← Back to {{SITE_NAME}}

Privacy Policy

Last updated: December 16, 2025

1. Introduction

{{COMPANY_NAME}} ("we", "us", "our") operates {{SITE_NAME}} (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password (encrypted)
• Payment Information: Processed securely by Revolut; we do not store full card details
• Content: Text prompts you submit for image generation
• Communications: Messages you send to our support team

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent on the Service
• Device Information: IP address, browser type, operating system
• Cookies: Session cookies for authentication and preferences

3. How We Use Your Information

Purpose	Legal Basis (GDPR)
Provide and maintain the Service	Contract performance
Process payments and subscriptions	Contract performance
Send service-related communications	Legitimate interest
Improve and optimize the Service	Legitimate interest
Prevent fraud and abuse	Legitimate interest
Comply with legal obligations	Legal obligation

4. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Revolut (payments), cloud hosting providers
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger or acquisition

We do NOT sell your personal information to third parties.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. After account deletion:

• Account data: Deleted within 30 days
• Generated images: Deleted within 30 days
• Payment records: Retained for 7 years (legal requirement)

6. Your Rights (GDPR)

Under UK GDPR, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we use your data
• Portability: Receive your data in a portable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Where processing is based on consent

To exercise these rights, contact us at privacy@{{DOMAIN}}

7. Data Security

We implement appropriate technical and organizational measures to protect your data:

• SSL/TLS encryption for data in transit
• Encrypted password storage (bcrypt)
• Regular security assessments
• Access controls and authentication

8. International Transfers

Your data may be processed in countries outside the UK. When this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK ICO.

9. Cookies

We use essential cookies for:

• User authentication and session management
• Security and fraud prevention
• Remembering your preferences

You can control cookies through your browser settings, but disabling them may affect functionality.

10. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Service. Your continued use after changes constitutes acceptance.

12. Contact Us

13. Supervisory Authority

If you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: https://ico.org.uk

© 2026 {{COMPANY_NAME}} (Company No. {{COMPANY_NUMBER}}). All rights reserved.