Privacy policy

Last updated: 13 September 2026.

Who handles your data

Giuseppe Rapisarda, 17 Carbis Road, Tower Hamlets, E14 7TH, United Kingdom, GB. Contact: giuseppe.rapisarda12@gmail.com.

What we collect and why

We use your email, display name, account identifier, and sign-in information to provide your account. We store uploaded media, prompts, generated outputs, job status, and credit usage to operate your private studio. Purchase identifiers and payment status support billing, refunds, and fraud prevention. Session information, IP addresses, and limited diagnostic records help protect accounts and troubleshoot failures.

Services involved

Cloudflare hosts the application, account database, and media storage, and delivers account emails. Google receives information needed when you choose Google sign-in. Stripe processes payments; Ritorio does not store your full card number or security code. When you submit a generation, fal and the selected model provider receive the prompt and source material needed to process it. Their processing and retention terms also apply.

Cookies

We also store your language preference in a cookie for one year.

We use necessary cookies for sign-in, sessions, and account security. The current application does not add advertising trackers. Payment and Google sign-in pages may use their own cookies under their privacy policies.

Legal grounds and retention

We process account, generation, and purchase data to perform our agreement with you; security data for our legitimate interest in protecting the service; and records required to meet legal obligations. Workspace data is retained while it is needed to provide your account. You can request deletion through support. We may retain billing and security records where legally required or necessary to resolve a dispute. Providers may process data outside your country under their applicable transfer arrangements.

Your choices and rights

You can request access, correction, deletion, or a copy of your personal data, and exercise other rights available under applicable law. You may also complain to your local data protection authority. Contact us through support; do not send sensitive documents unless a specific verification step requires them.