Privacy Policy

Optional visitor analytics

After you accept analytics, we use random first-party browser and session identifiers to measure visits, page views, active time, entry pages, referring website names, campaign tags, browser and device categories, and approximate country. We do not link these visitor identifiers to account names or emails. We do not record page query strings, full referral URLs, prompts, uploaded content or form entries.

Visitor analytics is available only to administrators. IP addresses are retained for up to 7 days and other visitor records for up to 90 days, with scheduled deletion. Live activity means a browser has recently sent a visible-page activity signal; it is an estimate and does not identify a person. Country and device details are approximate; an IP address does not prove identity or use of a VPN.

You can decline analytics or withdraw your choice through Cookie preferences in the website footer or account settings. Collection stops and analytics browser identifiers are removed when you decline. We also respect a browser Global Privacy Control signal by disabling optional visitor analytics. Declining does not prevent use of the studio.

Account updates, billing details and contact requests

We store the billing name and address you choose to save and pass them to the payment processor when you open checkout. Email changes use short-lived, hashed verification codes for both addresses; passwords are stored as hashes. Contact forms store your name, email, topic and message in an administrator-only inbox and may send an email notification through our email provider. We use this information to respond to support and sales requests. Do not send passwords or full payment card numbers. Contact [email protected] to request deletion, subject to required recordkeeping.

Information we process

Account information includes your email, name if provided, verification status, authentication records and subscription settings. Passwords are stored as hashes.

Creative information includes prompts, uploaded images, video and audio, references, generated outputs and job metadata such as model, duration, status and token use. Facial images and voice recordings may be sensitive; upload them only with the necessary rights and consent. The studio uses them to fulfill creative instructions, not to determine anyone’s legal identity.

Billing information includes plan, purchase, invoice, payment status, provider identifiers, token grants and expiry dates. Stripe and PayPal process payment credentials directly. We do not store full card numbers or security codes.

Operational information may include IP address, browser/device details, session cookies, error reports and security/audit events. Connected advertising accounts may supply account identifiers, campaign settings and metrics when you connect and use those features.

Why we use it

We use this information to authenticate accounts, perform requested generations, store and retrieve work, process payments, enforce token limits and expiration, provide support, prevent abuse, maintain security and meet legal or accounting obligations.

Where a lawful basis is required, processing is based on performing our contract, compliance with legal obligations, legitimate interests in security and service operation, or consent for optional uses. We do not make employment, credit, housing or other legally significant eligibility decisions from your creative uploads.

Providers and disclosures

When enabled, MaxMind GeoLite Country receives your public IP address to provide approximate country information for account activity and, with analytics consent, website visits. We store country information and lookup status in security records or country information in visitor analytics. We do not send your email, browser user agent, account identifier, password, creative uploads or payment details to GeoLite. This location information does not verify identity, detect proxies or provide a fraud score, and a failed lookup does not prevent signup or sign-in. This product includes GeoLite data created by MaxMind, available from https://www.maxmind.com.

Generation requests and necessary reference media are sent to Runware and the underlying AI provider selected by the tool. Provider rules and processing practices can differ by model. Payment information is sent to Stripe or PayPal when you use that method. Hosting, storage, email and support providers receive only information needed for their functions.

We may disclose information to comply with lawful requests, protect rights and security, or as part of a business transfer subject to appropriate protections. We do not sell your uploaded creative work. We do not use private prompts or uploads to train our own foundation models. This statement does not override the selected third-party provider’s terms; contact support for the applicable provider details before uploading sensitive material.

Cookies and preferences

Essential cookies keep you signed in and protect the service. Local browser storage saves interface preferences and draft prompts. Clearing browser storage can remove drafts saved only on your device.

Optional advertising or cross-site tracking requires the choices and consent applicable in your location. We do not interpret using the studio as consent to optional advertising. You can contact support to withdraw consent or exercise any applicable sale/sharing opt-out, including a legally recognized preference signal.

Retention and security

We retain account and creative records while needed to provide the service, honor deletion requests, resolve disputes and protect security. Temporary uploads may expire earlier according to the tool’s displayed limits. Billing and audit records may be retained for tax, accounting, fraud prevention and legal obligations after an account is closed. Backups may take additional time to age out.

We use access controls, authentication and other safeguards appropriate to the service. No system guarantees absolute security. Do not upload payment credentials, government identifiers, medical records or other highly sensitive documents into a creative prompt.

Your choices and rights

You may request access, a copy, correction or deletion of your personal information by emailing [email protected] from your account email. Depending on your location and applicable law, you may also object to processing, request restrictions, withdraw consent, opt out of sale or sharing, limit sensitive-data use, or appeal a denied request. We may verify identity in a proportionate way and retain records where legally required.

Where California privacy law applies, the categories, purposes and recipients described above also serve as our collection notice. We will not discriminate against you for exercising applicable privacy rights. Authorized agents may contact support with evidence of authority. You may complain to your relevant privacy authority.

International processing and children

Your information may be processed in the United States and other countries where our providers operate. Where required, appropriate contractual or other lawful safeguards govern international transfers.

The service is intended for adults aged 18 and over. We do not knowingly offer accounts to children. Contact us if a child has provided personal information so we can investigate and remove it as appropriate.

Policy updates

We update this policy when processing practices change and provide additional notice where required. Questions or requests: [email protected].