Privacy policy

Scope

This policy applies to Art Studio by Brainchild at art.activ8.digital, including accounts, billing, image generation, and video generation.

Information we collect

• Account information: name, email address, profile image, email-verification status, password hash, and linked sign-in methods.
• Creative content: prompts, uploaded reference images, selected settings, generated images and videos, and associated technical metadata.
• Billing information: Stripe customer and subscription identifiers, payment status, price, payment-method brand, and last four digits.
• Usage information: credit transactions, generation status, provider usage, timestamps, errors, and safety-budget records.
• Technical information: session identifiers, IP address, user agent, security events, and rate-limit information.

Stripe handles complete card details. Art Studio by Brainchild does not receive or store complete card numbers.

Google account data

When you choose Google sign-in, Google provides your name, email address, profile image, verification status, and account identifier.

Our authentication system may store OAuth tokens and consented scopes server-side to maintain or link your sign-in method.

We use Google account data only to:

• authenticate you and protect your account;
• create and display your Art Studio by Brainchild identity;
• create your billing customer record;
• send account, security, billing, and service messages; and
• respond to support or privacy requests.

We do not request access to Gmail, Google Drive, Google Calendar, contacts, documents, or other Google service content.

We do not sell Google user data, use it for advertising, or use it to train generative-AI models.

Google profile data is not included in prompts sent to our AI generation provider.

Art Studio by Brainchild's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

How we use information

• provide accounts, credits, billing, and creative generation;
• deliver, download, and display generated media;
• process payments and maintain transaction records;
• secure the service, prevent abuse, and enforce usage limits;
• diagnose failures and improve reliability;
• communicate about accounts, purchases, and service changes; and
• comply with legal obligations and enforce our Terms.

We do not include advertising trackers or third-party analytics in the current service.

How we share information

We use service providers only where needed to operate Art Studio Studio:

• Google completes the optional Google sign-in flow.
• Neon hosts the application database.
• Vercel hosts the application and privately stores uploaded and generated media.
• Stripe receives your name and email for billing and processes payments.
• Resend receives your email address and message contents for transactional email.
• Upstash processes limited request identifiers for distributed rate limiting.
• BytePlus ModelArk receives submitted prompts, chosen settings, and reference media needed to create requested outputs.

ModelArk does not receive your Google profile merely because you used Google sign-in.

We may disclose information when legally required, to protect users, or during a corporate transaction with privacy protections.

We do not sell personal information.

Cookies and local storage

We use essential authentication cookies to maintain sessions and protect signed-in areas.

Your browser stores only your light-or-dark theme preference in local storage.

Disabling essential cookies prevents account sign-in and authenticated features from working.

Retention and deletion

• Account and Google profile data remain while your account is open.
• Prompts, attached inputs, outputs, and credit records remain while needed to provide your account history.
• Unattached reference uploads are scheduled for cleanup after 24 hours.
• Security, billing, tax, fraud-prevention, and dispute records may remain where legally or operationally necessary.
• De-identified provider-cost records may remain after the associated user identifier is removed.

Delete your account through Settings → Delete account. This removes the active account and its Google sign-in connection.

You may also request access, correction, or deletion by emailing privacy@activ8.digital.

You can revoke Google access from your Google Account connections. Revocation stops future Google authentication but does not itself delete your Art Studio by Brainchild account.

Residual copies may remain temporarily in secured backups and processor systems before routine deletion or legal-retention expiry.

Security and international processing

We use HTTPS, private media storage, access controls, signed sessions, and least-privilege service credentials.

No internet service is completely secure. Please use a unique password and protect access to your Google account.

Our providers may process information outside your country under their applicable safeguards and legal obligations.

Your choices and rights

You may use email-and-password sign-in instead of Google where that option is available.

Depending on your location, you may have access, correction, deletion, restriction, objection, portability, or appeal rights.

We may verify your identity before completing a request and will respond as required by applicable law.

Children

Art Studio by Brainchild is not directed to children under 13 or the higher minimum age required locally.

Contact us if you believe a child provided personal information without valid permission.

Changes

We will update this page and its effective date when our data practices materially change.

Where required, we will provide additional notice or request consent before using data for a new purpose.

See the Terms of Service governing your use of Art Studio by Brainchild.