Privacy notice
Product policy · Updated October 2, 2026
Information we process
We process your account details, login sessions, images, prompts, references, project versions, task status, credit ledger and payment references to operate the service. Customer-support messages include the contact details and information you choose to send. Waffo handles checkout; our application keeps transaction and subscription records rather than collecting your full payment-card number.
When an image leaves your browser
Guest crop, rotate, flip, resize and format conversion run locally. A temporary canvas draft is stored in your browser so sign-in can return you to your work. When you sign in and save a project or request an AI task, files are uploaded to private storage and processed as needed. Do not use a shared browser for sensitive work without clearing its site data afterward.
Service providers
The service uses APIMART for language and image models, fal.ai for subject segmentation, SEEAPI for content checks, Waffo for payments, and configured hosting, database, file-storage and email services. A provider receives the inputs needed for its part of the request, which can include images and prompts. Provider retention and processing are subject to their own terms; we do not promise immediate deletion from every third-party system.
Private files and temporary access
Projects are private to their account. The application authorizes file access and issues temporary signed links for downloads or model processing. Anyone holding such a link can use it until it expires, so do not share links to private files. File URLs and secrets are not intended for public logs or marketing pages.
Retention and deletion
Saved project files remain until you delete them or delete your account, subject to service operation and storage limits. Deleted projects stay recoverable for seven days and count toward storage during that period. After that window, cleanup removes files that no remaining project or version uses. Temporary intermediate files have shorter cleanup schedules. Payment, credit and operator-audit records are kept separately from creative files for accounting, disputes and service integrity; the production retention schedule must meet applicable obligations.
One-time signup credits
We retain a keyed, normalized identity fingerprint and its claim date to prevent the same identity from repeatedly claiming signup credits after deletion and re-registration. This does not retain deleted artwork. The fingerprint is still treated as personal data, not as anonymous information. We also use a keyed combination of network and browser signals to detect repeated registrations. Suspicious or unverifiable signup attempts may require email verification before welcome credits are released. Sharing a network alone does not disqualify you. These signup assessments are removed when account deletion is finalized; the separate one-time credit claim remains for duplicate prevention.
Account requests
You can manage your profile, subscription and project deletion in your account. Account restoration requires identity verification and is available only during the seven-day window. Contact support for data-access or correction requests that the account controls do not cover. We assess such requests under the rules that apply to your account and location.
Contact
[email protected] You can also use the contact form.