1. Introduction
The Great ("we", "us", or "our") operates AI Scene Studio ("the Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using the Service, you consent to the data practices described in this policy.
2. Information We Collect
2.1 Information You Provide
- Account Information: Email address and encrypted password when you create an account.
- Payment Information: Payment details processed securely through PayPal. We do not store your credit card or PayPal account information directly.
- Uploaded Images: Images you upload as input for AI generation. These are processed temporarily and not stored permanently on our servers.
- Prompts and Settings: Text prompts and configuration settings you use for image generation.
2.2 Information Collected Automatically
- Usage Data: Information about how you interact with the Service, including features used and generation history.
- Device Information: Browser type, operating system, and device identifiers.
- Log Data: IP address, access times, and pages viewed.
- Cookies: Authentication tokens and session data necessary for the Service to function.
3. How We Use Your Information
- To provide, operate, and maintain the Service.
- To process your image generation requests using AI technology.
- To manage your account and process payments.
- To track your image credit balance and usage.
- To improve and optimize the Service.
- To communicate with you about your account or the Service.
- To detect and prevent fraud, abuse, or security incidents.
- To comply with legal obligations.
4. AI-Generated Content and Data
- Images you upload are sent to third-party AI services (Google Gemini) for processing.
- Uploaded images are used solely for generating the requested output and are not retained after processing.
- Generated images are temporarily stored for you to download and are not used to train AI models.
- We do not review or monitor the content of your generated images unless required for abuse prevention or legal compliance.
5. Data Sharing and Disclosure
We do not sell your personal information. We may share your information with:
- Service Providers: Third-party services that help us operate the platform (e.g., hosting, payment processing, AI processing).
- Legal Requirements: When required by law, regulation, or legal process.
- Safety: To protect the rights, property, or safety of our users or the public.
- Business Transfers: In connection with a merger, acquisition, or sale of assets.
6. Third-Party Services
The Service integrates with the following third-party services:
- Google Gemini API: For AI image generation processing.
- PayPal: For secure payment processing.
- Vercel: For hosting and content delivery.
Each third-party service has its own privacy policy governing their use of your data. We encourage you to review their respective privacy policies.
7. Data Security
- Passwords are securely hashed using industry-standard encryption (bcrypt).
- Authentication is managed through secure HTTP-only cookies.
- All data transmission is encrypted using HTTPS/TLS.
- We implement reasonable security measures to protect your information, but no method of transmission over the Internet is 100% secure.
8. Data Retention
- Account information is retained as long as your account is active.
- Uploaded images are processed in real-time and not permanently stored.
- Generated images are available for download during your session and may be stored temporarily.
- Payment records are retained as required for accounting and legal purposes.
- You may request deletion of your account and associated data at any time.
9. Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate personal data.
- Deletion: Request deletion of your personal data.
- Portability: Request transfer of your data in a machine-readable format.
- Objection: Object to certain processing of your personal data.
To exercise any of these rights, please contact us using the information provided below.
10. Children's Privacy
The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.
11. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using the Service, you consent to the transfer of your information to these countries.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically. Continued use of the Service after changes constitutes acceptance of the revised policy.