Privacy Policy

Last updated: August 2026 | Effective date: August 2026

AIGCVA ("AIGCVA", "we", "our", or "us") is committed to respecting and protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information about you ("you" or "your") when you access our website (the "Website"), our AI image and video generation application (the "App"), and any other products or services we provide (collectively, the "Services").

Except as expressly described below, this Privacy Policy does not apply to information collected by third parties — including other companies, websites, or applications — even where they are linked to or accessible through our Services.

Please review this Privacy Policy before using the Services. By using the Services, and where applicable under relevant law, you consent to the collection, use, and disclosure of information as described in this Policy. Under other legal frameworks, we may collect, use, or disclose your information on other appropriate legal bases.

If you do not agree with this Policy, please discontinue use of the Services.

1. Information We Collect

1.1 Information You Provide to Us

• Account information: email address, username, password credentials, and, where you sign in through a third-party provider, the basic profile information that provider shares with us.
• Prompts and creative inputs: the text prompts, parameters, style settings, and other instructions you submit to generate images or videos.
• Uploaded materials: images, videos, audio, documents, or other reference files you upload for generation, editing, or style reference.
• Generated content: the images, videos, and other outputs produced from your inputs, together with the associated generation records.
• Payment information: billing name, billing address, transaction records, and subscription status. Full payment card numbers are collected and processed by our third-party payment processors, not stored by us.
• Communications: the content of your support requests, feedback, survey responses, and any other correspondence you send us.

1.2 Information Collected Automatically

When you use the Services, we and our service providers may automatically collect:

• Device and browser information: browser type and user agent, operating system, device type, screen resolution, and language settings.
• Network information: IP address and derived approximate location (country or region level), and referring domain.
• Usage and log data: pages visited, features used, generation requests and their timestamps, session duration, clicks, errors, and performance metrics.
• Cookies and similar technologies: identifiers set through cookies, local storage, tags, and analytics SDKs.

1.3 Information From Third Parties

We may receive information about you from:

• Authentication providers, where you choose to sign in with a third-party account.
• Payment processors, which confirm transaction outcomes and subscription status.
• Analytics and advertising partners, which provide aggregated measurement and attribution data.
• AI model providers, which may return service status, moderation results, or error information related to your requests.

2. How We Use Your Information

We use the information described above to:

• Provide, operate, maintain, and improve the Services, including processing your generation requests and delivering the resulting outputs.
• Create and administer your account, authenticate you, and maintain your generation history and preferences.
• Process payments, manage subscriptions and free trials, and issue invoices or receipts.
• Provide customer support and respond to your enquiries.
• Monitor, detect, prevent, and investigate fraud, abuse, security incidents, and violations of our Terms of Service.
• Enforce content moderation and safety policies, including screening prompts, uploads, and outputs for prohibited content.
• Compile aggregated and de-identified statistics to analyse usage, measure performance, and inform product development.
• Communicate with you about service updates, security notices, and — where you have opted in or where otherwise permitted by law — new features and promotions.
• Comply with applicable laws, regulations, and lawful requests from public authorities.

2.1 Model Training

We do not use your prompts, uploaded materials, or generated outputs to train our own foundation models without your consent. Third-party model providers process your inputs to fulfil your requests and handle such data under their own terms and policies; where a provider offers an option to exclude API traffic from training, we seek to enable it. See Section 4.1 for details.

3. Legal Bases for Processing

Where the General Data Protection Regulation (GDPR) or a comparable framework applies, we rely on the following legal bases:

• Performance of a contract: to provide the Services you have requested, operate your account, and process payments.
• Legitimate interests: to secure the Services, prevent fraud and abuse, analyse and improve performance, and conduct ongoing business analysis. We carry out a balancing assessment to ensure our interests do not override your rights and freedoms.
• Consent: for optional cookies, marketing communications, and any other processing for which we specifically request your consent. You may withdraw consent at any time.
• Compliance with legal obligations: where processing is required to satisfy applicable law, regulation, or legal process.

