Privacy Policy
1Scope and acceptance
This Policy applies to all persons who access or use the Service in any capacity, including Account Holders and Users. Because acceptance of the Terms and this Policy is required to create an account and to use the Service, each person accepts this Policy as a condition of access. Capitalised terms have the meanings given in the Terms & Conditions.
In this Policy, “Data” means any information, content, media, activity, signals, and derived information that is entered into, submitted to, generated by, transmitted through, observed within, stored by, processed by, or derived from the Service, whether relating to an Account Holder, User, device, or session.
2Data we process
- Account data — your email address, a hash of your password, and the plan and Credits associated with your account.
- Your Content — the comics, pages, images, scripts, audio, video, and prompts you upload to or enter into the Service.
- Generated Output and analyses — the files the Service makes from Your Content at your direction, and the notes its planning passes write about them.
- Usage and billing data — which features you run, on which files, what each job cost and which hardware ran it, Credits granted and spent, and payment records held by our payment processor.
- Technical data — IP address, browser and device information, request logs, error reports, and the cookies described in the Cookie Policy.
- Communications — messages you send us, and messages you exchange with the Service's assistant.
We may combine Data and generate new Data from it, including the analyses and plans described above.
3Purposes and lawful basis
We process Data to provide, operate, secure, maintain, and improve the Service; to produce Generated Output and analyses at your direction; to manage accounts, plans, Credits, billing, and support; to protect the Service and its users and enforce our terms; and to comply with legal obligations.
Where required by applicable law, our lawful bases for processing include the performance of our contract with you and the provision of features integral to the Service you request; our legitimate interests in operating, securing, and improving the Service; compliance with legal obligations; and, where applicable, consent.
Analyses, plans, and other outputs are assistive. They are not decisions made solely by automated means that produce legal or similarly significant effects about an individual.
4Your Content, models and training
Your Content and Generated Output are used to run the Service for you and for nothing else. To produce Generated Output they are transmitted to the GPU infrastructure that runs your job and, for the planning passes, to the language-model provider that runs them, in each case only for the duration and purpose of that job. We do not use Your Content or Generated Output to train machine-learning models, and we contract with our model provider on terms that do not permit it to do so with the data we send.
The open-weight models the Service runs are published by third parties; running them on your files does not transfer your files to their publishers.
5Third-party processors
We use third-party providers to help operate and deliver the Service. Data may be shared with, or processed by, such providers for these purposes. Our current providers include, among others:
- RunPod — GPU cloud infrastructure that runs your generation jobs, and network storage holding your model cache and, during a job, its inputs and outputs;
- DeepSeek — the language and vision-language model that runs the planning passes and the assistant;
- Cloudflare — content delivery, edge security, and traffic protection in front of the Service;
- Stripe — payment processing for plans and top-ups; we do not store your card details;
- Hosting providers — the servers that run the studio and store your projects;
- and other providers engaged from time to time to support hosting, delivery, communications, monitoring, and security.
Publicly hosted fonts, icon sets, and script libraries are loaded by your browser from content-delivery networks (Google Fonts, cdnjs, jsDelivr), which receive your IP address in the course of serving them. This list may change as the Service and our providers evolve, and we will keep it current. We remain responsible for the acts and omissions of our sub-processors only to the extent we would be liable under the Terms for performing the relevant processing ourselves, and to the extent required by applicable law.
6International processing
The Service and our providers may store and process Data in, and transfer it to, locations outside your country or the country in which it was collected — GPU jobs in particular run in whichever data centre has capacity at the time. By using the Service you acknowledge that Data may be processed in such locations, which may have different data-protection laws. Where required by applicable law, we take steps intended to provide an appropriate basis for such processing and transfers.
7Retention
Your projects are retained while your account is open, so that you can return to them. Inputs and outputs copied to GPU infrastructure for a job are removed from it when the job completes or the cache is released. Usage and billing records are kept for as long as accounting and tax law requires. Technical logs are kept for a limited period to operate and secure the Service. Otherwise we retain Data for as long as necessary for the purposes described in this Policy and to establish, exercise, or defend legal claims.
8Your rights and requests
Subject to applicable law, you may have rights in relation to Data about you, which may include rights to access, correct, delete, restrict, object to, or port such Data, and to withdraw consent where processing is based on consent.
You may submit a request in relation to Data about you, and we will act on valid requests as required by applicable law after appropriate verification. We may decline or limit a request where permitted by law, including where we are unable to verify identity, where the request is unfounded or excessive, or where the Data is subject to legal, contractual, or technical constraints. To exercise a right, or to close your account, contact us as described in Section 13.
If Your Content includes material relating to a person who does not hold an account, that person may contact us to request its removal; we may inform you of the request.
9Security
We use commercially reasonable technical and organisational measures intended to protect Data, including hashed passwords, transport encryption, and per-account isolation of projects and GPU caches. However, no method of transmission, storage, or processing is completely secure, and we do not warrant or guarantee the security of Data. Where we are legally required to notify a personal-data breach, we will do so in accordance with applicable law.
10Children
The Service is not directed to persons under 18, and we do not knowingly process the Data of a person under 18 except through, and under the supervision of, a consenting parent or guardian as described in the Terms. If you believe a minor has used the Service without appropriate consent, contact us and we will take appropriate steps.
12Changes
We may update this Policy from time to time. Where changes are material, we will take reasonable steps to notify you, for example by posting an updated version with a new effective date. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.
13Contact
Privacy questions and requests may be raised through the Service. This Policy is governed by the law set out in the Terms.