Privacy Policy

Information we collect

We collect account information such as your email address, display name, profile image, and Google account identifier when you choose Google sign-in. We record session identifiers, account creation time, subscription status, credit balance, and an append-only history of credit purchases, usage, and refunds.

When you request an AI image, we process the prompt, selected aspect ratio, active model, optional uploaded reference image, generated output, generation status, and technical identifiers needed to complete the request. We may also collect IP address, browser and device information, timestamps, security signals, and request logs to operate the service, prevent abuse, enforce generation limits, and diagnose failures.

Payments are processed by Creem through a hosted checkout. We receive transaction and subscription details such as product, amount, currency, status, checkout identifier, subscription identifier, and billing events. We do not receive or store your complete payment-card number.

How we use information

We use information to authenticate accounts; operate text-to-image and image-editing requests; store and deliver outputs; maintain credit balances and generation history; process purchases, renewals, cancellations, and refunds; answer support requests; secure the service; meet legal obligations; and understand aggregate product reliability.

We do not train an image model using your prompts, uploaded images, or generated outputs. To perform a generation, the necessary input is transmitted to an AI generation vendor. Vendor processing is governed by its applicable service terms and privacy practices.

How information is shared

We share only what is reasonably necessary with service providers that host the site and data, generate images, process payments, provide account authentication, prevent abuse, or help us respond to support. These providers may include Cloudflare, an AI generation vendor, Google, Creem, and Turnstile-related infrastructure. We may also disclose information when required by law, to protect users or the service, in connection with a corporate transaction, or with your direction.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

Storage, retention, and security

Account and transaction records are kept for as long as the account remains active and afterward when reasonably necessary for tax, accounting, dispute, fraud-prevention, and legal obligations. Prompts, uploaded references, and outputs may remain in generation history until you delete them or request account deletion, subject to backups, legal holds, and records required to preserve credit and payment integrity.

We use access controls, encrypted transport, secure cookies, managed infrastructure, and least-privilege practices appropriate to the service. No internet service can guarantee absolute security. You should not place secrets, regulated data, or material you are not authorized to process in a prompt or upload.

Cookies and account sessions

Essential cookies keep you signed in, protect the authentication flow, and prevent request forgery. Local storage may be used for non-sensitive interface preferences. We may use privacy-conscious aggregate analytics, but we will update this policy before introducing non-essential advertising or tracking technology that materially changes the disclosures here.

Your choices and rights

You may ask to access, correct, export, or delete personal information associated with your account. You may unsubscribe from release notifications at any time and cancel a subscription to stop future renewals. Depending on where you live, additional rights may apply, including rights to restrict or object to processing and to appeal a denied request.

To make a request, email support@getflux3.com from the account address. We may ask for reasonable verification before acting. We will respond within the period required by applicable law.

Children, international processing, and changes

The service is not directed to children under 13, and we do not knowingly collect their personal information. Information may be processed in countries other than the one where you live, subject to safeguards required by applicable law.

We may revise this policy as the product or law changes. The effective date will be updated, and material changes may be announced on the site or by email where appropriate. Continued use after the new effective date means the revised policy applies to subsequent use.