Privacy

This draft describes what the beta is built to store. It is not a finished privacy notice.

Account data: email, display name, a password hash in the local demo or a Supabase auth record, and the time you confirmed you are 18 or older.

Studio data: prompts, model, credit ledger entries, job status, and the image file. Public gallery images and prompts are visible after the hold.

Processors, when configured: Supabase (accounts and database), Cloudflare R2 (image files), fal.ai (generation), Stripe (payments, off in beta), Plausible (page analytics, only if the script domain is set).

The operator is Suraksha Pax SA, Geneva. [Add the privacy contact, retention periods, legal bases under the FADP and GDPR, and international transfer notes before launch.]