Privacy Policy

1. Information We Collect

We collect the following types of information:

• Account information — name, email address, and profile picture provided through Google OAuth sign-in.
• Generated content — prompts you submit and images generated through the Service.
• Usage data — pages visited, features used, and interaction patterns collected via analytics.
• Device information — browser type, operating system, and IP address.

2. How We Use Your Information

• To provide, maintain, and improve the Service
• To authenticate your identity and manage your account
• To process image generation requests
• To analyze usage patterns and improve user experience
• To communicate important updates about the Service
• To enforce our Terms of Service and prevent abuse

3. Data Storage & Security

Your data is stored securely using industry-standard encryption and access controls. We use Supabase for authentication and database storage, which provides enterprise-grade security including encryption at rest and in transit. While we take reasonable measures to protect your data, no method of transmission or storage is 100% secure.

4. Third-Party Services

We use the following third-party services to operate:

• Google OAuth — for authentication. Subject to Google's Privacy Policy.
• Supabase — for database and authentication infrastructure.
• Fal.ai — for AI image generation processing.
• PostHog — for product analytics and usage tracking.

Each third-party service has its own privacy policy governing how they handle your data.

5. Data Retention

We retain your account data and generated content for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law. Anonymized analytics data may be retained indefinitely.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Request a copy of your data in a portable format

To exercise any of these rights, contact us at the email below.

7. Children's Privacy

The Service is not intended for anyone under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a person under 18, we will take steps to delete that information promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.

9. Contact

If you have questions about this Privacy Policy, please contact us at privacy@tripleclone.com.