Privacy Policy

Introduction

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our service.

Information We Collect

We collect the following types of information to provide and improve our service:

1. Account Information — Your name, email address, and other details you provide when creating an account.
2. Usage Data — Information about how you interact with the service, including features accessed, frequency of use, and interaction patterns.
3. Device Information — Device type, operating system, and browser type, used to optimize compatibility and performance.
4. Cookies — Small data files stored on your device to remember preferences and improve your experience.
5. Payment Information — Billing details handled by trusted third-party payment processors. We do not store full card numbers on our servers.
6. Uploaded and Generated Images — Reference images, generated outputs, file metadata, and generation settings needed to provide the service.
7. Promotion Sources — First-party cookies identify a browser for up to 90 days and remember an identifiable external source for up to 30 days. We record campaign tags, landing page paths, referring domains, and visit times to measure promotion effectiveness. When an account is created, its acquisition source is saved with the account. Visit records do not contain email addresses, IP addresses, full referring URLs, or unrelated URL query parameters. This collection is skipped when a Do Not Track or Global Privacy Control signal is received.

How We Use Your Information

We use the data we collect to:

• Provide, maintain, and improve the service.
• Process transactions and send related confirmations.
• Send technical notices, security alerts, and support messages.
• Respond to your questions, feedback, and support requests.
• Detect, prevent, and address fraud and abuse.
• Screen generation requests for content safety and enforce our Acceptable Use Policy.

Data Sharing

We do not sell your personal information. We may share data only in these limited cases:

• With service providers who help us operate the service, under confidentiality agreements.
• To comply with legal obligations or respond to lawful requests from public authorities.
• To protect our rights, property, or safety, or that of our users.

Payment providers process checkout and transaction data as merchant or payment-service partners. Generated files are stored with our cloud storage provider (Cloudflare R2).

AI Processing and Model Training

• AI processing provider — We use fal.ai to run the AI models behind our generation tools. When you generate a design, the uploaded image and generation instructions are sent to fal.ai to produce the result. fal.ai processes this data under its own terms and privacy policy, and its own retention practices apply to the data it receives.
• Content safety — Uploaded images may be screened by an automated safety check run through fal.ai, and the text instructions for a generation may be checked by our payment provider's content-safety service before generation starts.
• No model training — We do not use your uploads or generated results to train AI models, we do not sell them, and we do not publish them in a public gallery.
• Tattoo Simulator — Photos you select from your device in Tattoo Simulator are processed locally in your browser.

Retention and Deletion

• Anonymous use — Uploads and generated results created without an account are kept for up to 7 days and then deleted. If you sign in from the same browser before they expire, the available anonymous results are linked to your account and the 7-day limit no longer applies to them. Anonymous trial credits are not transferred to your account.
• Signed-in originals — For account-owned generations, the original uploaded image is deleted no later than 30 days after upload.
• Generated results — Results in your account are kept until you delete them or delete your account data.
• Access — Account-owned uploads and generated results are accessible only when you are signed in to the owning account. Anonymous trial results stay available only in the browser that created them until they expire or you sign in. When we use short-lived signed storage URLs to deliver a file, those URLs are a temporary delivery mechanism for the owner and expire after a short time. We do not publish permanent public links to your files.
• Your deletion controls — You can delete individual results at any time, which removes the stored files, or request deletion of your account data.

Commercial Use

You keep your rights in the images you upload. Subject to our Terms of Service and third-party rights, results from paid generations may be used commercially. See the Terms of Service for details.

Data Security

We implement industry-standard security measures including encryption in transit, access controls, and regular reviews. No method of transmission over the Internet is 100% secure, but we work continuously to protect your information.

Your Rights

You have the right to access, update, export, or delete your personal information. You can do this through your account settings or by contacting us at the email address below.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the date at the top of this page and, where appropriate, sending a notice through the service.

Contact Us

If you have questions about this Privacy Policy, contact support@stencilmytattoo.com.