Stock AI Studio ("we", "us", or "our") operates the website stockai.studio. This Privacy Policy explains how we collect, use, store, and protect your information when you use our Service.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

Email address — provided via email/password signup or Google OAuth.
Display name — set by you or derived from your OAuth provider.
Profile identifiers — unique user IDs for authentication.

1.2 Payment Information

Payment processing is handled entirely by Stripe. We do not store your credit card numbers, bank account details, or other sensitive payment information on our servers. We retain:

Stripe customer ID (to link your account to your payment history).
Stripe subscription ID (to manage your plan).
Transaction history (plan type, credit purchases, amounts).

1.3 Usage Data

We collect data about how you use the Service, including:

Generation history — prompts, model selections, settings, and parameters you use when generating content.
Generated assets — images, videos, and audio files you create, stored in your media library.
Credit usage — credits consumed per generation, remaining balance.

1.4 Technical Data

We automatically collect:

IP address and approximate geolocation (via Cloudflare).
Browser type and version.
Device type and operating system.
Pages visited and interaction patterns.

2. How We Use Your Information

We use your information to:

Provide the Service — process your prompts through AI models and return generated content.
Manage your account — authentication, billing, and credit tracking.
Improve the Service — analyze usage patterns to improve features and performance.
Communicate — send transactional emails (billing confirmations, account changes).
Prevent abuse — detect and prevent misuse, fraud, and violations of our Terms.

3. What We Do NOT Do

We do not sell your personal information to third parties.
We do not use your prompts or generated content to train AI models.
We do not share your generated content with other users.
We do not send marketing emails without your consent.

4. Data Storage & Security

4.1 Where We Store Data

Account and generation data — stored in Supabase (PostgreSQL), hosted on AWS infrastructure.
Generated media files — stored in Cloudflare R2 object storage, served via CDN (cdn.stockai.studio).
Application hosting — Cloudflare Pages.

4.2 Security Measures

All data is transmitted over HTTPS/TLS.
Authentication is managed via Supabase Auth with row-level security (RLS) policies.
Payment data is handled by Stripe (PCI DSS compliant).
Generated assets are stored with user-scoped access controls.

5. Third-Party Services

We share data with the following third-party services solely to provide the Service:

Google AI (Vertex AI) — receives your prompts and settings to generate content. Subject to Google Cloud Terms.
Stripe — processes payments. Subject to Stripe's Privacy Policy.
Supabase — provides authentication and database services. Subject to Supabase's Privacy Policy.
Cloudflare — provides hosting, CDN, and storage. Subject to Cloudflare's Privacy Policy.

6. Data Retention

Active accounts — data is retained for the lifetime of your account.
Deleted accounts — personal data and generated content are deleted within 30 days of account deletion.
Billing records — transaction records may be retained for up to 7 years for legal and accounting purposes.
Server logs — automatically deleted after 90 days.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access — request a copy of the personal data we hold about you.
Correction — update or correct inaccurate information.
Deletion — delete your account and associated data via account settings.
Export — download your generated content from your media library.
Objection — object to certain processing of your data.

To exercise any of these rights, contact us at support@stockai.studio.

8. Cookies

We use essential cookies only:

Authentication cookies — to keep you signed in.
Session cookies — to maintain your session state.

We do not use third-party tracking cookies, advertising cookies, or analytics cookies.

9. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe a minor has created an account, please contact us immediately.

10. International Data Transfers

Your data may be processed in the United States, Canada, and other jurisdictions where our service providers operate. By using the Service, you consent to the transfer of your data to these jurisdictions.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on the Service. The "Last updated" date at the top reflects the most recent revision.

12. Contact

For privacy-related inquiries, contact us at support@stockai.studio.