Account data (email, name, avatar) via our sign-in provider; the images you upload and the outputs you generate; generation settings and prompts; credit and billing records; and standard service logs (timestamps, request metadata, error traces). Payment card details are handled by our payment processor and never touch our servers.

To run the service: generating your images through model providers, storing your library, metering credits, preventing abuse, and debugging failures. Prompts are sent to the model provider that renders your request. We do not use your uploads, prompts, or outputs to train models, and we do not sell or share them for advertising.

We rely on processors to operate: authentication (Clerk), database and realtime (Supabase), file storage (Cloudflare R2), model inference (fal.ai and the model providers it hosts), payments (Stripe), and hosting. Each receives only what its role requires.

Share links make a specific asset viewable by anyone with the unguessable URL until you revoke it. Referral links associate a sign-up with your account. Nothing in your library is public by default.

Your content stays until you delete it. Deleted assets are recoverable for 30 days, then purged from storage. Deleting your account (Settings → Security, or by deleting your sign-in account) schedules everything — library, boards, logs tied to you — for purge after a 30-day grace window, during which you can restore it.

Content is stored in private buckets served through short-lived signed URLs (15 minutes or less). Database access is row-scoped per user and enforced at the database layer. Webhooks from our providers are signature-verified.

You can export your assets from the Library at any time, correct your account details in Settings, and delete your account entirely. Depending on where you live you may have additional statutory rights (access, portability, objection); write to us and we will honor them.

Privacy questions or requests: sales@lumenworks.app.