What we process
The service processes your account identity, uploaded media, generation prompts, task status and credit transactions. Model and moderation providers receive the input needed to process your task. Google provides basic sign-in identity through Supabase, whose account database is in Northern Virginia, United States. Private media storage uses Cloudflare R2. Generation and moderation use fal when enabled. These services may process data across regions. Files selected in the current local preview stay in your browser and are not uploaded.
Media retention
Inputs normally expire after 24 hours; active task inputs remain available until the task finishes. Free outputs are retained for 7 days and paid outputs for 30 days. Download links expire after 5 minutes. Requested media deletion stops new links and queues file removal within 24 hours; an existing signed link can remain valid until it expires.
Optional analytics
Analytics are disabled until you opt in. Browser events are limited to starting a tool, viewing a quote and starting checkout. We do not include prompts, email addresses or media URLs in these events.
Account deletion
You can request account deletion from the billing page after a recent sign-in. Active tasks must finish first. Account and media removal is separate from the retention of financial records needed for accounting. Merchant jurisdiction and statutory retention periods must be set before taking live payments.