Privacy Policy
We handle personal data in accordance with Japan's Act on the Protection of Personal Information. The Japanese version is authoritative.
1. What we collect
Account data: email address, display name, and the identifier provided by your sign-in provider.
Uploaded images: product photos and person photos. Facial features in a person photo may constitute an individual identification code under Japanese law.
Usage data: generation history and counts, and the model, scene and prompt you chose.
Payment data: payments are processed by Stripe. We never receive or store card numbers — only a Stripe customer id and your subscription status.
2. Why we use it
To operate the service, run generations, apply billing and fair-use limits, prevent abuse, analyse usage in aggregate, and answer your enquiries.
3. Transfers to third parties
To generate images we transmit your uploads and prompts to:
Google LLC (United States) — the Gemini API, for image generation and product category detection.
fal.ai / Features and Labels, Inc. (United States) — as a fallback when Google cannot serve the request.
Both are located in the United States. By using the service you consent to this transfer. Please refer to each provider's own privacy policy for their practices.
We do not otherwise share personal data without your consent, except where required by law.
4. Retention of person photos
Uploaded source photos of people are deleted automatically 30 days after upload.
Generated images are your work product and are kept until you delete them or close your account.
Product images are kept while your account is active.
5. Consent for person photos
When uploading a person photo you must confirm that the subject is you or has consented. We record the date and time of that confirmation.
Responsibility for uploading someone else's photo without permission rests with the uploader.
6. Security
Images are stored in private buckets and served only through expiring signed URLs. The database enforces row-level access control so you can reach only your own data. All traffic is encrypted.
7. Access, correction and deletion
To request access to, correction of, or deletion of your personal data, contact 【要記入】. We will verify your identity and respond as the law requires.
Deleting your account removes the associated images and data within a reasonable period.
8. Cookies
We use cookies needed to keep you signed in. We do not use advertising or tracking cookies.
9. Changes
We will post changes to this policy on the site, and email you about significant ones.
10. Contact
【要記入】