Privacy Policy

We may collect personal information you provide directly to us, including your name and contact details, account registration information, billing and subscription information, prompts, instructions, uploads and other inputs submitted through the Services as well as communications you have with us.

We may collect and store information related to content generated through your use of the Services, including AI-generated outputs, where necessary to operate, maintain, improve, secure, and support the Services.

Ownership, usage rights, and responsibilities relating to Outputs are governed by our Terms of Use.

We may automatically collect certain information about how you access and use the Services, including your IP address, device and browser information, usage activity and log data, cookie identifiers, analytics information and other information automatically collected or generated through your access to or use of the Services.

In certain circumstances, we may receive information about you from third-party sources, which may be combined with information collected through the Services to help us operate, secure, and improve the Services.

We ask that you do not submit sensitive personal information through the Services unless specifically requested for a feature we provide. Sensitive personal information may include information relating to health, biometric data, government identifiers, racial or ethnic origin, religious beliefs, criminal history, or other categories of sensitive data under applicable law. You should also avoid submitting confidential or proprietary information in prompts unless necessary and appropriately authorized. If you submit any such information, you are responsible for ensuring you have a lawful basis and any necessary authorization to do so.

We may review prompts, inputs, or outputs, including through automated and, where reasonably necessary, human review, for purposes such as safety monitoring, abuse prevention, security, legal compliance, investigating violations of our policies, and providing support.

Any human review is limited to circumstances reasonably necessary for safety monitoring, abuse prevention, legal compliance, support, or related operational purposes, and is conducted subject to appropriate safeguards.

You are responsible for ensuring you have all necessary rights, permissions, and lawful basis for any personal data or content you submit, upload, share, export, or otherwise disclose through the Services.

You are responsible for not submitting content that violates applicable law, infringes third-party rights, or is processed without proper authorization.

To the extent permitted by law, the Company is not responsible for disclosures, transfers, or uses of data made by you outside the Services or outside our reasonable control.

We may share personal information with trusted service providers and subprocessors that support hosting, cloud infrastructure, analytics, payments, security, support, and delivery of the Services. These providers may process personal information only on our instructions and subject to appropriate contractual, confidentiality, and security protections.

Where you use the Services through an organization, information may be shared with that organization as necessary to provide the Services.

We may disclose personal information to courts, regulators, law enforcement authorities or government bodies where required by law or reasonably necessary to protect rights, safety or security.

We may disclose or transfer personal information in connection with mergers, acquisitions, financing or asset sales. We do not sell personal information or share personal information with third parties for their own direct marketing or advertising purposes. We do not sell or share personal information for cross-context behavioral advertising as those terms may be defined under applicable privacy laws.

The Company operates globally and may transfer, store, access, or process personal information in countries outside the country where you reside, including jurisdictions that may have different data protection laws.

Our Services and infrastructure are operated globally. Personal information may be stored and processed in jurisdictions where we or our service providers operate, including, for example, Singapore and the United States, as well as other countries where our infrastructure or service providers are located.

Such transfers are made only as necessary for legitimate and relevant purposes, including providing, operating, maintaining, securing, and improving the Services, and supporting our service providers, infrastructure, and global operations.

We seek to limit transfers of personal information to what is necessary for those purposes.

We are committed to maintaining a high standard of personal data protection in connection with international transfers.

Where required under applicable law, we implement appropriate safeguards for cross-border transfers, including through:

• Standard Contractual Clauses adopted by the European Commission or other legally recognized transfer mechanisms under applicable data protection laws;
• contractual protections with service providers, subprocessors, and business partners (including data processing agreements and confidentiality obligations); and/or other safeguards permitted under applicable law.

These measures are designed to help ensure personal information transferred internationally remains adequately protected.

Some of our service providers, vendors, and partners may process personal information in multiple jurisdictions in support of hosting, infrastructure, analytics, payments, security, and support functions. Where such processing involves international transfers, we take steps designed to ensure personal information remains protected through appropriate technical, organizational, and contractual safeguards.

Personal information may be disclosed or transferred in connection with actual or prospective corporate transactions, including investments, financings, mergers, acquisitions, asset sales, reorganizations, insolvency proceedings, or similar transactions. Where personal information is transferred as part of such a transaction, we will seek to ensure that such information remains subject to appropriate protections.

We retain account-related information for as long as your account remains active or as necessary to provide the Services. In certain circumstances, we may retain such information longer where required to (i) comply with legal obligations; (ii) resolve disputes; (iii) enforce our agreements; or (iv) protect our legal rights.

Information related to prompts, inputs, and generated outputs may be retained for operational purposes, including maintaining functionality of the Services, improving system performance, ensuring platform integrity, and supporting security and abuse prevention. Retention periods may vary depending on technical requirements, usage patterns, and operational needs.

We may retain certain information longer where required by applicable law, regulation, legal process, accounting, tax, fraud prevention, security monitoring, or compliance purposes. When information is no longer needed, we may delete or anonymize it.

If you are located in the European Economic Area, United Kingdom, or another jurisdiction providing similar rights, you may have the right to lodge a complaint with the competent data protection supervisory authority.