Privacy Policy

Controller and contact

Iryna Priadka is the controller responsible for the personal data described in this policy.

Data we process

We process account identifiers, uploaded photos and videos, generated media, job status and timestamps, credit ledger entries, purchase records, support requests, generation consent selections, safety decisions, artifact hashes, content-marking verification and limited technical data needed to prevent abuse.

Purposes and legal bases

We process account, upload, generation, delivery and credit data because it is necessary to provide the service you request and perform our contract with you. We process purchase and accounting records to perform the contract and comply with tax, accounting, consumer-protection and payment obligations. We process limited security, fraud-prevention, service-integrity, dispute and support data for our legitimate interests in protecting users, operating a reliable service and establishing or defending legal claims. Where applicable law requires consent for a specific activity, we ask for it separately and you may withdraw it prospectively.

Optional product analytics

If you choose “Analytics only” or “Accept all,” we load Google Tag Manager and use Google Analytics to understand visits, creation-funnel steps, feature use, aggregate performance, technical error categories and confirmed purchase amounts. Google Analytics may process first-party identifiers, approximate location, browser and device information, and activity on the service. Our product events do not include your uploaded or generated media, filenames, private media links, email address, support text, authentication tokens or raw account ID. Advertising storage, advertising user data and advertising personalization stay disabled unless you separately choose “Accept all.”

Analytics is off by default and Google tags are not loaded before you grant analytics consent. You can refuse without losing service functionality and can change your choice at any time through “Privacy settings.” Your consent choice is stored on this device for up to 180 days. Withdrawing consent stops future optional analytics collection on this device; it does not erase information already processed, but you may contact us about applicable data rights.

If you choose “Accept all,” we additionally enable advertising measurement. For Google, we enable advertising signals (advertising storage, advertising user data and advertising personalization) and configure the Google Ads conversion tag. For Meta, we load the Meta Pixel, which reports visits, sign-ups and confirmed purchases so Meta Platforms Ireland Limited can measure and improve our advertising on Facebook and Instagram; for the collection and transmission of this event data we and Meta act as joint controllers, and Meta’s further processing is governed by its own privacy policy. Google and Meta may set advertising cookies (such as _fbp) and process advertising identifiers for that measurement. The Pixel never receives your media, filenames, email address or private links. Advertising cookies are optional, off by default and never required to use the service; you can withdraw this choice at any time through “Privacy settings,” which stops future advertising signals on this device.

Recipients and providers

Private media is delivered through time-limited links. Raw provider output is held in a private quarantine area until required content marking passes. Authentication, hosting, storage, AI-generation, payment, content-marking, security and support providers receive only the information required for their role. Advertising and measurement partners (Google, Meta) receive event data only if you grant advertising consent. Professional advisers and public authorities may receive data where necessary to comply with law or establish, exercise or defend legal claims. We do not sell uploaded likenesses or use them to train a public face model.

International transfers

Some service providers may process data outside the European Economic Area. Where required, we rely on an applicable adequacy decision or contractual safeguards such as the European Commission's Standard Contractual Clauses, together with supplementary measures where appropriate. You may request information about the safeguards relevant to your data through the contact form.

Retention and deletion

We retain uploaded and generated media, generation records and support evidence only for as long as needed to provide and secure the service, complete delivery, investigate failures and resolve disputes. Retention is determined by job state, account status, unresolved support, fraud or safety issues, provider recovery needs and legal-hold obligations. Rejected and unbound media is queued for earlier removal. You can delete your account and associated media from Account. Restricted transaction, accounting, chargeback, fraud-prevention and legal-claim records may remain for the applicable statutory or limitation period, without uploaded media where it is no longer required.

Your rights

Subject to applicable conditions, you may request access, correction, deletion, restriction, objection and portability, and may withdraw consent where processing relies on consent. You may delete your account or use the privacy and support form to exercise a right. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection or the supervisory authority in the EU or EEA country where you live or work. Providing account, payment and source-media data is necessary to use the corresponding service; without it, we cannot authenticate the account, complete a purchase or generate and deliver requested media.

Automated processing

Automated systems check technical validity, generation eligibility, abuse signals and content-policy conditions. They may prevent an upload or generation from proceeding, but they are not used to make decisions that produce legal or similarly significant effects about you. You may contact support if you believe an automated check was incorrect.