Privacy Policy

Last updated: August 3, 2025

Introduction

Welcome to Flux Krea (hereinafter referred to as "we," "Flux Krea," or "the Platform"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our AI image generation services, website, and related products. By using our services, you agree to the practices described in this Privacy Policy.

Information We Collect

1. Information You Provide Directly

When you use our AI image generation services, we may collect:

• Account Information: Your name, email address, profile information from authentication providers (Google, GitHub), and other details you provide during registration
• Payment Information: Billing details processed securely through third-party payment processors (Stripe) for credit purchases and subscriptions
• AI Generation Data: Text prompts, uploaded images, generation parameters, and preferences you submit for image creation
• Communication Data: Information you provide when contacting support, providing feedback, or participating in surveys
• Newsletter Subscriptions: Email addresses and communication preferences for our mailing lists

2. AI-Generated Content and Usage Data

• Generated Images: Images created through our AI services (temporarily stored for processing and delivery)
• Generation Metadata: Model selections, processing parameters, timestamps, and generation success/failure rates
• Credit Usage: Records of credit consumption, purchase history, and subscription details

3. Automatically Collected Information

When you visit or use our services, we automatically collect:

• Device and Technical Data: IP address, browser type, operating system, device identifiers, and screen resolution
• Platform Usage Analytics: Page views, feature usage patterns, session duration, and interaction data
• Performance Metrics: API response times, image generation completion rates, and service availability data
• Cookies and Tracking: We use cookies and similar technologies to enhance user experience and analyze platform usage

How We Use Your Information

We use the collected information for the following purposes:

1. Core AI Services

• Image Generation: Processing your prompts and input images to generate AI-created content
• Account Management: Maintaining your user profile, credit balance, and generation history
• Service Delivery: Providing access to different AI models and processing your generation requests
• Quality Assurance: Monitoring generation success rates and optimizing AI model performance

2. Platform Operations

• Payment Processing: Managing credit purchases, subscriptions, and billing through secure payment partners
• Customer Support: Responding to inquiries, troubleshooting issues, and providing technical assistance
• Security and Fraud Prevention: Detecting abuse, preventing unauthorized access, and maintaining platform integrity
• Legal Compliance: Meeting regulatory requirements and enforcing our Terms of Service

3. Improvement and Analytics

• Service Enhancement: Analyzing usage patterns to improve AI model selection and platform features
• Performance Optimization: Monitoring system performance and optimizing generation speeds
• Research and Development: Developing new AI capabilities and platform features (using aggregated, non-personal data)

4. Communications

• Service Updates: Notifying you of important changes, new features, or service maintenance
• Marketing: Sending promotional content, tutorials, and product updates (with your consent)

Information Sharing and Third-Party Services

We do not sell, rent, or trade your personal information. We may share your information in the following circumstances:

1. Essential Service Providers

• AI Infrastructure: Replicate and other AI model providers process your prompts and images for generation services
• Payment Processing: Stripe securely handles all payment transactions and billing information
• Data Storage: Supabase for user data and Cloudflare R2 for temporary image storage
• Email Services: Resend for transactional emails and communication
• Authentication: Google and GitHub for secure user authentication

2. Data Processing Safeguards

• All third-party providers are bound by strict data protection agreements
• AI generation data is processed securely and not used for training without consent
• Generated images are temporarily stored for delivery and then removed
• Payment information is handled exclusively by PCI-compliant processors

3. Legal and Safety Requirements

• Legal Compliance: When required by law, court order, or regulatory authority
• Safety and Security: To protect our users, prevent fraud, or address security threats
• Business Transfers: In connection with mergers, acquisitions, or asset sales (with user notification)

Data Storage and Security

We implement comprehensive security measures to protect your personal information and AI-generated content:

1. Technical Security Measures

• Encryption: All data transmission uses SSL/TLS encryption protocols
• Secure Storage: User data is stored in secure, encrypted databases with access controls
• API Security: All AI generation requests are processed through secure, authenticated endpoints
• Regular Security Audits: We conduct periodic security assessments and vulnerability testing

2. Data Handling Practices

• Payment Security: All payment information is processed through PCI-compliant providers (Stripe)
• Temporary Storage: Generated images are temporarily stored for delivery and then automatically deleted
• Access Controls: Strict employee access controls and authentication requirements
• Data Minimization: We collect and retain only necessary information for service provision

3. AI-Specific Security

• Prompt Privacy: User prompts are processed securely and not shared with unauthorized parties
• Content Filtering: Automated systems to detect and prevent generation of harmful content
• Model Security: AI models are hosted in secure, isolated environments

Your Rights and Choices

Depending on applicable laws in your region, you may have the following rights:

• Access: Obtain a copy of your personal information that we hold
• Correction: Update or correct your personal information
• Deletion: Request deletion of your personal information in certain circumstances
• Objection: Object to our processing of your personal information
• Restriction: Request that we limit the processing of your personal information
• Data Portability: Obtain an electronic copy of information you have provided to us

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days and may require identity verification for security purposes.

AI-Specific Rights

• Generation History: Access and download your AI generation history and metadata
• Prompt Data: Request deletion of stored prompts and generation parameters
• Content Removal: Request removal of generated images from our temporary storage systems

Cookie Policy

We use cookies and similar technologies to collect information and improve your experience. Cookies are small text files placed on your device that help us provide a better user experience. The types of cookies we use include:

• Necessary Cookies: Essential for the basic functionality of the website
• Preference Cookies: Allow us to remember your settings and preferences
• Statistical Cookies: Help us understand how visitors interact with the website
• Marketing Cookies: Used to track visitors' activities on the website

You can control or delete cookies by changing your browser settings. Please note that disabling certain cookies may affect your experience on our website.

Children's Privacy

Our services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you discover that we may have collected personal information from a child under 13, please contact us, and we will promptly take steps to delete that information.

International Data Transfers

We may process and store your personal information globally, including in countries outside your country of residence. In such cases, we will take appropriate measures to ensure your personal information receives adequate protection.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will post the revised policy on our website and update the "Last Updated" date at the top. We encourage you to review this policy periodically to stay informed about how we protect your information.

Contact Us

If you have any questions, comments, or requests regarding this Privacy Policy or our privacy practices, please contact us through:

• Email: [email protected]
• Website: Contact form available on our platform

We will respond to your inquiries within 48 hours during business days.

Data Retention

• Account Data: Retained for as long as your account is active or as needed to provide services
• Generation History: Stored for up to 12 months for service improvement and user access
• Generated Images: Temporarily stored for delivery (typically 24-48 hours) then automatically deleted
• Payment Records: Retained as required by applicable financial regulations
• Marketing Communications: Retained until you unsubscribe or request deletion