Politique de confidentialité

1. Information We Collect

When you create an account, we collect your email address, hashed password, and phone number (for verification). When you use our service, we collect the prompts you submit, the images you generate, and basic usage metadata (timestamps, generation settings, credit transactions).

We also collect standard web analytics data: IP address, browser type, device information, and pages visited. We use Cloudflare Web Analytics (cookie-free) and Google Analytics 4 for this purpose. Google Analytics uses cookies to distinguish unique users and collects anonymized usage data including page views, traffic sources, device information, and geographic region. Data is processed by Google LLC. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on. We also use PostHog (hosted in the United States) for first-party product analytics and traffic-source attribution; it uses first-party cookies to measure how visitors find and use the service. We do not record user sessions.

2. How We Use Your Information

We use your information to:

• Provide and improve our image generation service
• Process credit purchases and manage your account
• Send transactional notifications (generation complete, low credits, purchase confirmations)
• Prevent abuse and enforce our terms of service
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your prompts or generated images to train AI models.

3. Image Storage & Deletion

Generated images are stored on Cloudflare R2 and associated with your account. You can delete individual images or entire projects at any time from your dashboard. When you delete an image, it is permanently removed from our storage within 24 hours.

If you delete your account, all associated images, projects, and personal data are permanently deleted within 30 days.

4. Third-Party Services

We use the following third-party services to operate Seedream Studio:

• Clerk — Authentication and identity
• Supabase — Database hosting
• Cloudflare R2 — Image storage
• Stripe — Payment processing (we never see or store your full card details)
• Google Analytics — Web analytics and usage tracking
• PostHog — Product analytics and traffic-source attribution (US-hosted)
• Railway — Application hosting
• OpenAI — Content moderation of submitted prompts
• Amazon Web Services (Rekognition) — Content moderation of uploaded and generated images

Each of these services has their own privacy policy. We only share the minimum data necessary for each service to function.

5. Data Security

We implement industry-standard security measures including encrypted connections (TLS), hashed passwords, rate limiting, and access controls. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Your Rights

You have the right to access, correct, or delete your personal data at any time. You can export your data or delete your account from your account settings. For any privacy-related requests, contact us at [email protected].

7. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.