Route/privacy
Updated2026-07-04
ScopeOne image at a time
01
Data we collect
We collect the information needed to run the Service: account identifiers (such as email and, if you sign in with Google, your Google account identifier), the story text, prompts, character notes, and reference images you upload, the images we generate for you, payment order metadata from our payment provider, support messages, safety reports, and technical logs such as IP address, device, and timestamps.
02
How we use data
We use your data to operate the Service, generate draft and final images, quote and settle Sparks, process purchases, respond to support, keep the Service secure, prevent fraud and abuse, enforce our policies, and comply with legal obligations.
We do not sell your personal data. We do not use your private Inputs or Outputs to train foundation models.
03
Who we share data with
We share data with service providers only to run the Service, under contracts that limit their use of your data:
- Paddle.com — Merchant of Record for payments and tax; processes your billing details (we do not store full card numbers).
- OpenAI — image generation provider; receives the prompt and reference data needed to generate an image.
- Cloudflare — hosting, content delivery, and object storage (Cloudflare R2) for your images.
- Authentication and email providers used for sign-in and account communications.
04
Storage, retention, and security
Your images are stored privately and served through short-lived signed links, not from a public bucket. We retain account, content, and transaction data while your account is active and as needed for legal, accounting, and safety purposes, then delete or anonymize it.
We use technical and organizational measures to protect your data, including access controls and audit logging of administrative access to user content, payments, and moderation cases. No method of transmission or storage is completely secure.
05
Your choices and rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise these rights by contacting us; we may need to verify your identity.
The Service is not directed to children, and we do not knowingly collect data from anyone under 18. Because we operate internationally, your data may be processed in countries other than yours, with appropriate safeguards.
06
Changes and contact
We may update this Privacy Policy; material changes will be posted with a new effective date. For privacy requests or questions, contact support@mangagic.com.
