1 Information We Collect
We collect the following categories of information:
1.1 Information You Provide Directly
- Account information (email address, username, password, and any profile details you choose to provide)
- Payment and billing information (if you purchase paid features or subscriptions; processed by third-party payment processors)
- Content you submit, including text prompts, uploaded images, and other inputs
- Communications with us (support requests, feedback, survey responses)
1.2 Information Collected Automatically
- Device and technical information (IP address, device type, operating system, browser type, unique device identifiers, approximate location derived from IP)
- Usage data (features used, generation history, timestamps, interaction logs, performance data)
- Cookies, pixels, and similar tracking technologies (see Section 8)
1.3 Information from Third Parties
- Information from authentication providers (e.g., if you sign in with Google, Apple, or similar services)
- Analytics and security service providers
We do not intentionally collect sensitive personal data (such as precise geolocation, biometric data, health information, or special categories of data under GDPR) unless you voluntarily provide it in prompts or uploads. You should avoid submitting such information.
2 How We Use Your Information
We use the information we collect for the following purposes:
- To provide, operate, maintain, and improve the Service
- To generate, process, and deliver Generated Content based on your inputs
- To create and manage your account and authenticate users
- To process payments and manage subscriptions
- To communicate with you (service notifications, support responses, important updates)
- To monitor, detect, prevent, and address fraud, security issues, and violations of our Terms of Service
- To analyze usage patterns and improve our models, algorithms, and user experience (using de-identified or aggregated data where practicable)
- To comply with legal obligations and enforce our Terms
- To protect the rights, safety, and property of Aether Canvas, our users, and the public
We may use de-identified inputs and Generated Content to train, fine-tune, and improve our AI models. We do not use your personal information to train models in a way that allows re-identification of individual users where prohibited by applicable law.
3 Legal Bases for Processing
Where the GDPR or equivalent laws apply, we process personal data on the following legal bases:
- Contract performance: To provide the Service you requested
- Legitimate interests: To improve the Service, ensure security, prevent abuse, and analyze usage (balanced against your rights)
- Consent: Where required (e.g., certain cookies or marketing communications); you may withdraw consent at any time
- Legal obligation: To comply with applicable laws and respond to lawful requests
4 How We Share Information
We do not sell your personal information. We may share information in the following circumstances:
- Service providers: With trusted third parties who assist us (cloud hosting, payment processing, analytics, customer support, security). These parties are contractually obligated to protect the data and use it only for the purposes we specify.
- Legal and safety reasons: When required by law, court order, or governmental request, or when we believe disclosure is necessary to protect rights, safety, or property, or to investigate fraud or security issues.
- Business transfers: In connection with a merger, acquisition, financing, or sale of assets.
- With your consent: When you explicitly authorize us to share information.
We may share aggregated or de-identified data that cannot reasonably be used to identify you.
5 International Data Transfers
Your information may be transferred to, stored, and processed in countries other than your own, including the United States, Singapore, or other locations where we or our service providers operate.
When we transfer personal data from the European Economic Area, United Kingdom, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, or other lawful transfer mechanisms.
6 Data Retention
We retain personal information only for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law.
- Account information is retained while your account remains active and for a reasonable period thereafter.
- Generation history and inputs may be retained for a limited time to provide the Service, improve models (in de-identified form), and comply with legal obligations.
- We securely delete or anonymize data when it is no longer needed.
7 Security
We implement appropriate technical and organizational measures designed to protect your personal information against unauthorized access, loss, misuse, or alteration. These measures include encryption in transit, access controls, and regular security assessments.
However, no method of transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials.
8 Cookies and Tracking Technologies
We and our service providers use cookies, local storage, and similar technologies to:
- Keep you logged in and remember preferences
- Analyze usage and improve the Service
- Detect and prevent fraud and abuse
You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Service. We do not currently respond to “Do Not Track” signals.
9 Your Rights and Choices
Depending on your location, you may have the following rights:
Under GDPR / UK GDPR (EEA, UK, Switzerland)
- Access, rectification, erasure (“right to be forgotten”), restriction of processing, data portability, and objection to processing
- Withdraw consent at any time (where processing is based on consent)
- Lodge a complaint with a supervisory authority
Under CCPA/CPRA (California residents)
- Right to know what personal information we collect, use, and disclose
- Right to delete personal information
- Right to correct inaccurate information
- Right to opt out of the “sale” or “sharing” of personal information (we do not sell personal information)
- Right to nondiscrimination for exercising your rights
To exercise any of these rights, please contact us at [email protected]. We will verify your identity before responding and will reply within the timeframes required by applicable law.
You may also update certain account information directly in the Service or delete your account (subject to our retention obligations).
10 Children’s Privacy
The Service is not directed to children under 13 years of age (or the higher age required in your jurisdiction). We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete it promptly. If you believe a child has provided us with personal information, please contact us immediately.
11 Third-Party Links and Services
The Service may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those third parties. We encourage you to review their privacy policies.
12 Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Material changes will be notified through the Service, by email, or by other reasonable means. The “Last Updated” date at the top indicates when the Policy was most recently revised. Your continued use of the Service after the effective date of any changes constitutes acceptance of the updated Policy.
13 Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Email: [email protected]
For users in the European Economic Area, you may also contact our designated representative if one is appointed (details will be provided upon request).