard security measures including encrypted connections (HTTPS/TLS), access controls, and secure authentication.

5. Third-party services

We use the following third-party services to operate {{BRAND_NAME}}:

  • Supabase - authentication and database
  • fal.ai - AI image generation processing
  • Stripe - payment processing
  • RevenueCat - subscription management
  • Vercel - hosting and infrastructure
  • PostHog - product analytics

6. Your rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate data.
  • Deletion: Request deletion of your account and all associated data.
  • Portability: Request an export of your data in a machine-readable format.
  • Objection: Object to certain processing of your data.

To exercise any of these rights, contact us at support@yourdomain.com. We will respond within 30 days.

7. Cookies

We use essential cookies for authentication (session management via Supabase). We do not use advertising cookies or sell cookie data.

8. Children's privacy

{{BRAND_NAME}} is not directed at children under the age of 13. We do not knowingly collect personal data from children.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the date at the top of this page.

10. Contact

If you have any questions about this Privacy Policy, contact us at support@yourdomain.com.