Privacy Policy
Draft — not the final agreement. The published Terms and Privacy Policy land with the marketing site (M7-T7). What is below describes how the service behaves today; it has not been through legal review, and it is here so the consent checkbox links to something real rather than to a missing page.
What the service stores today: the email address and profile details your sign-in provider gives us, the image you upload, every file derived from it, and a record of the credits spent and granted on your account. Uploads are held in object storage and reached through short-lived signed links.
Image is sent to an image model only when you turn on AI clean-up for a design. With it off, the pipeline is deterministic and your image is never sent to a third-party model.
Deleting a design purges the source image and everything derived from it, and later reads of that design return a “gone” response. An append-only audit trail keeps the fact that the deletion happened, without the content.