Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account information: Name, email address, and password when you register
• Profile information: Profile photo, display name, and preferences you set
• Payment information: Billing details processed by Stripe (we do not store full card numbers)
• Content inputs: Text prompts, reference images, and other creative inputs you submit for AI generation
• Generated content: Images, videos, and other media created through the Service
• Communications: Messages you send to us via email or support channels

1.2 Information Collected Automatically

• Usage data: Features used, generation history, credit consumption, and interaction patterns
• Device information: Device type, operating system, browser type, and screen resolution
• Log data: IP address, access times, pages viewed, and referring URLs
• Cookies and similar technologies: Session cookies for authentication and analytics cookies for service improvement

1.3 Information from Third Parties

• Authentication providers: If you sign in with Google or Apple, we receive your name and email from those services
• Payment processor: Stripe provides us with transaction confirmations and subscription status
• Operational notifications: When you sign up, a notification containing your name and a redacted form of your email address may be sent to our team's internal messaging channel (Telegram) so we can monitor new registrations. This is used only for operational awareness and abuse monitoring
• YouTube (optional): If you connect a YouTube account to publish content, we store the OAuth access and refresh tokens needed to upload on your behalf. We request only the upload scope, and tokens are revoked and deleted when you disconnect or delete your account

1.4 Biometric and Facial Information

If you use features that register a character from a selfie or photo (e.g. Cast registration, subject segmentation), you provide images that contain facial features. We use these solely to generate and edit your requested content. To do so, these images are transmitted to third-party AI processors (our image-generation and image-segmentation providers — see Section 3) that perform the generation or segmentation on our behalf. We do not use facial data for identification, and we do not sell it. Facial source images and derived character media are deleted when you delete your account or the associated character.

2. How We Use Your Information

We use collected information for the following purposes:

• Provide the Service: Process your prompts through AI models, store your generated content, manage your account and credits
• Improve the Service: Analyze usage patterns to optimize features, fix bugs, and develop new capabilities
• Billing and support: Process payments, manage subscriptions, and respond to your inquiries
• Communication: Send transactional emails (account verification, password reset, billing receipts) and, with your consent, marketing communications
• Safety and compliance: Detect and prevent fraud, abuse, and violations of our Terms of Service
• Legal obligations: Comply with applicable laws and respond to legal requests
• Public showcase (free tier): On free accounts, the text prompt you submit for a generation may be displayed publicly alongside featured or community content. Do not include personal or sensitive information in prompts on a free account. Paid tiers are not subject to public prompt display

2.1 AI Content Processing

Your text prompts and reference images are transmitted to third-party AI model providers solely for the purpose of generating content you request. We do not use your prompts or generated content to train our own AI models. Third-party providers may have their own data processing practices — see Section 3 for details.

3. Third-Party Services

We share information with the following categories of third-party service providers, each with their own privacy policies:

4. Data Storage and Retention

4.1 Storage

Your data is stored on servers operated by Supabase (hosted on AWS) and Vercel, primarily in the United States. Generated media files are stored in Supabase Storage with access controlled by Row Level Security policies tied to your account.

4.2 Retention

• Account data: Retained while your account is active and for 30 days after deletion
• Generated content: Retained while your account is active; deleted upon account deletion
• Usage logs: Retained for up to 12 months for analytics and debugging
• Payment records: Retained as required by tax and financial regulations (typically 7 years)
• Waitlist data: Email addresses retained until the waitlist is closed or you request removal

5. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption in transit (TLS/HTTPS) for all data transmission
• Encryption at rest for stored data
• Row Level Security (RLS) policies ensuring users can only access their own data
• Secure authentication with hashed passwords and optional social sign-in
• API keys stored in encrypted secrets management, never exposed to clients

No system is completely secure. While we strive to protect your data, we cannot guarantee absolute security and are not responsible for unauthorized access resulting from factors beyond our reasonable control.

6. Your Rights and Choices

6.1 Access and Portability

You may access your account data, generation history, and stored content through the Service at any time. You may export your generated media from the library.

6.2 Correction

You may update your account information through your profile settings.

6.3 Deletion

You may request deletion of your account and associated data by contacting privacy@fxi.studio or through your account settings. We will process deletion requests within 30 days, except where retention is required by law. Account deletion removes your profile, generated content, and uploaded media, and deletes your customer record (including billing email) at our payment processor. Certain anonymized operational, legal, and safety logs are retained as described in Section 4.2.

6.4 Marketing Opt-Out

You may unsubscribe from marketing emails at any time using the unsubscribe link in any marketing email. Transactional emails (billing, security alerts) cannot be opted out of while your account is active.

6.5 Cookie Controls

You may control cookies through your browser settings. Disabling cookies may affect the functionality of the Service, particularly authentication.

7. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know: Request disclosure of the categories and specific pieces of personal information we collect
• Right to delete: Request deletion of your personal information
• Right to opt-out: Opt out of the "sale" of personal information (we do not sell personal information)
• Non-discrimination: We will not discriminate against you for exercising your rights

To exercise these rights, contact us at privacy@fxi.studio or use the mechanisms described in Section 6.

8. International Users

The Service is operated from the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Service, you consent to this transfer.

For users in the European Economic Area (EEA) or United Kingdom, we process personal data based on: (a) your consent, (b) contractual necessity to provide the Service, (c) our legitimate interests in operating and improving the Service, and (d) compliance with legal obligations.

9. Children's Privacy

The Service is not directed to children under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe a child has provided us with personal information, please contact us at privacy@fxi.studio.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service and updating the "Last updated" date. For significant changes, we may also notify you by email. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

11. Contact Us

For questions or concerns about this Privacy Policy or our data practices, contact us at:

Fueled by Imagination, LLC
Email: privacy@fxi.studio