Privacy Policy

Introduction

This Privacy Policy explains how Genace ("Genace", "we", "us", or "our") collects, uses, stores, and protects your personal information when you use our website, API, and related services (collectively, the "Services"). Genace is operated by an independent individual developer.

Information We Collect

• OAuth Account Information: When you sign in with Google or GitHub, we receive your email address, display name, avatar/profile image, and provider account ID from the OAuth provider.
• Prompts and Generation Parameters: The text prompts, images, and configuration parameters you submit when requesting an AI generation job.
• Generation Results: The output files (images/videos) produced by your generation jobs.
• Usage Data: API request logs, job status, Credit consumption, and other metadata about how you interact with the Services.
• Payment Information: Payments are processed entirely by our payment processor, Creem, acting as the Merchant of Record. We do not collect, transmit, or store your card number or other sensitive payment credentials — we only receive payment status and order metadata from Creem.

How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Services, including fulfilling generation jobs and metering Credits;
• Process payments and manage subscriptions and Credit purchases;
• Improve and troubleshoot the Services, including diagnosing errors and abuse;
• Send necessary transactional communications, such as account, billing, and job-status notifications.

We do not sell your personal information, and we do not use your prompts or generated content to train AI models.

Where We Store Data

• Account, job, and billing records are stored in a PostgreSQL database operated on our behalf by our hosting provider.
• Generated media files (images/videos) are stored in Cloudflare R2 object storage.

Third-Party Processors

We share limited data with the following third-party service providers, each acting as a data processor for the purpose described:

• fal.ai — receives your generation prompts and parameters to perform the underlying AI image/video generation.
• Creem — receives billing information necessary to process payments and subscriptions as our Merchant of Record; handles sales tax collection and remittance on our behalf.
• Resend — receives your email address to deliver transactional emails (e.g., verification, receipts, notifications).
• Vercel — hosts our application infrastructure and may process request metadata (e.g., IP address) as part of standard web hosting.

Cookies

We use a limited set of cookies necessary to operate the Services. See our Cookie Policy for details on the specific cookies we use and how to manage them.

Your Rights

Depending on your jurisdiction (including under GDPR and CCPA), you may have the right to:

• Access the personal data we hold about you;
• Request export of your data in a portable format;
• Request correction of inaccurate data;
• Request deletion of your account and associated personal data — you can self-service this from your account settings at any time, or by contacting us;
• Object to or restrict certain processing of your data.

To exercise any of these rights, contact us at [email protected].

Data Retention

We retain your personal data for as long as your account remains active, plus a reasonable period thereafter to comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. When you delete your account, we delete or anonymize your personal data within a reasonable timeframe, except where retention is required by law.

Children's Privacy

The Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

International Data Transfers

Because our infrastructure and service providers (including Vercel, Creem, fal.ai, and Resend) may operate in multiple countries, your data may be transferred to and processed in countries other than your own. We rely on our providers' applicable safeguards for such transfers.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date below and, where appropriate, provide additional notice.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at [email protected] or via our contact page.

This document is a standard SaaS privacy policy and is not a substitute for independent legal advice.

Last updated: July 20, 2026