4. How We Share Your Information

We do not sell your personal information. We may share information in the following circumstances:

4.1 AI Model Providers

The Services integrate third-party AI models. When you submit a generation request, the prompt and any uploaded reference materials necessary to fulfil that request are transmitted to the relevant model provider, which may include:

• OpenAI — for models such as gpt-image-2
• Google — for models such as Gemini Image (Nano Banana series)
• ByteDance / Volcano Engine — for models such as Seedream and Seedance

Each provider processes this data under its own privacy policy and terms. We encourage you to review those policies. Do not submit sensitive personal information, confidential material, or content you are not authorised to share.

4.2 Service Providers

We engage vendors that perform functions on our behalf, including cloud hosting and storage, content delivery, payment processing, analytics, email delivery, and customer support tooling. These providers may access information only as necessary to perform their functions and are bound by confidentiality and data protection obligations.

4.3 Legal and Safety Disclosures

We may disclose information where we believe in good faith that disclosure is necessary to comply with applicable law or legal process; to enforce our terms and policies; to detect, prevent, or address fraud, security, or technical issues; or to protect the rights, property, or safety of AIGCVA, our users, or the public.

4.4 Business Transfers

If we are involved in a merger, acquisition, reorganisation, financing, or sale of assets, information may be transferred as part of that transaction. We will take reasonable steps to ensure the recipient continues to protect your information consistent with this Policy, and will notify you where required by law.

4.5 Aggregated and De-identified Information

We may share aggregated or de-identified information that cannot reasonably be used to identify you, for purposes such as industry reporting, research, and marketing.

5. Cookies and Analytics

We use cookies and similar technologies to keep you signed in, remember your preferences, secure the Services, and understand how the Services are used.

The Website uses Google Analytics to collect aggregated usage statistics such as page views, session duration, traffic sources, and general geographic region. This data is used internally to analyse and optimise performance. You can learn more about Google's practices at Google's Privacy & Terms, and you may opt out using the Google Analytics Opt-out Browser Add-on.

Most browsers allow you to block or delete cookies through their settings. Blocking essential cookies may prevent parts of the Services from functioning correctly.

6. Data Retention

We retain information for as long as necessary to provide the Services and for the purposes described in this Policy, including:

• Account information: for the life of your account, and for a reasonable period afterwards to handle disputes, comply with legal obligations, and prevent abuse.
• Prompts, uploads, and generated content: for as long as they remain in your account, unless you delete them. Deleted items may persist in backups for a limited period before being overwritten.
• Transaction records: for the period required by applicable tax, accounting, and anti-fraud regulations.
• Log and analytics data: for a limited retention window, after which it is deleted or aggregated.

7. Data Security

We implement administrative, technical, and physical safeguards designed to protect information against unauthorised access, disclosure, alteration, and destruction, including encryption in transit, access controls, and monitoring. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us promptly of any suspected unauthorised use.

8. International Data Transfers

We operate globally, and information may be transferred to, stored in, and processed in countries other than your own, including countries whose data protection laws differ from those of your jurisdiction. Where required, we implement appropriate safeguards for such transfers, including standard contractual clauses.

9. Your Rights and Choices

Subject to applicable law, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your personal information or your account.
• Restrict or object to certain processing, including processing based on legitimate interests.
• Port your information to another provider in a structured, machine-readable format.
• Withdraw consent where processing is based on consent.
• Opt out of marketing communications at any time via the unsubscribe link or by contacting us.

To exercise these rights, contact us at aspxemail@gmail.com. We may need to verify your identity before responding, and we will reply within the period required by applicable law. You may also have the right to lodge a complaint with your local data protection authority.

10. Children's Privacy

The Services are not directed to children, and we do not knowingly collect personal information from anyone under the age of 18 (or the minimum age set by your local law for online services). If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

11. Third-Party Links and Services

The Services may contain links to third-party websites, applications, or services that we do not control. This Policy does not apply to those third parties, and we are not responsible for their content or privacy practices. Please review their policies before providing them with information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised "Last updated" date, and where required by law we will provide additional notice. Please check this page periodically. Where permitted by applicable law, your continued use of the Services after the effective date constitutes acknowledgement of the revised Policy.

13. Contact Us

If you have questions, requests, or concerns about this Privacy Policy or our information practices, contact us at:

• Email: aspxemail@gmail.com
• Website: https://www.aigcva.com

---

See also: Terms of Service · Acceptable Use Policy