Privacy notice
Updated 27 Oct 2026. Analytics and marketing are disabled. Our generation provider receives your submitted campaign brief and selected resized images when you choose Generate. Website analysis makes a server request to the public URL you provide.
Data currently used
The server stores account and session records, wallet and credit history, saved campaign briefs, generation job records, generated copy and images, recovery-code hashes and their creation or revocation records, and cookie preference events with a random consent identifier, category choices, notice version and time. Invited workspace access is available by invitation on the hosted site. Email registration requires a one-time verification code. Invited workspaces can link an email using a separate code sent to that mailbox; choosing the final password preserves the same account and balance. Verified email is required before generation or a credit purchase. Visitors can submit support tickets without an account. The configured mail provider sends the team your name, reply email, topic, message and ticket number. The visitor reply address is unverified. Automatic confirmations are sent only to verified account email addresses. Email password reset is available for eligible existing accounts. Necessary request metadata may be processed by the hosting proxy. Account data, briefs and generated results require authentication and are separated by account.
Private recovery codes
The server stores a one-way hash of your current recovery code rather than the code itself. A newly created or replacement code is sent to your browser so you can save it; there is no automatic browser storage of the code. Downloading it creates a private text file on your device. Successful recovery replaces the used code, invalidates older sessions and opens the same account with its existing data and balance. Recovery does not create another account or send your briefs, images or code to our generation provider.
Email password reset
When you request password reset for an eligible existing account, the configured mail provider receives its verified email address and a six-digit code for delivery. The server keeps code-validation and delivery records. Reset codes expire after ten minutes and are single-use. Your new password is submitted to this site, stored as a password hash and is not included in the email. Resetting the password revokes existing sessions and private recovery codes; it does not create an account or add credits.
Transactional email
The mail provider delivers email verification codes, welcome messages, password reset codes, password-change alerts, campaign completion or final-failure notices, and support confirmations. Messages contain the account email and the event details needed for delivery. Support requests are stored before notification; the configured team mailbox receives your name, reply email, topic, message and ticket number. Guest forms notify the team only; unverified visitor addresses do not receive an automatic confirmation. Code-validation and delivery records are stored by the server. These notifications do not enable marketing emails. Workspaces without a linked email have no deliverable account email and do not receive these messages.
Files and drafts
Selected files and previews stay in browser memory during preparation. Generation sends the submitted brief and selected images, reduced to a maximum of 1,600 pixels per edge and 2 MB each, to the project server and our generation provider. The server stores input images temporarily for that job and removes them when it completes, fails or is recovered after a restart. PDF contents are not extracted or sent. Reference names, types, sizes and roles can be included in saved and exported briefs. Signed-in test and verified accounts can save full campaign briefs and access their own generated copy and images. JSON brief exports contain metadata rather than input image bytes; PNG downloads contain your generated image. There is no automatic local storage of briefs.
Website analysis
When you submit a URL, our server reads one public HTML page and extracts its title, description and readable text. The destination website can see the outbound request. This does not crawl the entire domain or read private pages. A source snapshot is stored for your account and can be used for a campaign for up to 24 hours. The server uses your stored snapshot rather than accepting replacement facts from the browser. Choosing Generate sends the selected website facts to our generation provider as part of the campaign brief; this scenario does not send uploaded image references from other scenarios. Expired source snapshots are cleaned up when your account starts another website analysis; expiry is not a guarantee of immediate deletion of every copy or saved brief.
Pending operator information
The operator label is test test. The configured support address is shown on the support page. Final retention periods and deletion procedures must be confirmed before commercial launch. Test sessions expire after 24 hours, but account, wallet, saved brief, generated result and consent records are not automatically promised to be deleted then. Input photo cleanup does not delete generated output images or campaign records. Export work you want to keep and contact the project owner directly about this test workspace.