Privacy Policy

This Policy covers the Service's website, apps, chat and generation tools, community, storage, billing and support. Third-party websites, models and apps have their own policies.

Account and profile: name, email, password hash, locale, preferences, account state and dated records of legal acceptance.

Service content: prompts, messages, files, inputs and generated outputs you choose to process or store.

Billing: product, amount, currency, transaction and subscription identifiers, credits and billing status.

Security and operations: IP address, request time, session and device information, security events, errors and access logs.

To perform our contract with you (create accounts, authenticate, route prompts, generate output, store files, charge and support you); to comply with tax, accounting and legal obligations; and for legitimate interests such as securing the Service, preventing fraud and abuse, diagnosing failures and improving the Service.

When you use an AI feature, we transmit only the content reasonably necessary to provide it — your prompt, relevant context, attachments and generation settings — to the third-party model or routing provider selected for that request.

We do not use your private prompts, files or outputs to train general AI models.

We disclose only the data needed for a stated purpose to providers that power the Service, including model and routing providers (OpenRouter, fal.ai, Google Gemini, ElevenLabs, Pollinations), our payment Merchant of Record (Paddle.com) and crypto payment processor (NOWPayments), and our hosting provider (Vercel).

We do not sell personal information and do not share it for cross-context behavioural advertising.

Private content is not routinely read by people. Authorised personnel may access the minimum necessary content only for support you request, a specific security or abuse investigation, legal compliance or incident recovery.

We use essential storage for authentication, security and preferences. Optional analytics are used only with consent where required. See our Cookie Policy for details.

We keep account and service content while your account or requested feature is active, and delete or de-identify it after closure when no longer needed. Billing, tax and legal-acceptance records are kept for the periods required by law.

Your information may be processed in countries other than your own, including where our model, payment or infrastructure providers operate. We use appropriate safeguards such as Standard Contractual Clauses for transfers that require them.

We use TLS in transit, authentication, access controls and operational security appropriate to the data and risk. No system is completely secure.

Depending on applicable law, you may request access, correction, deletion, portability or restriction, object to legitimate-interest processing, withdraw consent, and complain to a regulator. To exercise these rights, contact us using the details below.

The Service is not directed to children under 13, and paid services require the legal capacity described in our Terms.

We post the effective date and give notice of material changes.

GizAI · Contact: support@gizai.co.