Privacy Policy

1. Data controller and contact

Operator: AI PhotoPrompt

Privacy contact: support@aiphotoprompt.io

2. Information we collect

• Account data: verified email, Google profile name/avatar when you use Google sign-in, authentication identifiers and account status.
• Generation data: prompts, selected model/settings, generated outputs, generation status, timestamps and provider request identifiers. Images uploaded to Image to Prompt are processed transiently and are not added to our image library or generation history. Reference images and outputs used in AI Image Studio may be retained for generation history.
• Credits and transaction data: balance, credit lots, charges, refunds, top-up amount, payment/order identifiers and transaction status.
• Technical/security data: IP address, browser/device information, timestamps, error logs and anti-abuse signals.
• Support data: messages and information you choose to provide when contacting us.

3. How we use information

• Authenticate users and maintain account sessions.
• Provide AI image generation/editing and generation history.
• Calculate, reserve, charge and refund credits accurately.
• Process purchases, reconcile payments and respond to billing issues.
• Prevent fraud, abuse, duplicate promotional-credit claims and security incidents.
• Operate, debug and improve AI PhotoPrompt and comply with legal obligations.

4. Service providers and AI processing

We use service providers only as needed to operate AI PhotoPrompt:

• Supabase: authentication and account/database infrastructure.
• Google: Google OAuth when you choose Google sign-in.
• Waffo Pancake: checkout, payment processing, order/refund events and payment-related consumer data. Full card data is processed by Waffo Pancake and is not stored on AI PhotoPrompt servers.
• fal.ai and available AI model providers: process prompts, uploaded images and generation parameters to produce requested outputs. Image-to-Prompt uploads are not retained by our application after the request completes, although the selected AI provider processes them under its own privacy terms.
• Cloudflare R2 / related delivery infrastructure: stores and serves image assets where configured.

5. Cookies and local storage

AI PhotoPrompt uses strictly necessary or functional browser storage for authentication/session state, language preferences and core product operation. We do not currently rely on advertising cookies as a required part of the service. If optional analytics or marketing technologies are introduced, this policy and any consent controls will be updated where required.

6. Sharing and sale of personal information

We do not sell your personal information. We share information only with service providers described above, when required by law, in connection with a legitimate corporate transaction, or with your consent.

7. Security

We use HTTPS/TLS, server-side secrets, access controls, authenticated APIs and other reasonable safeguards appropriate to the service. No system can guarantee absolute security. If a security incident creates a legal notification duty, we will notify affected users and regulators within the timeframe required by applicable law, including 72-hour regulatory windows where applicable.

8. Data retention

9. International processing

AI PhotoPrompt and its service providers may process data in countries other than your own. Where applicable law requires transfer safeguards, we rely on provider contractual/organizational safeguards and other lawful transfer mechanisms.

10. Your privacy rights

Depending on your location, you may have rights to request access, correction, deletion, portability, restriction or objection, and to withdraw consent where processing is based on consent. You may also have rights concerning the sale/sharing of personal information; AI PhotoPrompt does not sell personal information.

Submit privacy requests to support@aiphotoprompt.io. We may need to verify your identity before fulfilling a request.

11. Children

AI PhotoPrompt is not intended for users under 18. We do not knowingly seek to collect personal information from children below that age.

12. Policy changes and contact

We may update this Privacy Policy as the service, providers or legal requirements change. Material changes will be communicated where reasonably practicable.

Support and privacy: support@aiphotoprompt.io

Acceptable Use Policy (AIGC Content Standards)

The following sections 13–17 form our Acceptable Use Policy: content standards and prohibited categories for all AI features, together with enforcement, user reporting and content moderation mechanisms.

13. Acceptable use — scope

This Acceptable Use Policy applies to every AI feature at aiphotoprompt.io — AI Image Studio, Image to Prompt, Prompt Generator and Prompt Enhancer — and to all prompts, reference images, uploaded files, generated outputs and any content you publish or share through the service. It supplements our Terms of Service; violations of this policy are violations of those Terms.

14. Prohibited content

You must not use AI PhotoPrompt to create, upload, request, publish or distribute any of the following six categories of content, in any form:

• Sexual / NSFW content — pornographic or sexually explicit imagery, sexualized depictions of real people without their consent, "nudify" or undressing edits, and sexually suggestive content involving characters who are, appear to be, or could be interpreted as minors.
• Violence and gore — graphic depictions of extreme violence, torture, dismemberment or bloody injury; content that glorifies, incites or instructs violence, terrorism or self-harm; realistic depictions of real identifiable victims of violence.
• Hate speech and discrimination — content that attacks, demeans, dehumanizes or calls for exclusion of people based on race, ethnicity, nationality, religion, gender, sexual orientation, disability or other protected characteristics; propaganda symbols or slogans of violent extremist or hate organizations.
• Child-unsafe content (CSAM) — zero tolerance. Any sexual or exploitative content involving minors, including fictional, stylized or "aged-up" depictions, is strictly prohibited, as is any content that endangers or sexualizes children in any way.
• Deepfakes and impersonation — deceptive synthetic media of real, identifiable people (face swaps, fabricated endorsements, fake news imagery of real persons), non-consensual likeness manipulation, identity theft, and any content designed to defraud, mislead or damage a person's reputation.
• Copyright and trademark infringement — generating or uploading content that infringes third-party copyrights or trademarks, counterfeit goods or brand assets intended to deceive, deliberate imitation of living artists' work for commercial substitution, and circumvention of others' licensing or provenance marks.

Attempts to circumvent safety filters (jailbreak prompts, coded language, iterative rephrasing to evade review) are themselves a violation. Content that is illegal in your jurisdiction or ours is prohibited even if not listed above.

15. Enforcement

When we confirm a violation, we may take one or more of the following actions, depending on severity and recurrence:

• Block or refuse the violating request before generation (blocked requests are not charged).
• Remove or de-list the violating content from public pages, search indexes and galleries.
• Issue a warning and require acknowledgment before continued use.
• Temporarily suspend AI features, free quotas or the account.
• Permanently terminate the account; promotional/free credits are forfeited, and accounts terminated for cause are not eligible for refunds of consumed services.
• Report illegal content to competent authorities. Suspected child sexual abuse material is reported to the appropriate child-protection authorities (e.g. NCMEC) and preserved as required by law.

16. Reporting violations

Anyone — visitor or registered user — can report suspected violations:

• Email: support@aiphotoprompt.io with the subject line "Abuse Report".
• Include: the page URL or generation details involved, a description of the suspected violation, and any supporting evidence (screenshots, original works for IP complaints).
• Rights holders: for copyright/trademark complaints, identify the protected work and your relationship to it so we can process a takedown.
• We acknowledge reports within 2 business days. Child-safety reports are prioritized and handled immediately; rights-holder takedown requests are reviewed as quickly as practicable.

17. How we moderate

AI PhotoPrompt uses a layered review system:

• Pre-generation screening: prompts and requests are checked by automated filters (keyword/pattern rules and abuse detection) before reaching a model; flagged requests are refused and are not charged.
• Provider-side safety systems: generation runs through third-party infrastructure (fal.ai and model providers) whose own safety classifiers provide a second layer of blocking.
• Publication review: only prompts with a real generated result image can be published to the public gallery; public content is reviewed against this policy before and after publication.
• Reactive review: user reports and automated abuse signals are reviewed by a human moderator; confirmed violations trigger the enforcement steps above.
• Rate and quota controls: per-device and per-IP limits slow down automated abuse, and repeated evasion attempts lead to suspension.