Privacy Policy

1. Introduction

At IDALL ("we," "our," or "us"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, process, and safeguard your information when you use our AI-powered creative platform.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, name, and profile details
• Payment Information: Billing details processed securely through Stripe
• Content: Images, prompts, and creations you upload or generate
• Communications: Messages sent to our support team

2.2 Information We Collect Automatically

• Usage Data: How you interact with our platform
• Device Information: Browser type, operating system, device characteristics
• Log Data: IP address, access times, pages viewed
• Cookies: Essential cookies for authentication and preferences

3. How We Use Your Information

We use your information to:

• Provide and improve our AI image generation services
• Process your generations through third-party AI providers
• Manage your account, credits, and subscriptions
• Communicate with you about service updates and support
• Ensure platform security and prevent fraud
• Analyze usage patterns to enhance user experience
• Comply with legal obligations

4. Data Sharing and Third Parties

4.1 Service Providers

We share data with trusted third parties to deliver our services:

• Supabase: Secure database, authentication, and storage infrastructure
• Black Forest Labs (BFL): FLUX Kontext Pro and FLUX Ultra models for high-quality image generation and editing with up to 4K resolution
• Google Gemini API:
  • Gemini 3 Pro Preview: Advanced Smart AI image generation with intelligent reasoning
  • Gemini 3 Pro Image: Ultra 4K image generation with exceptional quality
  • Veo 3.1: Video generation services with native audio and frame-specific generation capabilities up to 4K
• MiniMax: Hailuo 2.3 and Hailuo 02 video generation models for Text-to-Video, Image-to-Video, and Speech-to-Video content creation
• Nano Banana: Fast image editing and transformation models
• Stripe: Payment processing and subscription management
• Vercel: Platform hosting and deployment services

4.2 Data Processing

When you generate images or videos, your prompts and uploaded content may be processed by our AI service providers. As a technological facilitator, IDALL connects you to these third-party services while ensuring they maintain appropriate data protection standards.

4.3 AI Service Integration

IDALL acts as an intermediary platform that:

• Transmits your generation requests to appropriate AI providers
• Receives and stores generated content for your access
• Manages authentication and usage tracking across services
• Does not control how third-party AI models process your data

Each AI provider has their own privacy policies and data handling practices. We recommend reviewing their respective privacy policies for complete information.

5. Data Storage and Security

5.1 Security Measures

• Storage: Data is stored securely using Supabase's encryption and security measures
• Access Controls: Strict access controls limit who can view your data
• Encryption: Data is encrypted in transit (TLS/SSL) and at rest (AES-256)
• Authentication: Multi-factor authentication support and secure password hashing
• OAuth Security: Support for Google and Facebook OAuth for enhanced account security

5.2 Data Retention

We retain different types of data for varying periods:

• Account Data: Retained while your account is active and deleted upon account deletion
• Generated Content: Stored indefinitely until you delete it or close your account
• Usage Logs: Retained for 90 days for security and debugging purposes
• Transaction Records: Kept for 7 years for legal and tax compliance (anonymized after account deletion)
• Support Communications: Retained for 3 years for quality assurance (anonymized after account deletion)

5.3 Content Storage

• Generated Images: Stored on Supabase Storage with CDN caching for performance
• Videos: Stored temporarily during processing, then transferred to your account storage
• Uploads: User-uploaded images for editing are processed and stored securely
• Deletion: All content is permanently deleted when you delete your account or individual generations

6. Your Rights and Choices

You have the right to:

• Access: Request access to your personal data through your account settings
• Correction: Update or correct inaccurate information in your profile
• Deletion: Delete your account and all associated data
• Portability: Export your generated content and creation history
• Opt-out: Unsubscribe from marketing communications
• Data Processing: Object to certain data processing activities

6.1 Account Deletion and Data Erasure

You have the right to delete your account at any time through your account settings. Account deletion is permanent and irreversible. When you delete your account:

• Immediate Deletion: All personal data is permanently erased from our systems
• Generated Content: All images, videos, and creations are permanently deleted
• Profile Data: Your name, email, avatar, and preferences are removed
• Generation History: All records of your generations and bookmarks are erased
• Subscription Data: Payment history and subscription records are anonymized for legal compliance
• User Preferences: All saved settings and preferences are deleted

6.2 Automatic Subscription Cancellation

When you delete your account, we automatically:

• Check for Active Subscriptions: Our system verifies if you have any active Stripe subscriptions
• Cancel Subscriptions Immediately: Any active subscriptions are cancelled at Stripe to prevent future charges
• Stop Recurring Billing: You will not be charged for subsequent billing cycles
• Update Subscription Status: Your subscription records are marked as cancelled in our database
• Third-Party Integration: We notify Stripe to halt all future payment processing

Important: While we cancel future subscriptions, this does not affect:

• Already-processed payments (no refunds for current billing period)
• Historical transaction records (retained for legal and accounting purposes, anonymized)
• Unused credits (forfeited without compensation)

6.3 Data Retention After Deletion

After account deletion, we do not retain any of your personal or generated content. However:

• Legal Compliance: Some anonymized transaction records may be retained for tax and legal obligations (typically 7 years)
• Fraud Prevention: Anonymized records of abusive accounts may be kept to prevent fraud
• No Recovery: Once deleted, your account and data cannot be restored or recovered
• Third-Party Deletion: We initiate deletion requests with third-party AI providers, though we cannot control their deletion timelines

6.4 Data Portability Before Deletion

We recommend exporting your data before deletion:

• Download all generated images and videos from your creations page
• Export your generation history and preferences if needed
• Save any important prompts or configurations
• Once your account is deleted, this data cannot be recovered

6.5 Financial Rights Disclaimer

Important: While you have extensive data privacy rights, please note that:

• Account deletion does not result in refunds for unused credits or subscription fees
• Data portability rights do not include financial compensations for exported content or data
• Exercising privacy rights does not affect payment obligations or entitle users to refunds
• Subscription cancellations requested for privacy reasons are still subject to our no-refund policy

To exercise these rights, visit your account settings, contact us at privacy@idall.ai, or through our support page. For questions about billing and subscriptions, please see our Terms of Use.

7. Cookies and Tracking

We use cookies for:

• Essential Cookies: Authentication and basic functionality
• Preference Cookies: Remember your settings and preferences
• Analytics: Understand how users interact with our platform

You can control cookies through your browser settings, though this may affect platform functionality.

8. International Data Transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place when transferring data internationally, including using service providers that comply with data protection frameworks.

9. Children's Privacy

IDALL is not intended for users under 13 years old. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will delete it promptly.

10. Data Breach Notification

In the unlikely event of a data breach that poses a risk to your privacy, we will notify affected users within 72 hours and take immediate steps to mitigate any potential harm.

11. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify you of material changes via email or through our platform. Your continued use constitutes acceptance of the updated policy.

12. Contact Us

For questions about this Privacy Policy or our data practices, please contact us: