Privacy Policy

We collect the following categories of personal information:

1.1 Account Information. Name, email address, and authentication credentials provided during registration.

1.2 Usage Data. Generation history, prompts, styles used, credits consumed, and interaction with the Service.

1.3 Technical Data. IP address, browser type and version, device identifiers, operating system, and log data.

1.4 Payment Information. We do not store full payment card details. Payment processing is handled by our third-party payment processors, who are contractually obligated to protect your payment data.

We process personal information on the following legal bases, as applicable:

• (a)Performance of a contract: to provide and maintain the Service you have requested;
• (b)Legitimate interests: to improve our products, ensure security, and prevent fraud;
• (c)Legal obligation: to comply with applicable laws and regulations;
• (d)Consent: where we have obtained your explicit consent, which you may withdraw at any time.

We use the information we collect to:

• (a)Provide, operate, and maintain the Service, including processing generations and managing credits;
• (b)Authenticate your identity and secure your account;
• (c)Improve, personalize, and develop new features and functionality;
• (d)Monitor and analyze usage patterns to enhance Service performance;
• (e)Detect, prevent, and address technical issues, fraud, and abuse;
• (f)Communicate with you regarding Service updates, security notices, and support requests;
• (g)Comply with legal obligations and enforce our Terms of Service.

4.1 Prompts. Prompts you submit are processed to generate content and are stored to provide your generation history. We do not use your prompts to train third-party models.

4.2 Generated Content. Assets you generate are stored on our servers to allow retrieval and download. Content you publish to the Public Library becomes publicly accessible as described in our Terms of Service.

4.3 Anonymized Data. We may use aggregated, de-identified data derived from usage for analytics and product development. Such data does not identify you personally.

We do not sell your personal information. We may disclose information to:

• (a)Service providers who process data on our behalf (e.g., hosting, payment processing, analytics), subject to contractual data protection obligations;
• (b)Legal authorities, where required by law, regulation, legal process, or governmental request;
• (c)Successors in the event of a merger, acquisition, or sale of assets, with notice to you where reasonably practicable;
• (d)Other parties with your consent or at your direction.

We retain personal information only for as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:

6.1 Account Data. Retained for the duration of your account's active status.

6.2 Generation History. Retained to provide your history; you may delete individual generations or your entire history at any time.

6.3 Deleted Accounts. Upon account deletion, personal data is removed or anonymized within thirty (30) days, except where retention is required by law.

We implement appropriate technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit, access controls, and secure storage practices. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your jurisdiction, you may have the right to:

• (a)Access a copy of the personal information we hold about you;
• (b)Correct inaccurate or incomplete personal information;
• (c)Request deletion of your personal information;
• (d)Restrict or object to certain processing activities;
• (e)Receive your personal information in a structured, machine-readable format (data portability);
• (f)Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at the address in Section 11. We will respond to verified requests within thirty (30) days.

We use essential cookies required for authentication and security. We may also use privacy-respecting analytics to understand aggregate usage. See our Cookie Policy for further details. You can manage cookies through your browser settings; however, disabling essential cookies will prevent the Service from functioning.

The Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us, and we will take steps to delete such information.

For privacy-related inquiries or to exercise your rights, contact:
XEY Company
privacy@xeycompany.com

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by email. The effective date at the top of this page indicates the last revision. Your continued use of the Service after changes constitutes acceptance of the revised Policy.