Data used
We store your email address, username, a password hash, session record, prompts, job and credit history, and finished private assets to provide the service.
Processing and storage
The website and business data are hosted on Cloudflare. When live generation is enabled, submitted prompts and generated source images may be processed by the selected AI provider and a private image-processing service. Payment information, if purchases open, is handled by the checkout provider rather than stored as card data here.
Account verification
Cloudflare Turnstile checks registration and sign-in requests. Resend receives your email address and a short-lived verification code to deliver account email. We store a hash of the code while verification is pending, and use limited technical data to rate-limit attempts.
Access, retention, and requests
Your assets are accessed through authenticated requests. Account and activity data do not currently expire automatically and remain stored while your account is active. Contact support to request access, correction, or deletion of eligible data.
Studio and community data
Private Studio project documents and AI prompts are accessible only to your account and authorized service staff. If you submit a work, its image, title, description, tags, AI-assisted label, display name, and creator page may become public after review. Public likes, follows, and approved comments are visible to other visitors; reports and review records are restricted to staff. A withdrawn or hidden post is removed from public discovery and image access, while account, moderation, and submission records may remain until deletion is requested or retention rules change. Contact support for access, correction, or eligible deletion requests.
Saved works
Your saved-work list is private to your account and is not displayed on your public profile. Works withdrawn by their author or hidden by moderators no longer appear in this list.
Google and GitHub sign-in
If you choose social sign-in, Google or GitHub verifies your identity. We receive your provider account ID and verified email, and store the provider ID with your account. We use the email to create a new account only when it does not already belong to a site account. Existing accounts must link providers while signed in. Provider access tokens are used only during sign-in and are not stored. You can request removal of a linked method through support.
Direct messages and groups
We store conversation text, memberships and invitations, your own unread progress and message preferences. These do not appear in public feeds, searches or profiles. New contacts request permission and group members accept invitations; earlier group messages are not shown to newly accepted members. Messages do not use end-to-end encryption. When a message is reported, authorized moderators may inspect that reported message; access and review actions are recorded.
Contact
Jiandong Chen · United States, Europe, China
Jidon.J.Chen@gmail.com