CleoPic AI Privacy Policy for AI Picture Generation

Introduction

This Privacy Policy explains how this site and its operator ("we," "us," or "our") collect, use, store, and share information when you use CleoPic AI. It applies to the website, account features, image generation, payments, private Generated Assets, analytics, and support channels.

Information We Collect

Account Information

When you sign in with Google, we receive account information such as your name, email address, profile image, and Google account identifier. We create the local User, account, and Session records needed to operate your account.

Creative Inputs and Results

We process Prompts, reference images, selected models, supported generation settings, and other inputs you submit. We also store Generation Job status, Provider task references, Credit settlement records, Generated Asset metadata, deletion state, and the private files needed to deliver retained results.

When you use Optimize prompt, we send the text in its dialog to Kie, whose text model writes the suggested prompts. We store that text, the suggested prompts, and the one you choose for up to 180 days to provide the feature and improve the suggestions it writes. These records are deleted when you delete your account.

When you use Prompt from image, your browser sends a smaller copy of the picture you add to Kie, whose vision model writes the prompt. We do not store the picture. We store its file type and size, the prompt written, and whether you used it for up to 180 days to provide the feature and improve the prompts it writes. These records are deleted when you delete your account.

Unsubmitted local reference media stays in browser memory. During authenticated submission, files may be staged privately. Accepted Jobs retain the original reference files so you can review inputs and regenerate later. Image thumbnails are stored separately when the browser can decode them. Unaccepted staging files are temporary. The generation interface identifies supported inputs before submission.

Payments and Credits

Waffo Pancake processes Subscription and Credit Pack Checkout. We store the identifiers and signed facts needed to connect a payment, Subscription, refund, or dispute outcome to your account and to grant, freeze, restore, or revoke Credits and Plan access. We do not store complete payment card details.

Contact, Technical, and Usage Information

If you contact us, we process the name, email address, message, and correspondence needed to respond. Our hosting, security, and application systems may also process IP address, request time, browser or device information, requested URL, and error details. Configured analytics services may process page visits and interaction information.

Cookies and Browser Storage

Essential cookies support account Sessions, request security, and interface preferences such as the sidebar state. Better Auth uses cookies to keep you signed in and protect authenticated requests. The site uses local or session storage for limited interface state, including recent model choices and Generation completion notifications.

When Google Sign-in or optional Google One Tap is enabled, Google may set or read cookies under its own policies. Production configuration may enable Google Analytics or Microsoft Clarity. These services may use cookies or browser storage under their own policies. If a service is not configured, its script is not loaded.

Most browsers let you inspect, block, or delete cookies and site storage. Blocking essential storage may sign you out or reset saved interface preferences.

How We Use Information

We use information to:

create and secure accounts and Sessions;
validate inputs and submit requested image generation;
write the prompt suggestions and picture prompts you request and improve their quality;
show Job progress and deliver retained results to the correct User;
maintain Credits, Plan access, Checkout, billing, refunds, and disputes;
provide private playback, viewing, download, reuse, and deletion;
answer support requests and investigate technical problems;
prevent abuse, fraud, unauthorized access, and duplicate charges or Credit grants;
improve the service when analytics are configured; and
comply with legal obligations and enforce our Terms.

AI Processing Providers

Available image generation uses third-party processing services, including Kie APIs and supported model providers to create original outputs. We send the creative input, supported settings, technical Job references, and reference images needed to perform the requested operation. Cloudflare handles hosting, private storage, and image watermark processing. Providers process that information under their own applicable terms and privacy practices.

We do not intentionally send your Google profile or complete payment details as part of a Generation request.

We share information only as needed with service providers that operate the site, including Google for account access, Waffo Pancake for payment management, Cloudflare for hosting, storage, and image watermark processing, Kie and supported model providers for requested results, and configured analytics providers.

We may also disclose information when required by law, to protect Users or the service, to investigate fraud or security incidents, or as part of a business transfer. We do not sell personal information.

Storage, Retention, and Deletion

Account, Session, Credits, payment, and Generation records are stored in Cloudflare D1. Public profile avatars, private reference images, previews, and Generated Assets use Cloudflare R2. Private media is delivered through owner-checked application routes.

We retain information while needed to provide the service, maintain financial and security records, resolve disputes, or meet legal obligations. Deleting a result revokes its direct access immediately. Deleting a Job, including deleting its final result, releases that Job’s reference associations. Originals and previews remain private while another retained Job uses them; files no longer needed by any retained Job or active Provider lease enter background cleanup. Job and Credit audit records may remain for billing and security purposes. Account deletion immediately blocks private-media access and starts repeated cleanup of the User's generated and reference prefixes. Limited payment, fraud-prevention, dispute, backup, or legal records may remain where required.

Security

We use access controls, opaque callback and reference tokens, private storage paths, input validation, and other safeguards intended to protect information. No online service can guarantee absolute security.

Your Choices and Rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal information. You can manage supported profile and billing choices through account settings, control cookies through your browser, or contact us.

You remain responsible for having the rights, permissions, and consent needed to submit each Prompt, Reference Image, name, likeness, or other source material.