Privacy Policy

1. Data we collect

• Account data: your Telegram user ID, username, first name and language, which Telegram passes to us when you use our bots or sign in with Telegram. If you create an account on the website, the login details you choose; passwords are stored only as secure hashes.
• Content: the images you upload, the masks and prompts you provide, the settings you choose, and the images and videos generated for you.
• Purchase data: the plan or credit pack, price, currency, payment method, invoice and transaction identifiers and the payment status. We do not accept bank cards and never receive card details. Cryptocurrency payments are processed by Trybit, which handles the wallet and transaction data needed for the payment.
• Usage and device data: IP address, browser and device information, pages and features used, actions in the app, the referral link or campaign that brought you to us, and timestamps.
• Messages you send to our support.

2. How we use your data

• to provide the Services: process your images, deliver results and keep your generation history;
• to manage your credits, subscriptions and payments;
• to enforce our Terms of Service, including automated checks against prohibited content, and to prevent fraud and abuse;
• to answer your requests and send service messages through our Telegram bots;
• to understand how the Services are used and improve them;
• to keep the Services secure and to comply with legal obligations.

Where the GDPR or a similar law applies, we rely on the performance of our contract with you, our legitimate interests in running a secure and working service, your consent (for analytics cookies where consent is required), and our legal obligations.

3. Who we share data with

We do not sell your personal data. We share it only with providers that help us run the Services, and only to the extent they need:

• hosting and infrastructure providers, including Cloudflare (network protection and file storage);
• cloud GPU providers such as RunPod, which run the models that process your images;
• a machine-translation provider, which translates text prompts into English;
• Telegram, which runs our bots, Telegram sign-in and Telegram Stars payments;
• Trybit (formerly CryptoCloud), which processes cryptocurrency payments;
• Google Analytics, which provides website usage statistics.

We may also disclose data when required by law or to protect the rights and safety of our users, other people or ourselves, and to a successor if the Services are transferred.

4. How long we keep data

• Images and videos (your uploads, masks and the results made from them): for accounts that have never made a purchase, photos are deleted automatically 3 days and videos 2 days after they are created. For accounts with purchases they are kept so that your history stays available, until you delete them or ask us to.
• Uploaded source images are always deleted together with the results made from them.
• Account data is kept while your account exists.
• Purchase records are kept for as long as accounting, tax and fraud-prevention requirements demand.
• Server logs are kept for a limited period for security and troubleshooting.

5. Cookies and analytics

The website uses cookies and similar storage to remember your language and keep you signed in, and Google Analytics cookies to measure usage. You can block or delete cookies in your browser settings; the website will still work, but you may need to sign in again.

6. Your rights

Depending on where you live, you may have the right to access, correct or delete your personal data, to restrict or object to its processing, to receive a copy of it, and to withdraw consent. To use these rights, including to have your images and account deleted, write to [email protected]. We may ask you to confirm that the account is yours, for example through Telegram.

You also have the right to complain to your local data protection authority.

7. International transfers

Our providers operate in different countries, so your data may be processed outside your country of residence. Where required, we rely on appropriate safeguards for such transfers.

8. Security

Data is encrypted in transit (HTTPS), and access to stored data is limited to the staff and providers who need it to run the Services. No system is completely secure, but we work to protect your data and to fix any issue we find.

9. Children

The Services are not for anyone under 18. We do not knowingly collect data from minors, and we delete such data and close the account as soon as we learn about it.

10. Changes to this policy

We may update this Privacy Policy. The current version is always published on this page with its date.

11. Contact

Nudifier.AI, email: [email protected].