Privacy Policy

1. Who can use the service

GenAI Studio is available by invitation only. Accounts are created by the operator and there is no public sign-up. The service is not intended for anyone under 18.

2. Information we handle

• Account information: your email address and a password, which our authentication provider stores only as a salted hash.
• Content you provide: text prompts, images, audio and video files you upload as inputs or references, and project names and descriptions.
• Generated content: the images, audio and video the models produce for you, together with the settings used.
• Usage records: for each generation, the model used, who ran it, when, how long it took, the GPU time used and its estimated cost.
• Technical data: standard connection data, such as IP address and browser type, which our hosting providers process to deliver the site and keep it secure.

3. How we use information

We do not sell your information, we do not use it for advertising, and we do not use your content to train AI models. If you use a persona training feature, the resulting model file is created from images you supply and is stored for use within this service.

• To run the generations you request and show you the results.
• To store, display, download and delete your generations and saved references.
• To track cost and enforce spending limits.
• To keep the service secure, fix problems, and contact you about the service when needed.

4. Service providers that process data

These providers process data on our behalf under their own terms and privacy policies. Data may therefore be processed in countries other than your own.

• Supabase: authentication, the database, and file storage.
• Modal: serverless GPU computing that runs the models. Your inputs are processed in temporary containers.
• Vercel: hosting of the website.
• Hugging Face: the source of open model weights. None of your content is sent to it.
• Google Drive: optional storage, described in the next section.

5. Google Drive and Google user data

The operator can connect the service to a Google Drive account so that generated files (and, if enabled, their input files) are stored there instead of in Supabase storage. This uses the Google Drive permission called drive.file, which lets the service see only the files and folders that it creates itself, inside a folder named AI Service. It cannot read, list or change any other file in the Drive account.

Google data is used only to store, show, download and delete the files the service created, as part of the features you use. It is not used for advertising, not sold, and not transferred to anyone else except as needed to provide those features, to comply with the law, or to keep the service secure. People do not read this data unless you ask us to, it is needed for security or support, or the law requires it.

The service's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. The Google access can be withdrawn at any time at myaccount.google.com/permissions.

6. Cookies and local storage

We use only what is needed to keep you signed in and to remember two preferences: the session cookies and storage set by Supabase for authentication, and, in your browser, the backend you selected and whether the sidebar is collapsed. We do not use advertising or analytics cookies or trackers.

7. How long we keep information

Generations and saved references are kept until you delete them. Deleting a generation permanently removes its stored files, including saved references, from storage and marks its record as deleted. A minimal record without the files may remain so that cost history stays accurate. Account records are kept while the account exists. Our providers may keep backups for a limited time.

8. Security

Data is sent over encrypted connections, access requires a login, and credentials for connected services are kept on the server side and are never sent to your browser. No system is perfectly secure, so please keep your password private and use a strong, unique one.

9. Your choices and rights

• You can delete your generations yourself in the app.
• You can ask for a copy of your information, a correction, or deletion of your account and data by emailing helpinghand053@gmail.com.
• You can change your password in Settings at any time.

10. Changes to this policy

We may update this policy as the service changes. The date at the top shows when it was last updated, and continuing to use the service after a change means you accept the updated policy.