Privacy Policy
What we collect when you generate, why we hold it, how long it stays, and how to get it back or have it deleted.
- Effective
- Jan 1, 2026
- Updated
- Jan 1, 2026
01Who we are
This policy covers the website and the generation platform operated by the company named at the end of this page. Where this policy says "we", it means that company. Where it says "your content", it means the files you upload and the images and videos generated on your account.
02What we collect
We collect four kinds of information, and nothing that is not on this list is collected deliberately.
| Category | Examples | Where it comes from |
|---|---|---|
| Account | Email address, display name, authentication identifiers, language and theme preference, trust status | You, at sign-up and in settings |
| Content | Files you upload as references, prompts and settings you enter, images and videos generated on your account, and the metadata attached to them | You, when you generate |
| Commercial | Credit balance, the ledger of every credit movement, payment records, invoices, and the subscription state of any recurring product | You and our payment processors |
| Technical | IP address, browser and device information, session and error logs, and the aggregate performance metrics that drive the service-status indicator | Automatically, when you use the service |
We do not sell personal data. We do not use your content to train our own models, and we do not license it to anyone else for that purpose.
03Why we hold it, and on what basis
- To run the service you asked for — generating, storing and delivering your content, and keeping your credit balance correct. Basis: performance of a contract.
- To take payment and keep the financial records the law requires us to keep. Basis: contract, and legal obligation.
- To keep the platform safe — detecting abuse, enforcing the content policy, and meeting reporting obligations where they apply. Basis: legitimate interests, and legal obligation.
- To fix things — diagnosing errors, measuring capacity, and understanding which parts of the product fail. Basis: legitimate interests.
- To tell you about the product, where you have asked us to. Basis: consent, withdrawable at any time.
04Who processes it on our behalf
Running a generation means sending your inputs to a model provider. We use a small number of processors, each under a written agreement, and each only for the purpose named.
- Model providers — receive the inputs for a generation you request, and return the output. They do not receive your account identity.
- Hosting and storage — hold your account record, your files and our logs.
- Payment processors — take payment and hold the card or wallet details. We never see or store a full card number.
- Email and messaging — deliver transactional messages such as verification and receipts.
05How long we keep it
| What | How long | Why |
|---|---|---|
| Account record | While the account exists, then deleted on request | To let you log in |
| Generated content and uploads | While the account exists, or until you delete it | It is yours; you decide |
| Credit ledger and payment records | For the statutory financial-records period | Legal obligation — this survives account deletion |
| Moderation and enforcement records | For a defined retention window | Safety, and the right to appeal a decision |
| Technical logs | A short rolling window | Diagnostics and abuse detection |
06Your rights
Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to another provider. You can also withdraw consent where consent is what we relied on.
You can delete your account, and everything generated on it, from your account settings without contacting us. If a legal hold applies to your account, deletion is refused with the reason shown rather than failing silently.
07How it is protected
- Data is encrypted in transit, and at rest in our storage provider.
- Access to production data is limited to the people who need it, and every administrative action against an account is written to an append-only audit record.
- Your content is not readable by other users. Sharing is opt-in and produces a link you control.
- No security is absolute. If a breach affects you and the law requires us to tell you, we will.
09Age
The service is not for anyone under 18. We do not knowingly hold data belonging to a minor, and an account we believe belongs to one is closed and its content removed.
10Changes to this policy
When this policy changes materially we will say so in the product before the change takes effect. The date at the top of this page is always the date of the version you are reading.
Questions about this document
Need help? support@seduca.io