Privacy Policy

We keep what we need to run your studio, and nothing else:

• Account details: your email address and, if you sign in with Google or Apple, the name they share with us. Passwords are stored only as a secure hash. Apple's “Hide My Email” address works fine.
• What you create: your model descriptions and prompts, reference images and links you add, character sheets and photos you generate, and your settings.
• Confirmations: when you confirmed you're 18 or older and accepted the Terms.
• Billing: your plan, photo balance and Stripe customer ID. Card details go straight to Stripe; we never see or store them.
• Technical data: basic logs (such as IP address, browser and error reports) that our hosting providers record to keep the service secure and working.

• to sign you in, create your models and photos, and keep them in your library;
• to take payments, apply your plan and return photos when an image fails;
• to check prompts and references against our rules, prevent abuse, and meet legal duties, including reporting illegal content;
• to answer you when you contact us, and to tell you about important changes to your account or these policies.

We don't sell your personal information, we don't share it for cross-site advertising, and we don't use your images, prompts or references to train AI models. We never use what you create in our marketing without your permission.

We use a small number of service providers, each bound to use your data only to provide their service to us:

• Hosting and database: Vercel (website) and Convex (accounts, files and storage), in the United States.
• Payments: Stripe, which processes payments under its own privacy policy.
• Sign-in: Google and Apple, only if you choose to sign in with them.
• Image generation: AI image-generation partners receive the prompts and reference images needed to make each image, and return the result to us.
• Link fetching: when you paste a social media link, a fetching service retrieves the public post so we can pull stills from it.

We may also disclose information when the law requires it, to protect people from harm, or as part of a sale or merger of the business (in which case this policy continues to apply).

We use only what the site needs to work:

• sign-in cookies that keep you logged in (for up to 30 days);
• a cookie remembering that you confirmed you're 18 or older;
• your browser's local storage, to keep an unfinished model description while you sign up or check out.

We don't use advertising or cross-site tracking cookies.

Your account and everything in your library stay until you delete them. Delete a model, photo or reference in the studio and it's removed from our storage. When you close your account we erase your data within 30 days, except billing records we must keep for tax and accounting (usually up to 7 years) and anything we must hold for a legal reason.

You can see and download your images in the studio at any time. You can also ask us to access, correct, export or delete your personal information, or to close your account, by emailing support@spicystudio.app from the address you signed up with. We'll reply within 30 days.

Depending on where you live (for example the EU, UK or California), you may have further rights, such as objecting to certain processing or complaining to your local data protection authority. We'll never treat you differently for using them.

Data is encrypted in transit, access is limited to what's needed to run the service, and payments are handled entirely by Stripe. No system is perfectly secure; if a breach affects you, we'll tell you as the law requires.

Spicy Studio is only for people 18 and older. We don't knowingly collect information from anyone younger; if we learn we have, we delete the account.

We and our providers operate in the United States. If you use Spicy Studio from elsewhere, your information is transferred to and processed in the US, with safeguards such as standard contractual clauses where required.

We'll update this policy as Spicy Studio changes and tell you about important changes before they take effect. Spicy Studio is responsible for your information. Questions or requests: support@spicystudio.app.